What does the first call cost?

Nothing. It's 30 minutes with a consultant, and you leave knowing your likely tier, your next deadline and what we would do first, whether or not you work with us.

Can you file our compliance audit return?

Yes. The GAID requires returns to be filed through a licensed Data Protection Compliance Organisation, and Johan Consults is licensed by the NDPC. Returns are due by 31 March each year.

Will our teams have to stop what they are doing?

No. We plan around your calendar, work with the systems you already run, and keep workshops short and focused.

Which countries do you cover?

Nigeria and Kenya. If your organisation also serves EU customers, we cover the GDPR as part of the same programme.

How is pricing worked out?

By scope. You get the scope and the price in writing before any work starts, so there are no surprises for your finance team.

IT services

Systems your business depends on, built and secured by people who understand compliance.

Our analysts and developers design, build and secure the software and infrastructure your operations rely on, with data protection designed in, and stay available when you need support.

Talk through what you need Get a scoped quote

Starts with a free 30-minute call. No obligation.

Delivered by

An NDPC-licensed DPCO with offices in Abuja, Lagos and London, working in Nigeria and Kenya. Facts last reviewed 9 November 2026.

Do you need this?

You probably do if any of these sound familiar.

Your systems were built before data protection was a priority.

You need penetration testing or a security review before an audit.

Your team needs extra hands for a build or migration.

You want a technology partner who understands the regulators.

The cost of leaving it

Most data protection failures are technical in the end: a misconfigured server, an unpatched system, an over-broad permission. Each one is cheaper to fix before it's found by someone else.

Check your exposure on a free call

What do I get?

What we do with you

Software development

Standalone applications and online products.

Infrastructure

Reliable, well-documented IT environments.

Security

Encryption, access control and hardening, with independent penetration testing when you need it.

Support

Help when something needs fixing or changing.

Where you'll end up

When we're done, you'll have:

Systems tested and hardened against real threats

Compliance requirements built into the technology

Support from people who know your setup

How does it run?

How we work together

01 A first conversation We learn your business, your data and what worries you.

02 An honest assessment We show you the gaps, ranked by risk.

03 Policies that fit Procedures written for how your teams actually work.

04 Controls in place Encryption, access control and authorisation set up with IT.

05 People trained Staff know what changes for them; leads can certify.

06 Filed and supported Annual audit returns filed, ISO 27001:2022 guidance, and support as rules change.

Is this for me?

Who this is for

SMEsEnterprisesProduct teamsPublic sector

Still deciding?

Questions you might have

It depends on your size and where you're starting from. After the first call we send a scoped plan with timelines you can hold us to.

What else might you need?

Often paired with this

See all solutions

NDPA and GAID compliance Bring an NDPR-era programme up to the NDPA and the GAID. View this service Compliance audit returns Your annual return, audited early and filed by a licensed DPCO. View this service GDPR compliance Win and keep EU customers with one programme that meets both laws. View this service

Your next step

Get technology that holds up to scrutiny.

Book a free 30-minute call. You'll leave knowing what applies to you, what is urgent, and what we would do first.