Elbamp API

Nigeria-first NDPA/NDPC privacy-compliance platform

live

Version 1.0.0-m2 Commit af6b02b Uptime — Env production

252 API routes 33 API areas 10 roles 44 permissions 118 audit event types

Milestone 2 · Organization Compliance Core

One organization completes a full, controlled CAR readiness cycle, and exports a readiness report and an evidence pack.

Describe

The organization gives its registration number and describes itself: sector, role, data-subject volume, sensitive data, cloud and cross-border use.

Organization verification Profile

Classify

A DCPMI tier is suggested from its answers and confirmed by a person with the authority to confirm it.

DCPMI

Generate

Its own Compliance Audit Return checklist is generated from its profile, tier, sector pack and the law in force that day.

Sector packs CAR

Ask

The return is opened as a questionnaire and assigned to the people who know the answers. Answers create the evidence requests and tasks they imply.

Questionnaires Departments and custodians

Evidence

Named custodians are asked for specific evidence by a date, upload it, and it is decided: approved, rejected, not available, or not applicable with a reason.

Evidence requests Evidence vault Evidence decisions Compliance tasks

Record

The record of processing is built from the sector pack, each activity given a lawful basis a person named, and every new project put through change intake.

Records of processing Change intake

Assess

Impact assessments are prepared, signed off and locked, so what was signed is what stays on record. Policies and notices are published and acknowledged.

DPIA Legitimate interests assessments Policies

Report

The Command Centre shows what needs attention, and the organization downloads its readiness report, registers and evidence pack.

Dashboard Reports

Readiness is counts and a maturity band, never a single percentage. Compliance content below legal review produces no conclusion a customer sees. Every material action is written to the audit trail in the same transaction as the action. A signed record is locked, and any later change to it is a recorded amendment.

Built on Milestone 1, the foundation: identity and multi-factor authentication, tenant isolation backed by row-level security, an append-only hash-chained audit trail, approvals and record locking, and malware-scanned file storage.

API areas · 252 routes

Counted from the document this process is serving. Each area opens its section of the reference.