How it works
From DP1 to steady-state, on one platform.
The DPP horizon
Year-1 build → steady state.
Five stages, in order. Each one leaves a paper trail — filings, registers, training records, PAL entries — so nothing rests on memory.
Setup
We appoint your DPO (DP2) and file your data-controller licence (DP1) with POTRAZ, then run an initial assessment to baseline your compliance posture.
DP1 + DP2 filed in your first weeks.Onboarding
Your dashboard, seven core registers, and first staff-training round go live. Business units get mapped to the compliance surface so responsibilities are clear from day one.
Establish & Protect first
Breach readiness comes online in Q1 — response playbook, roles, notification templates. The clock is wired into the platform, not left on a shelf.
24-hour notification clock to POTRAZ, wired into the platform.Operationalise
Registers, DSARs, vendor DPAs, and compliance tasks run on a monthly rhythm. Every action lands in the Privacy Activity Log (PAL) — the evidence trail that regulators, boards, and auditors actually want to see.
Assure & Renew
Each year we re-score your posture, refresh your Data Protection Plan (DPP), and file your licence renewal on time — well ahead of the statutory deadline.
Licence renewal filed ≥ 3 months before expiry.
Plan and evidence
“The DPP says what will be done; the PAL proves it was.”
Two records, one closed loop — plan on one side, evidence on the other.
Ready to run this rhythm?
Start self-serve for $240/yr or talk to a DPO about a managed plan.