Info: About 7 min
Where should I start?
Answers five questions and tells you which checks you actually need, in what order.
OpenToolsFree diagnostics you can run without a login or account.
Privacy Diagnostics & Tools
Each tool answers one plain question about your privacy posture and hands back a graded result with a short explainer. Most take a few minutes.
Show tools for:
Filters this list to checks that apply where you are. Packs with no jurisdiction marked apply everywhere.
Not sure which check to open first?
Pathways put these checks in order for your situation. Use cases show what organisations like yours typically run.
Start here: scope & applicability
Info: About 5 min
POTRAZ Tier & DPO Checker
Works out whether the law treats you as a data controller and which licensing tier your numbers put you in.
OpenInfo: About 11 min
Licence and DPO checker
Checks whether you need a POTRAZ licence and a Data Protection Officer, and what is still outstanding.
OpenInfo: About 4 min
What will registration cost?
Estimates your licence fee, application fee and DPO certification costs from your data-subject numbers.
OpenInfo: About 6 min
Third-Sector Eligibility Check
Tells you which regulators can reach you, and whether you are genuinely out of scope.
OpenInfo: About 6 min
CDPA Penalty Calculator
Shows which of your gaps carry criminal exposure and how severe each offence tier is.
OpenKnow your exposure & your data
Info: About 22 min
Data Protection Needs Assessment
Your flagship 0-100 privacy exposure score, with a ranked list of what to fix first. 8 to 25 questions, depending on what your organisation actually does.
OpenInfo: About 9 min
Privacy maturity scorecard
Scores how well you actually operate privacy across ten areas, from ad-hoc to optimised.
OpenInfo: About 5 min
What data do you hold? (RoPA starter)
Builds the record of what personal data you hold, why, and where it goes.
OpenInfo: About 6 min
Retention and records readiness
Checks whether you have a written retention schedule, a disposal routine and accurate records.
OpenGet lawful
Info: About 12 min
Lawful basis finder
Works out the lawful basis for each thing you do with personal data, and flags the ones with none.
OpenInfo: About 5 min
Legitimate interests assessment
Runs the three-part test and tells you whether legitimate interests is actually available to you.
OpenInfo: About 11 min
Consent and cookie check
Grades whether your consent is genuine, withdrawable, recorded, and valid for trackers and marketing.
OpenInfo: About 12 min
Children and sensitive data screener
Checks how you handle under-18s and sensitive data, and whether a DPIA is now mandatory.
OpenBe transparent
Info: About 19 min
Privacy Notice Grader
Grades your published privacy notice A to F against every element the law requires.
OpenInfo: About 21 min
Generate a Privacy Policy Checklist
Walks the full transparency catalogue and counts your critical, major and minor gaps.
OpenInfo: About 13 min
Right-to-be-informed check
Checks you tell people about data you collected from somewhere other than them, in the right way.
OpenRights & incidents
Info: About 10 min
Could you handle a data request?
Checks whether you could find, verify, assemble and deliver someone's data inside the deadline.
OpenInfo: About 10 min
Breach readiness and reporting triage
Tells you whether this is reportable, to whom, and how long you have left on the clock.
OpenInfo: About 7 min
Information security readiness
Checks the technical and organisational measures the law expects, including restore and testing.
OpenRisk & third parties
Info: About 11 min
Do I need a DPIA?
Screens your processing against the mandatory high-risk triggers and tells you yes or no.
OpenInfo: About 6 min
Vendor and DPA checker
Checks how you handle your processors and suppliers as a whole - due diligence, signed DPAs and sub-processor control.
OpenInfo: About 7 min
Cross-border transfer risk
Grades how well you have assessed the countries you send personal data to, and what is still unaddressed.
OpenInfo: About 7 min
Data sharing checklist
Checks that data you share with partners has a basis, a role split and a sharing agreement.
OpenInfo: About 7 min
Direct marketing check
Tells you what you may legally send, on which channel, to whom, and how to offer opt-out.
OpenInfo: About 22 min
App Builder — Privacy & Security Checklist
The pre-launch privacy stack for anyone shipping an app or digital product.
OpenGovern, mature & grow
Info: About 9 min
Accountability re-score
Re-runs your maturity scorecard and shows exactly how far you have moved since last time.
OpenInfo: About 6 min
Training and privacy culture
Checks whether your people are trained, whether it is recorded, and whether your DPO keeps CPD current.
OpenInfo: About 4 min
Privacy Literacy — Role & Industry
Measures how well people actually understand rights, sharing, retention and breaches.
OpenInfo: About 10 min
Shadow AI Discovery
Compares what leadership thinks staff use AI for with what staff anonymously say they do.
OpenInfo: About 10 min
AI and data protection risk
Scores your AI estate as a whole for lawfulness, bias, human review, transparency and security.
OpenInfo: About 6 min
AI readiness mini-check
A five-question read on whether you are ready to adopt AI without leaking personal data.
OpenInfo: About 7 min
GTM Market-Entry Roadmap
Sequences everything you must do, in order, to start operating in a new country lawfully.
OpenAssegai Signals
Periodic notes on privacy, POTRAZ compliance, and Zimbabwean data-protection practice. Short, useful, easy to unsubscribe.
Board snapshot
A one-page briefing on the four privacy fundamentals every Zimbabwean organisation should meet — designed for a board pack.
A one-page PDF summary is on the way — Signals subscribers hear first.