The Regulatory System of Record for Africa's Digital Economy.
Contain. Evidence. Defend.
Ontrais helps organisations turn data protection obligations into guided workflows, evidence trails, risk visibility, and regulator-ready accountability — built first for Botswana's Data Protection Act 2024 and designed for African compliance realities.
Built in Africa. Designed for regulated environments.
DPA 2024 aligned · Botswana-registered entity · Row-level tenant isolation
DPO Command Centre
Programme activeDPA 2024 Readiness
4 gaps identified — view remediation roadmap
12
Activities
4
Open actions
1
Breach open
24
Documents
Next actions
Review high-risk processing activity
Upload DPO appointment evidence
Confirm breach notification status
Market context
Why Africa Needs a Regulatory System of Record
Regulation is accelerating.
Across Africa, data protection regulation is maturing faster than many organisations’ internal compliance capacity.
Spreadsheets are not a compliance programme.
Many organisations still rely on spreadsheets, shared drives, email trails, and static policies to manage compliance obligations.
DPOs need operational infrastructure.
Data Protection Officers need tools that convert legal obligations into evidence, guided workflows, deadlines, and structured reporting.
Botswana’s DPA 2024 demands a practical response.
Botswana’s Data Protection Act 2024 creates a clear need for practical compliance operating infrastructure — built for how African organisations actually work.
Compliance shouldn't feel like this
Organisations across Botswana and the wider region manage data protection obligations with fragmented tools that create risk instead of reducing it.
No single source of truth
Processing records scattered across Excel files, shared drives, and email. No auditable register, no traceability, no defensible evidence trail.
Evidence assembled too late
When a regulator or board inquires, teams spend weeks assembling evidence that should be a structured, retrievable pack.
No board-level visibility
Leadership has no real-time view of compliance posture, open obligations, or breach exposure. Risk surfaces too late to act.
One system of record for your compliance operation
Built first for Botswana's Data Protection Act 2024. Designed to extend across Africa's evolving regulatory landscape.
ROPA Register
Map every processing activity with legal basis, data categories, retention periods, and risk — audit-ready from day one.
Breach Register
72-hour DPA 2024 countdown, escalation workflow, and regulator notification tracking built in.
Compliance Calendar
Track, assign, and close regulatory milestones. Automated alerts for approaching and overdue deadlines.
Evidence Vault
Auditable, retrievable evidence — policies, agreements, DPIA packs, and board reports structured for retrieval.
From obligation to evidence — in three steps
Map your processing
Register processing activities, assign data owners, document legal bases, and surface compliance gaps immediately.
Run your compliance programme
Track deadlines, manage breach incidents, store and link evidence, and act on a prioritised next-actions feed.
Prove it — to your board and regulator
Generate audit-ready evidence packs, board snapshots, and regulator-facing reports from your live operational data.
Platform assurance
A trust architecture built for accountability
Ontrais is built around the controls that make compliance defensible — not just documented.
Row-level tenant isolation
Tenant access is enforced at the database row level for every workspace.
Immutable audit trail
Every action is written by database trigger — append-only, tamper-evident, and attributable to a named user and timestamp.
Privacy by design
Data minimisation, purpose limitation, and retention controls are workflow primitives — not retrospective compliance tasks.
AI-assisted, human-accountable
The AI Copilot advises — it never acts. Every compliance decision is made and recorded by a named human user.
DPA 2024 aligned
Workflows, registers, and deadlines are structured against the Botswana Data Protection Act 2024 — not a generic template.
Board-ready reporting
Evidence packs, posture snapshots, and gap reports are generated from live operational data — not assembled manually.
Designed with reference to ISO/IEC 27001 · ISO/IEC 27701 · NIST Privacy & Cybersecurity Frameworks
Access
Built for organisations ready to act
Ontrais is available by application. We work directly with DPOs, controllers, and compliance teams — not self-serve.
Pilot programme
Start hereDPO early access
We are onboarding a limited cohort of Data Protection Officers to pilot Ontrais before general availability. No commitment required.
Book a walkthroughOrganisation licence
Annual organisation pricing
Priced per organisation, not per seat. One compliance operating system for the whole team — contact us for a tailored quote.
Book a walkthroughMulti-entity
Groups & regulatory bodies
Ontrais supports multi-entity deployments for regulatory bodies, holding groups, and professional associations.
Book a walkthroughNo instant purchase. No credit card required for pilot access. All access requests are reviewed by the Ontrais team.
Ready to apply? Tell us about your organisation →
Book a compliance walkthrough
Tell us about your organisation and we'll arrange a personalised walkthrough of the Ontrais platform within 24 hours.