Skip to main content

Run your SI 155 obligations from one platform

Trident Protect holds your registers, licence filings, breach clock and data subject requests (DSARs), with an Assegai Data Protection Officer (DPO) of record on the plans that include one. The evidence behind each sits in the Privacy Activity Log.

What SI 155 requires of a data controller

Licensing under SI 155 of 2024 starts at 50 data subjects (SI 155 of 2024, section 6(1)(a)). Whether you must appoint a Data Protection Officer depends on your tier and the data you hold. See who must appoint one. A breach must reach POTRAZ, the Data Protection Authority, within 24 hours of the controller becoming aware of it (SI 155 of 2024, section 17(1)).

What Trident Protect includes

Protect brings registers, assessments, tasks, documents, training and your DPO into one system.

What you run yourself and what your DPO does

  • Platform

    The platform gives you a compliance dashboard, a licensing wizard, a policy and notice generator, registers, an automatically generated Privacy Activity Log (PAL), DSAR intake, the breach clock and training.
  • Your DPO

    Your DPO holds the DPO-of-record role and provides advisory calls, gap analysis, sign-off on data protection impact assessments (DPIAs), breach response, regulator liaison and board briefings.
  • Shared between the two

    A record of processing activities (RoPA) starts from a template and your DPO reviews it. A policy is generated and your DPO tailors it. A DSAR arrives through the portal and your DPO handles it. Training combines the platform with live workshops.

The 7 core records

Every plan includes the 7 core records: your RoPA, breach register, DSAR log, data asset register, authority contact schedule, training record and the PAL, a timestamped, tamper-evident trail of what was done. The Data Protection Plan (DPP) sets out what will be done, and the PAL records that it was.

SI 155 forms, fees and deadlines in the platform

  • DP1 (data controller licence) and DP2 (DPO appointment) fill in from your records.
  • The breach clock runs 24 hours to POTRAZ (SI 155 of 2024, section 17(1)), and 72 hours to tell affected people when the breach is likely to be a high risk to them (SI 155 of 2024, section 17(3)).
  • A licence is renewed at least 3 months before the licence expires (SI 155 of 2024, section 5(2)).
  • A replacement DPO is due within 90 days of the end of the previous DPO’s contract (SI 155 of 2024, section 12(5)).
  • A GDPR pack is available when you start exporting.

Statutory figures as at 14 October 2026.

DPO-of-record cover by plan

DPO-of-record cover by plan, lowest to highest
PlanDPO-of-record cover
Starter planself-serve, with the optional DPO Appointment Service
Essential planlimited shared oversight
Standard plana fractional certified DPO actively manages you
Enterprise plana dedicated officer plus a named backup
See how DPO-of-record cover works

The modules in Trident Protect

  • Licensing (DP1 and DP2)

    Guided data controller registration and DPO appointment.
  • The 7 core records

    The record of processing activities (RoPA) and six other core records, structured and linked.
  • Privacy Activity Log

    Timestamped, tamper-evident evidence of every action.
  • Policy and notice generator

    Plain-English policies and privacy notices.
  • Breach register (24 hours)

    Statutory clock (SI 155 of 2024, section 17(1)), guided containment, and a notification form prepared to the Authority's published format.
  • Data subject requests

    Public intake, verification and response, all logged.
  • Gap analysis

    Scores your controls and lists the gaps.
  • DPIA

    Guided data protection impact assessments for high-risk processing.
  • Vendor and DPA register

    Track processors and the data processing agreements that bind them.
  • Training and awareness

    Staff and customer awareness, delivered and evidenced.
  • Compliance dashboard

    Your posture score, tasks and deadlines at a glance.
  • Reporting

    Exports for each obligation, printable on demand.
See all features

Start self-serve, and add a DPO when you need one

Starter

  • Tier 1

For the smallest organisations, and for firms that already have their own DPO.

$40 a month

or $400 a year, two months free

  • No DPO-of-record (bring your own or none required)
  • Authority Contact
  • Breach & Incident Register
  • Controls Register
  • Cross-Border / TIA
  • Data Assets
  • and 18 more

Essential

  • Tier 1
  • Tier 2

For small organisations that want limited oversight from a shared DPO of record.

$106.80 a month

or $1,068 a year, two months free

  • Limited shared DPO-of-record oversight
  • Everything in Starter
  • Advisory Call Booking
  • BC/DR Plan
  • DP3 Breach Notification Credit
  • Template Library
  • More support in DPIA Workflow, Messages, Org Relationships, Policy / Notice Generator and Scores and Posture
Recommended

Standard

  • Tier 2
  • Tier 3

For growing organisations that want a fractional certified DPO of record.

$214.80 a month

or $2,148 a year, two months free

  • Fractional certified DPO-of-record
  • Everything in Essential
  • Academy (coming soon)
  • AI Policy Blueprint
  • Consent / Cookie Management
  • Data Discovery (coming soon)
  • More support in Authority Contact, BC/DR Plan, Breach & Incident Register, Data Assets, Data Protection Plan, Document Vault, DPO Appointment & Licensing (DP1/DP2), Gap Analysis and Trust Center (public posture page)

Enterprise

  • Tier 3
  • Tier 4

For large organisations that need a dedicated DPO of record.

$418.80 a month

or $4,188 a year, two months free

  • Dedicated DPO-of-record + reserve
  • Everything in Standard
  • Contract / Document Review (coming soon)
  • Customer Awareness
  • More support in Cross-Border / TIA, DPIA Workflow, DSAR Management (handling) and LIA Workflow
Compare all plans

How Trident protects your data

  • TLS 1.3 in transit / AES-256 at rest
  • role-based access, with actions recorded in the Privacy Activity Log
  • strict multi-tenant isolation
  • data-residency awareness
  • a published data processing agreement

Frequently asked questions

Start on your own, or book a walkthrough first