Skip to main content
Trident by Assegai
Start

Five stages from setup to the yearly cycle

Each stage below says who does the work and which plans include it.
Start with StarterBook a demo

The five stages

Each stage leaves a record: filings, registers, training records and entries in the Privacy Activity Log (PAL).

  1. Setup

    Trident prepares your DP1 and DP2 as soon as you sign up; you file them with the Authority. DP1 is the data controller licence application and DP2 is the DPO appointment notice. An initial assessment shows where your privacy programme stands.

    Who does it
    You file, on the platform. If you want Assegai to file for you, the Licence Application Service and the DPO Appointment Service are optional.
    Plans
    Available with every plan. If you already hold a licence, you can skip this stage.

  2. Onboarding

    Your dashboard and the 7 core records are ready to fill in, and staff training is available in the platform. You map your business units to the platform so each responsibility has an owner.

    Who does it
    You, on the platform.
    Plans
    See the plan comparison for the modules each plan includes.

  3. Breach readiness

    The breach register is available from your first day, with a response playbook, roles and notification templates. The platform runs the notification clock.

    Who does it
    The platform runs the clock. You respond, with your DPO where your plan includes one.
    Plans
    See the plan comparison for the modules each plan includes.
    A breach is reported to POTRAZ within 24 hours of becoming aware of it (SI 155 of 2024, section 17(1)).

  4. Running the programme

    Registers, data subject requests (DSARs), vendor data processing agreements and compliance tasks run on a monthly rhythm. Every action is recorded in the PAL.

    Who does it
    You, on the platform. A DPO reviews the work on the plans that include DPO cover.
    Plans
    Modules: see the plan comparison. DPO review depends on the plan: see DPO-of-record cover.

  5. Yearly review and renewal

    Each year the posture score is re-run, your Data Protection Plan (DPP) is refreshed and your licence renewal is prepared ahead of the deadline.

    Who does it
    You, on the platform. Assegai does this with you on the plans that include a DPO who manages your programme.
    Plans
    Depends on the plan: see DPO-of-record cover.
    A licence is renewed at least 3 months before the licence expires (SI 155 of 2024, section 5(2)).

Statutory figures as at 14 October 2026.

The Data Protection Plan (DPP) sets out what will be done. The PAL records that it was done.

Start the five stages, or book a walkthrough first

Start with StarterBook a demo