Izini
Everything Izini does →Comply with the NDPA, and prove it when the NDPC asks.
Izini sets up your cookie banner, privacy policy and records with you, tracks every deadline, and keeps the evidence your auditor and the regulator will ask for. No compliance team needed.
Guided setup with our team on every paid plan, and for founding members.
- Built around the NDPA 2023 and the NDPC's GAID 2025
- Cookie banner in five Nigerian languages
- Guided setup with our team on every paid plan
- Designed not to store your customers' names, emails or phone numbers
The NDPC is fining Nigerian companies
The Nigeria Data Protection Commission has moved from registration drives to enforcement. An organisation of major importance can be fined up to ₦10 million or 2% of its annual gross revenue, whichever is greater. For other organisations the limit is ₦2 million or 2%.
Most fines so far have been for things Izini is built to handle: processing without proper consent, weak supplier contracts and sending data abroad without safeguards.
Penalty limits: NDPA section 48, as set out in the NDPC's FAQs. Cases and sources are on the tracker.
Five jobs the law gives you, handled in one place
Each one is a workflow your team follows, with the evidence saved as you go.
Get consent right on your website and apps
Your visitors see a clear cookie banner in their own language, and you keep proof of every answer.
- A banner in English, Yorùbá, Igbo, Hausa and Pidgin
- Izini scans your site, so the banner lists only the cookies you really use
- Analytics and marketing scripts wait until people agree
Answer customer data requests on time
When someone asks to see or delete their data, Izini opens a case, checks who they are and reminds you before it runs late.
- Every request in one register, from every channel
- Reminders before a request passes your 30-day target
- A case file that shows what you did and when
Keep the records the law expects
Your record of processing, impact assessments and privacy policy, drafted with you and kept current.
- Upload a vendor contract and Izini drafts the record entry
- Impact assessments flagged where the law requires them
- A privacy policy published at its own link and revised with your approval
Handle a data breach within 72 hours
The law gives you 72 hours to tell the NDPC about a serious breach. Izini starts the clock and walks your team through it.
- The clock starts the moment you log the incident
- Step-by-step help deciding whether you must notify
- Every decision recorded with the time it was made
File your annual audit return without the scramble
Izini gathers the evidence as you work, so the Compliance Audit Return is an export, not six weeks of searching.
- A readiness score that shows the gaps early
- One indexed evidence pack for your DPCO
- Reminders ahead of the 31 March deadline
A cookie banner your customers can actually read
Consent only counts if people understand what they agree to. Izini shows your banner in English, Yorùbá, Igbo, Hausa and Pidgin, so customers in Aba, Kano or Port Harcourt see it in the language they are most comfortable with.
This website uses the same banner. Try the language buttons on this preview.
We use cookies to improve this site and to comply with Nigerian data protection law. Your choice is recorded with the date and time.
Built for the people who carry the responsibility
Business owners
You know the law applies to you, but not where to start. Izini gives you a clear list and does the paperwork with you.
For businesses →DPOs and compliance leads
Registers, requests, breaches and the annual return in one place, instead of spreadsheets and email threads.
For DPOs →DPCOs and consultants
Look after many client organisations, see who needs attention, and receive audit-ready evidence.
For DPCOs →Your technical team
If you have one: an API, signed webhooks and mobile SDKs to connect Izini to your systems.
For developers →Set up with our team, then kept current
Book a demo
We look at your website with you, scan its cookies and show you where you stand against the NDPA.
Set up with our team
On a paid plan, a guided session configures your banner, privacy policy and first records with you. You approve everything.
Stay compliant
Izini reminds you of deadlines, drafts updates for your approval and keeps the evidence for your annual audit.
Alerts where your team already works
Izini can tell your other tools when a request arrives, a breach clock is running or a review is due.
Ready-made recipes for n8n and Make send Izini's alerts to Slack, Microsoft Teams, Jira and Google Sheets. Reporting tools such as Power BI can read your compliance figures through the API.
What your technical team can connect →
Plans for every size of organisation
Start free, or choose monthly or yearly billing. Every paid plan includes a guided setup session with our team.
Founding members: 90 days free, set up with our team, then half price until the end of 2029 →
What business owners ask us
Does the NDPA apply to my business?
Almost certainly. The Nigeria Data Protection Act 2023 applies to any organisation that processes the personal data of people in Nigeria, from a two-person startup to a bank. There is no size or revenue threshold that exempts a business.
An organisation is a data controller or processor of major importance if it processes the personal data of more than 200 people in six months, or works in a listed sector such as financial services, health, education, communication or e-commerce (NDPC Guidance Notice, GAID 2025 Schedule 7). It must register with the NDPC. The larger tiers (UHL and EHL) also file an annual Compliance Audit Return; the smallest tier (OHL) renews its registration each year instead. As of early 2026, more than 38,677 organisations had registered.
What happens if we don't comply?
Under section 48 of the NDPA, the NDPC can impose a penalty of up to ₦10 million or 2% of the previous year's annual gross revenue, whichever is greater, on a data controller or processor of major importance. For other organisations the limit is ₦2 million or 2%, whichever is greater.
The NDPC has used this power. It fined MultiChoice Nigeria ₦766 million in July 2025, Fidelity Bank ₦555.8 million in August 2024 and Meta $32.8 million in February 2025, a dispute later settled in court. See the enforcement tracker for the details and sources.
Do I need a DPCO, and does Izini replace one?
Organisations of major importance in the UHL and EHL tiers file their annual Compliance Audit Return through a Data Protection Compliance Organisation (DPCO) licensed by the NDPC (GAID 2025 Art. 10(14)). As of early 2026, the NDPC had licensed 317 DPCOs.
Izini does not replace your DPCO or your lawyer. It does the repetitive work (the cookie banner, the records, the request log, the breach file, the evidence) so your DPCO, DPO or lawyer, if you use one, reviews a finished file instead of chasing paperwork.
We don't have a technical team. Can we still use Izini?
Yes. Every paid plan includes a guided setup session in which our team configures your cookie banner, privacy policy and records with you. Adding the banner to your website is a single script that your web agency can paste in, or load through Google Tag Manager.
Day to day, Izini is used by whoever looks after compliance: an owner, an operations lead, HR or a DPO. The developer tools are there if you have a technical team, but you do not need them.
See where your business stands
In a 30-minute demo we look at your own website, show you what the NDPA expects of an organisation like yours, and answer your questions about setup and price.
- A walk through Izini using your own website
- A cookie scan of your site, yours to keep
- Straight answers on scope, timelines and pricing