Klari is a system of record for in-house DPOs at Nigerian banks, fintechs and insurers classified by the NDPC as Data Controllers and Processors of Major Importance. Records of Processing, DPIAs, and an append-only audit trail — in one place, in Frankfurt, hash-verified and exportable.
Annual contracts · Naira billing · Invoiced by bank transfer
Firms under formal NDPC investigation
1,368
Aug 2025 enforcement sweep · banks, fintechs, insurers, gaming, pensions
Collected by the NDPC
₦7.2bn
Cumulative registration fees and penalties reported to August 2025
Maximum fine, Major Importance
₦10m or 2%
Whichever is higher — of annual gross revenue, per NDPA
NDPC figures as reported at August 2025. Verify against ndpc.gov.ng before relying on them.
NDPC Major Importance · 13 named sectors, plus the 2025 sweep
The August 2025 sweep covered financial services, insurance, gaming and pensions. Enforcement is broadening. If you’re here, you already know.
The 13 sectors named by the NDPC · swept sectors highlighted
Also covered by the 2025 sweep, but not among the NDPC’s 13 named sectors. Klari does not yet support these two as a workspace sector:
V1
Records, assessments, evidence — built to the standard a DPO would accept. An NDPC registration helper, a Compliance Audit Return dossier generator and billing sit alongside them.
Records of Processing
A guided wizard for NDPA s.28 records, aligned to the GAID 2025 schema. Multi-step, save-and-resume, PDF export.
Impact assessments
Structured Data Protection Impact Assessments with likelihood x severity risk scoring, residual-risk banding, and a two-stage sign-off chain.
Append-only
Every state change is a semantic, append-only event. Evidence uploads via signed URLs, short download TTLs, nightly hash verification.
Supabase Postgres + Storage in eu-central-1 only. Audit-defensible cross-border transfer posture out of the box — no US CDN holding your tenant data.
INSERT-only audit events at the database layer; the service-role key can’t mutate them. Every stored file carries a SHA-256 that a nightly job re-verifies.
Every PDF carries the organisation name, ISO timestamp and a document hash. Cover pages on DPIAs. No screenshots-as-evidence.
Design partners
Klari is pre-general-availability and we are looking for our first design partners. Tell us who you are and what you’re preparing for — we read every submission.
Submissions go to a single inbox, not a tenant database. We reply from a klari.ng address within one business day.