Skip to content

Platform
Explore
ComplianceAssuranceFrameworksAudits and filingAsk Eri
What you do with dataThe activity register, in plain words.Why you hold dataThe lawful basis behind each activity.ConsentCaptured and withdrawn, both timestamped.RequestsIntake to answer, and how long each person waited.GrievancesComplaints, and how they were resolved.Policies and noticesVersioned, and who saw which one.Children and ageAge checks where the Act demands them.Who touches your dataProcessors, and what they may do with it.Data leaving NigeriaEvery transfer with its safeguard basis.PeopleWho is in your workspace and what they see.
ComplianceThe registers, kept as you workTen registers the Commission can ask for at any time.Learn more
What you are held to9 managed, 18 recognised, 4 nothing certifies.How you protect itSeventeen controls, ringed by their real state.How long you keep itRetention and deletion, per category.IncidentsThe 72 hours, from the moment you knew.Impact assessmentsHigh-risk processing, actually assessed.Risk and vendorsTreatment queues and supplier diligence.
AssuranceState, not a scoreThree gaps, eleven partial, three met — published as it is.Learn more
NDPA 2023The only one that is actually the law.GAID 2025Which tier you are, and what it costs.ISO/IEC 27001Certified security, on evidence you have.ISO/IEC 27701The privacy extension. Needs 27001 under it.SOC 2 Type IIA period, not a badge. Attested.ISO/IEC 42001AI management. The model decided — nobody can say what it weighed.GDPRNo certificate exists. Self-assessed, dated.PCI DSS v4.0Card data, and where the scope line falls.Bring your ownA bank circular or a buyer questionnaire.
Every oneFour we refuse to fake9 managed, 18 recognised, and the claims we will not print.Learn more
What you fileThe annual return, assembled from your registers.What your auditor foundFindings, and what actually closes them.Letters from the NDPCRegulator correspondence, kept in one place.Your DPOThe person the Act obliges you to appoint.NDPC registrationYour registration, and whether it holds.Audit trailWho changed what, and when they changed it.One person, everywhereEvery record you hold about one human being.Document requestsScoped access, granted with consent.
FilingThe return, assembledNothing typed twice — the pack is built from what you already keep.Learn more
Ask EriPlain answers, with every claim cited.Your work todayWhat is yours to do, and what is waiting on others.OverviewThe whole posture on one page.IntegrationsWhat Asiri reads — and what it refuses to.Trust centreA public page generated from your registers.Deployment optionsShared, dedicated, in-country or your own metal.Groups and subsidiariesOne invoice, separate registers, no shared reads.
EriIt cites, or it says nothingNo invented sources, no confident guesses.Learn more
Solutions
Explore
By roleBy industryMarketplace
Legal and complianceKeep the registers the Commission will ask for.DPOs and privacy leadsRun the whole programme from one place.DPCO practicesReview evidence instead of assembling it.AuditorsA scoped workspace instead of email attachments.Executives and GCsA dated dossier for the board.EngineeringConnectors, webhooks and an API.
Built for youOperators and professionalsFrom first-time founders to fifty-client practices.Learn more
Fintech and paymentsCBN and NDPC expectations, stacked.Health and HMOsPatient data is sensitive under the NDPA.HR and SaaSEmployee data across every client you serve.E-commerceHigh-volume consumer data, NDPC-registered.
By industryYour regulator, your buyersSector obligations and the proof buyers ask for.Learn more
Find helpLicence-verified DPCO firms and individual DPOs.A practice profileTheir record, measured rather than claimed.List your practiceFree to apply, free to be listed.DPCO pricing₦3m a year, plus ₦150k per client, per year.
MarketplaceEvery licence read off the registerBy a person, on the NDPC portal, with the evidence kept.Learn more
Resources
Explore
LearnFree tools
Questions and answersForty-four, grouped, nothing gated.InsightsGuides, checklists and enforcement analysis.Cookie consent templateA banner that produces a defensible record.Release notesEverything shipped, including what broke.Report a vulnerabilityScope, bands in naira, and safe harbour.An article, readReading rail, sources and two bylines.NDPA glossaryEvery term the Act and GAID actually use.Framework crosswalkOne control, mapped across frameworks.Trust centre demoSee exactly what your buyers will see.
InsightsThe NDPA knowledge baseGuides, checklists and enforcement analysis.Learn more
Penalty calculatorThe floor, 2% of turnover, and which one wins.Readiness checklistRun the gap list before you commit to a date.Trust operationsLive availability and incident history.Developer docsConnectors, webhooks and the REST API.
Free toolsStart without signing upPenalty calculator, glossary, readiness pack.Learn more
Company
Explore
CompanyTrust
Our storyNDPA-native, built in Lagos.CareersHelp build Nigeria’s trust infrastructure.Talk to usWe work out your tier before anything else.PressCoverage and announcements.
CompanyBuilt in LagosNDPA-native from the first line of code.Learn more
Trust and securityOur own posture, in the open.Legal centreTerms, privacy, DPA and sub-processors.Trust operationsLive availability and incident history.Vulnerability disclosureReport a security issue to us.
TrustOur own posture, in the openResidency, sub-processors and system status.Learn more
Pricing

☰✕

Platform
Compliance
Assurance
Frameworks
Audits and filing
Ask Eri
Solutions
By role
By industry
Marketplace
Resources
Learn
Free tools
Company
Company
Trust
Pricing

Start free→Sign in

That link is incomplete

The request is identified by the link itself, and this one arrived without it. Open the link from the email again, or start a new request.

The register reads your systems, so the answer you file is the answer that is true. Built in Lagos for the Act as it is actually enforced.

Talk to us→Free readiness check→

Platform

How Asiri works Ask Eri Integrations Audit workspace Document requests Trust operations Evidence engine Trust centre Risk and vendors

What you keep

What you do with data Why you hold data Consent Requests Policies and notices Data leaving Nigeria Incidents Grievances Children and age Who touches your data How long you keep it People and access One person, everywhere Impact assessments

Audits and filing

What you file What your auditor found Letters from the NDPC Your DPO NDPC registration Audit trail

Frameworks

Every framework NDPA 2023 GAID 2025 ISO 27001 SOC 2 ISO 42001 GDPR PCI DSS Custom frameworks

Marketplace

Find help A practice profile List your practice For DPCO firms Fintech Health and HMOs HR and SaaS E-commerce

Company

Our story Careers Pricing Talk to us Questions and answers Insights Release notes Cookie consent template Report a vulnerability An article, read NDPA glossary Penalty calculator Trust and security Trust operations Deployment options Groups and subsidiaries Legal centre

One finding, once a month

No news roundup. One thing that broke, and how it was found.

Email

One field. Nothing else is asked for.

Every register runs in af-south-1, Cape Town. For a product about cross-border discipline, running in Ireland would be indefensible.

14 Tiamiyu Savage, Victoria Island, Lagos · Mon–Fri, 09:00–18:00 WAT

Legal centre Terms Privacy DPA Sub-processors Cookies Ask what we hold about you System status Vulnerability disclosure security@asiri.ng

© 2026 ASIRI Compliance Ltd · RC 9545197 · Lagos, Nigeria. All rights reserved.

Frameworks Asiri manages for you — not certificates we hold

NDPA2023GAID2025ISO27001SOC 2TYPE IIGDPRMAPPED