NDPA modules · Audit trail
He left the company in April. He deleted this in June.
Every entry here carries a reason somebody typed. One does not, and it was made by an account that should have been closed two months earlier. A log that records what changed is a log; one that records why is evidence.
- EriAssistant24 Jul · 16:42
Noticed something about Agent app events
The API key expired 9 days ago, so this register is being described from memory.
- Tunde AdeyemiDPO24 Jul · 11:05
Changed the criticality of Kuda Collections Ltd
mediumcriticalA Nigerian supplier with no written terms is as serious as one abroad.
- Blessing UcheGrowth lead16 Jul · 17:55
Changed the legal reason for Marketing to lapsed customers
business interestnothing recordedRemoved while the balancing test is redone. Nobody re-recorded it.
- Adaeze NwosuPeople lead9 Jul · 16:20
Changed the contract state of Lagos Data Centre Services
in forcelapsedDestruction certificates stopped arriving in April.
- Musa DanjumaFormer staff11 Jun · 16:09
Deleted the activity Winback SMS campaign
recordeddeletedNo reason given. He left the company in April.
Append-only. Nothing on this trail can be edited or removed, including by us.
ACT-030 · marketing to lapsed customers
Two edits, two days apart, and a letter from the Commission
Nobody did anything reckless. The lawful basis was changed from consent to business interest for a defensible reason, then removed while the balancing test was redone — and never put back. Forty thousand people kept receiving email against a record that said nothing at all.
Without a trail this is unknowable. With one, it is four lines and a name.
- 14 Jul · 12:11Tunde Adeyemi
Legal reason changed from consent to business interest
Re-asking forty thousand existing customers would be disproportionate. A defensible call, recorded with its reasoning.
- 16 Jul · 17:55Blessing Uche
Legal reason removed entirely
Taken out while the balancing test was redone. Nobody re-recorded it, and nothing stopped the campaign from sending in the meantime.
- 18 JulHalima Sani
She complains that you never stopped
Her objection had been outstanding since 22 June. The activity she objected to now had no lawful basis at all.
- 14 Jul → todayNDPC
A letter arrives, three days left to answer
Fix the activity or answer the same letter again. The trail is what tells you which edit to undo.
Five things every entry carries
A timestamp proves something happened. It does not defend it.
An auditor testing whether a decision was reasonable needs the reasoning, and the reasoning is only honest if it was captured at the time. Asiri asks for it at the moment of the change, when it costs nothing, rather than at the audit, when it costs everything.
Who, by name and role
Not a user ID. Musa Danjuma, former staff — which is the detail that turned one entry into an access-control finding.
What changed, field by field
The old value and the new one, both kept. “Updated the record” is not an audit entry.
Why, in their own words
Asked at the moment of the change. Reconstructed reasoning is a defence; captured reasoning is evidence.
Whether it mattered
Significant changes are flagged, so an auditor reading a year of entries can find the eleven that decide anything.
Append-only, permanently
No edit, no delete, no exception — including for us. A trail that can be tidied is a trail nobody should believe.
Your auditor is on your trail, not theirs
Everyone who looked, including the people you hired to look
A firm auditing you keeps its own working papers. That is theirs. What they read inside your registers is yours — so it is recorded here, where you can see it, rather than only in a file you would have to ask for.
Chidi Anozie
Partner, Veritas · DPCO
Read only · nothing changedOpened your activity register while assembling the 2026 return, then the supplier register — checking the three suppliers with nothing in force. That read became the finding in the evidence request.
Amaka Obiora
Senior analyst, Veritas · DPCO
Read only · nothing changedOpened one customer record to test whether an access request could be answered in full. It could not — and the test itself is on your trail, including which record she chose.
Chidi Anozie
Partner, Veritas · DPCO
Rejected your answer on DPO independence: the officer also owns fraud operations, which is a self-review conflict rather than an independent appointment. The rejection is recorded here, not only in their file.
Ibrahim Sanusi
Fractional DPO · external
Read only · nothing changedOpened the request register under engagement ENG-005. He can reach six registers of nineteen and every one of those reads is logged.
Asiri
The platform itself
Read only · nothing changedSupport access is time-boxed, reason-bound and appears here under our own name. If somebody from Asiri opened your register, you find out from this page rather than from us.
The fractional DPO sees six registers of nineteen — the ones his engagement covers. Scope is enforced by the credential, and every read he makes inside it lands here anyway.
Eri is on it too
An assistant that acts without leaving a record is not an assistant
Eri appears on the trail under its own name, with the same fields as anybody else. When it deletes 1,412 support conversations on a retention schedule, that is an entry with a reason and a proof. When it notices something, that is an entry too — because a finding nobody can date is a finding nobody can act on.
Six of the eight things Eri did this month were observations rather than changes. It says so.
Eri · this month
Noticed the Segment key had expired
24 JulNine days of that register being described from memory rather than read.
Deleted 1,412 support conversations
23 JulScheduled retention run. Proof kept for the audit return.
Noticed Halima Sani was still in the audience
21 JulShe withdrew consent on 22 June. Two systems disagreeing is the finding.
Noticed 31 accounts stating an age under 18
11 JulAll through agent sign-up, no parental consent held for any of them.
The trail is the only part of Asiri nobody can edit
Not your admin, not your auditor, not us. Which is what makes it worth anything at all when somebody finally asks who changed the record and why.