Assegai can serve as your certified DPO of record
Who must appoint a DPO
Licensing under SI 155 of 2024 starts at 50 data subjects (SI 155 of 2024, section 6(1)(a)).
Under SI 155 of 2024, section 12, a data controller must appoint a Data Protection Officer and notify POTRAZ. POTRAZ guidance excludes a controller that processes the personal data of fewer than 50 data subjects (CDPG 1 of 2024, Appointment, Roles, Training and Certification of DPOs, page 3), and exempts Tier 1 controllers, those with 50 to 1,000 data subjects (CDPG 1 of 2025, Licensing of Data Controllers, paragraph 9.1), though POTRAZ can still require one given the nature of the processing or the sector. For micro, small and medium enterprises, the MSME guideline sets the point at which you need a DPO at more than 1,000 data subjects, or 50 or more where you process sensitive data (CDPG 7 of 2025, Processing by MSMEs, paragraphs 5.1 and 5.2). This is the position as at 12 October 2026.
What certifying your own DPO costs
| Fee, per person | Zimbabwean citizen | International applicant |
|---|---|---|
| Training and certification | USD 1,250 | USD 1,450 |
| Training application | USD 30 | USD 50 |
| Total | USD 1,280 | USD 1,500 |
A certified DPO also earns 12 CPD points each calendar year (CDPG 2 of 2025 (CPD Assessment for Certified DPOs), sections 3(b) and 4).
Statutory figures as at 14 October 2026. Source: SI 155 of 2024, Second Schedule, items 4 and 5; CDPG 2 of 2025 (CPD Assessment for Certified DPOs), sections 3(b) and 4.
Four levels of DPO-of-record cover
Move up a level as your risk, footprint or regulator scrutiny grows.
| Cover level | What it includes |
|---|---|
| None | Self-managed. Assegai is not your DPO of record, and you handle the role in-house. |
| Limited shared oversight | A shared DPO reviews the fundamentals, and you run the day-to-day work. |
| Fractional certified | A certified officer works part-time and actively manages your programme. |
| Dedicated + reserve | A named officer for your organisation, plus a named backup officer. |
Assegai as your DPO of record
Keep your internal person. Assegai becomes the DPO of record, which suits an organisation that has someone competent internally and still wants a named, certified DPO.
DPO-of-record oversight is included from the Essential plan upward, on the same platform you already use.
Included from Essential
Limited shared DPO-of-record oversight; Standard and Enterprise go further.
Which plans include which cover level
| Plan | Cover level |
|---|---|
| Starter plan | None included. Assegai can be added as your named DPO. |
| Essential plan | Limited shared oversight |
| Standard plan | Fractional certified DPO |
| Enterprise plan | Dedicated officer and a named backup |