Do I really need a DPO?

If you process more than 1,000 data subjects, or 50 with sensitive data, SI 155 requires one. Most licensable organisations do. Trident bundles a certified DPO-of-record so you don't have to certify one internally.

What's the Setup Service?

A one-time, tier-based onboarding fee that gets you appointed (DP2) and licensed (DP1) with a baseline assessment. Tier 1 (50–1,000 subjects) is $100; it rises with your data-subject band. It's an Assegai fee, so there's no VAT.

Yes. Trident is built from Zimbabwe's CDPA and SI 155 outward, with a GDPR pack available when you start exporting.

Registers, dashboard and first training are live in days; breach readiness is in place from day one.

Can I start without talking to sales?

Yes. Starter, Advisory and Essential are fully self-serve — create an account, check out, and you're onboarding. Standard and up include an actively-managing DPO, so those start with a short demo.

Any time. Your records and history carry forward; you're only adding DPO depth and modules.

Are POTRAZ fees included?

No — POTRAZ statutory licence fees are passed through transparently as a separate line (+15.5% VAT) and remitted to POTRAZ. We never co-mingle them with our own fees, which carry no VAT.

Trident Protect

Compliance,made manageable.

Trident Protect is where your data-protection compliance lives, runs and proves itself — to POTRAZ, to your customers, and to your board. The registers, the licensing, the breach clock, the DSARs, and a certified DPO-of-record standing behind all of it. One platform, one source of truth.

Start with Starter Book a demo

The reality

Most organisations are non-compliant — and the deadlines don’t wait.

Under SI 155, processing the personal data of just 50 people can make you a licensable data controller. Above 1,000 subjects — or 50 with sensitive data — you need a Data Protection Officer. A breach must reach POTRAZ within 24 hours. Miss these and the exposure isn’t only regulatory: it’s the customer who walks, the deal that fails procurement, the fine that follows the headline. Yet most compliance lives in spreadsheets nobody maintains and policies nobody reads.

The platform

One place. Every register. Every regulation you’re on.

Protect brings registers, assessments, tasks, documents, training and your DPO into a single system designed around how compliance actually works — not a folder of templates. It’s the operational backbone behind every Assegai data-protection engagement, and it’s now something you can start yourself.

What you self-serve, and what your DPO does

Software where software is enough. A human where it isn’t.

Platform

compliance dashboard, licensing wizard, policy/notice generator, registers, the auto-generated Privacy Activity Log, DSAR intake, the breach clock, training.

Human (your DPO)

the DPO-of-record role, advisory calls, gap analysis, DPIA sign-off, breach response, regulator liaison, board briefings.

Hybrid

RoPA (template → DPO review), policy generation (generated → DPO-tailored), DSAR (portal → DPO handling), training (platform + live workshops).

Demonstrable compliance

Seven records that prove you take data seriously.

Every plan stands up seven core records: your RoPA, breach register, DSAR log, data-asset register, authority-contact schedule, training record — and the Privacy Activity Log, the timestamped, tamper-evident trail of everything done. The DPP says what will be done; the PAL proves it was. That’s what you put in front of a regulator.

Built for SI 155

The forms, the fees, the clocks — encoded, not improvised.

Trident ships with the CDPA regulator pack: DP1 (controller licence) and DP2 (DPO appointment) with auto-fill, the POTRAZ tier and fee tables with 15.5% VAT handled, the 24-hour breach clock to POTRAZ and 72 hours to affected subjects, the 90-day DPO appointment window, and licence-renewal reminders three months out. When you start exporting, the GDPR pack is there.

The moat

The one thing rivals don’t bundle.

1
Starter / Advisory
self-serve, DPO overlay available
2
Essential
limited shared oversight
3
Standard / Advanced
a fractional certified DPO actively manages you
4
Enterprise
a dedicated officer plus a named backup

How the DPO ladder works

Feature catalogue

Everything a Zimbabwean controller has to do — covered.

Licensing (DP1/DP2)

Guided data-controller registration and DPO appointment.

RoPA + the 7 core records

Every register the CDPA expects, structured and linked.

Privacy Activity Log

Timestamped, tamper-evident evidence of every action.

Policy & notice generator

Plain-English policies and privacy notices, in your voice.

Breach register (24h clock)

Statutory clock, guided containment, POTRAZ-ready form.

DSAR intake & handling

Public intake, verification, and response — all logged.

Gap analysis

A structured view of where you fall short of the CDPA.

DPIA

Guided data-protection impact assessments where risk demands them.

Vendor/DPA register

Track processors and the data-processing agreements that bind them.

Training & awareness

Staff and customer awareness, delivered and evidenced.

Compliance dashboard

Your posture score, tasks, and deadlines at a glance.

Audit-ready reporting

Exports POTRAZ and your board can actually read.

See all features

Plans

Start self-serve. Add a DPO when you need one.

Starter

Run it yourself.

$240/yr

Self-serve

Full Trident platform access
DP1/DP2 licensing workflow
The 7 core records
Community support

Start

Standard

A fractional certified DPO actively manages you.

$1,800/yr

Managed

Everything in Starter
Fractional certified DPO-of-record
Quarterly reviews & advisory calls
Managed breach & DSAR response

Book a demo

Enterprise

Dedicated DPO + named reserve.

$6,000/yr