Built for Nigerian DPCOs

NDPA compliance,
drafted and approved.

  • NDPA 2023
  • DPIA
  • CAR readiness
The problem

Compliance work shouldn't livein Word, Excel and WhatsApp

Rebuilt for every client

The same data map, RoPA, DPIA and policies are recreated from scratch each time, and drift out of sync.

Deadlines tracked by hand

The 72-hour breach window, DSAR deadlines and the annual CAR are followed up across dozens of clients by memory.

Generic AI isn't defensible

Chat tools don't know your client's processing activities or evidence, or Nigerian regulatory specifics.

What's inside

One workflowfor every NDPA obligation

Each obligation is a guided workflow with structured data underneath, so every record feeds the next.

Onboarding and data mapping

A questionnaire your client fills on their phone builds the data inventory and flags likely major-importance status.

RoPA builder

Processing activities proposed from the data map, kept current in one living register.

DPIA workflow

Seven guided steps with likelihood × impact scoring, review, approval and locked versions.

Policies and notices

Privacy Notice, Data Retention Policy and Consent Form, pre-filled from the client's own data.

Breach management

A 72-hour countdown from awareness, with draft notices to the NDPC and to affected people.

Data subject requests

Every request logged with its 30-day deadline, a drafted response and a record of what was sent.

Evidence and CAR readiness

Request evidence from clients, accept or reject it, and watch a readiness score across five categories.

Compliance calendar

Breach, DSAR, DPIA review, evidence and filing deadlines for every client in one list.

The copilot

Pencil untilit's ink

The copilot drafts DPIA sections, policies, breach notices and DSAR responses from the client's structured data. Every draft stays marked until a Lead Consultant approves it, and every step is logged.

  1. AI draftCopilot drafts from the client's data
  2. Lead reviewA qualified person edits and checks
  3. ApprovedLocked as a version, with who and when
  4. Client sign-offSigned with a one-time code
Built for DPCOs

Made for howDPCOs actually work

Many clients, one dashboard

Status, open gaps, overdue work, active breaches and readiness for every client, plus one queue of everything waiting for your review.

Your team, the right access

Firm Admins, Lead Consultants and Associates. Associates see only the clients they're assigned to, and only leads can approve.

A portal for your clients

Client contacts answer questions, upload evidence, sign documents, report breaches and log requests from their phones.

72hBreach notice window (NDPA s.40)
30daysDefault DSAR response period
100%AI drafts approved by a person
5CAR readiness categories
For independent DPOs

Certified DPO?Get paid work through DPO Copilot

Work on real NDPA engagements with DPCO firms, without building a firm of your own.

  1. Sign inCreate your DPO profile and show your credentials.
  2. Pick a DPCOChoose the firm you want to work with.
  3. Send a proposalSet out what you'll take on and your fee.
  4. Get tasksWork on assigned client tasks inside the same guided workflows, reviewed and logged.

Paid directly by the firm

You agree your terms with the DPCO, and they pay you straight.

No tools to buy

RoPA, DPIA, breach and DSAR workflows are ready the moment you're assigned.

Build a track record

Every task you complete is logged, so your work speaks for you.

Our team

The people behind DPO Copilot

  • Portrait of Anya VictorAnya VictorFounder & CTO
  • Portrait of Gift PaulGift PaulGrowth Lead
Meet the team
Pilot

Jointhe pilot

We're starting with a small group of DPCO firms. Bring your existing client registers and we'll help you get your first client to an audit-ready file.