Data protection compliance.
Less input. A stronger record.
Bring your NDPA records, evidence and reviews into one workspace. Estreat reuses supported facts, prepares report drafts and screens processing changes. Your team reviews the sources, supplies missing context and makes decisions.
For business owners, data protection officers and governance teams. Built around NDPA 2023 and GAID 2025.
- S2·AGovernance and accountability
- S2·BSecurity of processing
- S2·CRights, risk and incidents
- S2·DThird parties and transfers
- EVDEvidence attached per answer
Illustrative pack. A licensed DPCO audits and files.
Where do you need to start?
I need to know where we stand.
Start with five questions about your governance, records and audit evidence.
Check your readinessI am preparing for an audit.
Understand the return, organise your evidence and prepare for your DPCO review.
Explore CARPathI need a better way to manage it.
See how Estreat brings processing, risk, rights and evidence into one working record.
See the platformOur automation target
At most 10% manual input.
Collect facts from their sources, reuse them across your compliance work and ask people only for missing context, exceptions and decisions. This is the target we are building toward; a 90% input reduction has not yet been measured across completed customer workflows.
See what is available and what comes nextWhen the question comes,
have the record ready.
An audit. A customer review. A request from a data subject. The answer starts with knowing what you do and being able to show it.
Processing records
Know what data you hold, why you use it, where it goes and when to delete it.
Risk and impact
Document high-risk processing, mitigations and the decisions behind your assessments.
Rights and incidents
Keep requests, breach decisions, response owners and deadlines on the record.
Audit evidence
Bring policies, training records and processor agreements into your audit preparation.
Your annual return starts with the work you do all year.
CARPath connects audit preparation to the records behind it. Use GAID Schedule 2 to organise the answers, identify missing evidence and prepare for review with a licensed DPCO.
See how CARPath worksKeep the record
Document your processing activities, decisions and responsibilities.
Find the gaps
Review your answers and the evidence needed to support them.
Prepare for review
Prepare an organised pack for the applicable audit and filing route.
Estreat provides software. The usual filing route is through a licensed DPCO, except as otherwise approved by the Commission under GAID article 10(14).
A useful first step.
Even before we talk.
Take the free NDPA readiness check. Five questions turn uncertainty into a practical list of records and procedures to review.
Find my starting pointNo email required. Practical guidance, with no claim of certification.
- Governance and accountability
- Processing records
- Risk and impact assessments
- Rights and breach response
- Audit evidence
Make sense of the requirements.
Practical Nigerian data protection guides, with references to the Act and the Commission’s guidance.
GAID 2025, explained
Understand the directive behind your compliance programme.
Your first processing register
What to record, who should own it and how to keep it useful.
The Compliance Audit Return
Understand preparation, evidence and the role of your DPCO.
A clear scope.
An informed decision.
Built in Lagos for the Nigerian regulatory context. Understand the product, the commercial terms and the role of your advisers before you commit.
Who is Estreat for?
Nigerian organisations managing data protection obligations, the DPOs responsible for their programmes, and licensed DPCOs supporting audit preparation. Bring your sector, entity count and current process to the first conversation.
Can we start if we do not know our NDPC designation?
Yes. Choose “Not yet determined” in your enquiry. You can start with the readiness check and discuss the records you have. Confirm your designation and specific obligations with the Commission or a qualified adviser.
Does Estreat audit or file our return?
Estreat is a software platform. The usual CAR filing route is through a licensed DPCO, except as otherwise approved by the Commission under GAID article 10(14). Estreat helps organise records and evidence for review.
What happens in the first conversation?
We discuss one business process, your current records and the outcome you need. We can show the relevant workflow, identify questions to resolve and discuss fit and pricing.
Bring your compliance question.
Let’s make the next step clear.
Tell us what you are working towards. We will help you explore where Estreat fits.