NDPA compliance,
ready when it matters.
Run your own NDPA baseline. Find out in 90 seconds whether you're a Data Controller of Major Importance, get a defensible picture of where you stand, and bridge to a DPO or DPCO the moment you actually need one.
Every DPO duty in one workspace — ROPA, DPIAs, breach timers, the SADPR — plus a DSAR agent that drafts responses across departments. Manage a single in-house mandate, or a whole portfolio of clients.
See exactly what your clients do with personal data. A 10-module audit stack, a live evidence timeline, AI analysis, and a defensible CAR you file straight with the NDPC.
From signup to audit-ready. Without hiring anyone yet.
Adil runs the GAID 2025 triage, tracks the baseline the NDPA actually requires, and tells you plainly what you must do — and what you don't.
One mandate. One workspace. Every register.
Every NDPA register, a DSAR agent, and an AI collection agent that drafts the busywork for your review — for one organisation, or a whole book of clients.
From engagement letter to signed report. In one workspace.
Wire each client in once. Every answer, every uploaded artefact, every rules-engine decision is captured, scored, and ready to defend in front of the NDPC.
Your workspace. Honest about where you stand.
Your workspace. The whole mandate, running.
The workspace. Watching it all.
Everything the NDPA asks. Nothing it doesn't.
need a DPO.
tracked & free.
when you scale.
The whole mandate. One workspace.
in one place.
the busywork.
or a hundred.
Three things, done well. Nothing else.
not assertions.
survives scrutiny.
client signs.
Auditor-grade from day one.
Whoever signs the report, Adil maintains the audit trail, versions every finding, and exports a complete, defensible package — ready for the NDPC.
72-hour breach workflow
Pre-built breach-notification runbook. Trigger a notification draft, assign owners, timestamp the chain — the regulator sees a defensible timeline, not a frantic email.
Versioned evidence chain
Every uploaded artefact is hashed, versioned, and bound to the answer it supports. Re-runs preserve history. If the client claims they updated the DPA last month, you can prove they didn't.
Exportable audit package
Generate signed PDF + JSON + evidence ZIP for any engagement, date range, or finding. NDPC-ready format, one click. Hand it to the regulator, hand it to the next DPCO.
Pricing for where you sit. Free to start, every role.
No per-audit fees, no per-evidence surprises. The baseline duties the NDPA requires are never paywalled — you only pay to scale.
- Plain-English DCMI verdict
- ROPA — up to 3 entries
- Gap self-check
- Everything in Free, plus:
- Unlimited ROPA + notices register
- Staff training log & on-site inspections
- Breach log — 72-hour NDPC timer
- Vendor / processor register
- DPIA builder
- Everything in Pro, plus:
- Connect your repo — auto-ROPA from code
- CI compliance feedback on every pull request
- Continuous data-map & cross-border flags
- Signed CAR technology evidence
- Your source never leaves your CI
- ROPA — up to 3 entries
- Core registers
- Gap self-check
- Internal inspections
- No DSAR agent
- Unlimited entries
- DSAR Fulfilment Agent
- AI collection agent + review inbox
- SADPR · DPIA · breach · vendors
- PDF export · full DPCO connection
Practice ₦300k · 15 clients
Firm ₦640k · 40 clients
Enterprise ₦1.2m · unlimited
- Per-client toolboxes
- Compliance rollup & risk bands
- Marketplace profile
- Per-client DPCO handoff
- 15 client engagements
- The full 10-module audit
- AI analysis
- CAR generation & filing
- Multi-assignee collaboration
- Audit-trail export (PDF + JSON + ZIP)
- Everything in Professional, plus:
- 50 client engagements
- 5 seats
- Priority support
- White-labelled client portal
Straight answers on NDPA compliance.
Do I need a DPCO if I'm a small startup?
Not always — but if you process personal data at any meaningful scale, you'll need NDPA-compliant documentation, and a licensed DPCO is what files your Compliance Audit Return (CAR). Adil matches you with the right one and runs the audit on one platform.
How is NDPA different from GDPR?
The NDPA 2023 mirrors many GDPR principles (lawful basis, data-subject rights, breach notification) but has Nigeria-specific obligations — DPCO licensing, the CAR filing, DCPMI registration, and the GAID 2025 guidelines. If you're GDPR-aware, the concepts will be familiar; the filings and authorities differ.
What is a Data Controller / Processor of Major Importance (DCPMI)?
A DCPMI is an organisation that processes personal data above thresholds set by the NDPC (by volume or sensitivity). DCPMIs carry extra duties — including registration and the annual CAR. The readiness assessment helps you figure out whether you qualify.
How long does NDPA compliance take?
For a startup with a forcing function, a focused engagement is typically 4–6 weeks to due-diligence-ready, faster if you already have a DPO and core documentation. Your readiness report gives you an estimate based on your actual gaps.
What happens if I miss the CAR filing deadline?
There is a grace period after the headline deadline, after which late filing attracts a surcharge and enforcement risk. The point isn't a single date — it's not letting the grace period lapse. Adil helps you file before it does.
Can my external counsel or DPCO use Adil?
Yes. Adil is built for licensed DPCOs and Consultant DPOs to run their engagements — your counsel can work alongside you on the same platform, and your compliance data transfers when you connect.
How does Adil compare to hiring a law firm or consultant?
Adil isn't a replacement for expertise — it's the infrastructure that expertise runs on. You still work with a licensed DPCO/DPO, but the audit, evidence, ROPA, SADPRs, and CAR are produced on one platform instead of across spreadsheets and email.
How does Adil handle data-subject requests (DSARs)?
Every data-subject request — access, erasure, correction, objection — runs as a tracked case against the NDPA's 30-day clock. Your staff log requests through a simple intake link, the agent benchmarks each milestone and flags the DPO the moment one slips, fans retrieval tasks out to the right departments, and keeps an immutable evidence trail for your CAR. It's included in DPO Professional.
The operating system for
Nigerian data compliance.
For organisations getting compliant, in-house and Consultant Data Protection Officers, and licensed DPCOs — every NDPA 2023 and GAID 2025 obligation, one platform.