BLAECWOOD

About Blaecwood

A compliance and security advisory practice, licensed by the NDPC.

Blaecwood Systems Limited works with Nigerian fintechs, payment companies and regulated technology businesses preparing for NDPA obligations, CBN supervision, and bank, acquirer or enterprise partner review.

Book a Call Compliance that gets you somewhere.

The firm

Blaecwood Systems Limited is a compliance and security advisory firm operating in Nigeria, licensed by the Nigeria Data Protection Commission as a Data Protection Compliance Organisation (NDPC/DPCO/17469).

The practice combines data protection, cloud security and assurance-readiness capability in one delivery model. Engagements are led by practitioners holding internationally recognised information security certifications, with postgraduate qualifications in digital forensics and computer security, and experience across regulatory audit and cloud security assessment in Africa and North America.

Blaecwood works with Nigerian fintechs, payment companies and regulated technology businesses preparing for NDPA obligations, CBN supervision, and bank, acquirer or enterprise partner review.

Where the line sits

  • Blaecwood assesses, documents, prepares and validates. Your team executes the remediation.
  • We do not build or operate your controls.
  • We do not act as your regulatory representative, prepare or submit licence applications, or correspond with a regulator on your behalf.
  • Specialist financial crime work sits outside our scope.
  • The formal NDPA compliance audit, DPCO Verification Statement and Compliance Audit Return filing are contracted separately.

The DPCO licence

A DPCO is an organisation the Commission has licensed to provide data protection compliance services in Nigeria.

It is not a self-declared status and it is not a membership. The Commission issues it, records it, and can withdraw it.

This matters for one practical reason. A Compliance Audit Report does not go straight from your company to the Commission. It must be prepared with a licensed DPCO, which reviews the underlying evidence and attests to it before the report reaches the NDPC. If the organisation you engage is not licensed, the work you pay for does not land where you need it to.

So check the reference rather than take our word for it.

Verifying the licence

Licence reference NDPC/DPCO/17469, issued to Blaecwood Systems Limited by the Nigeria Data Protection Commission.

The reference is verifiable with the Commission. Ask us for the licence document at any point before or during an engagement and we will provide it.

Anyone offering to file a Compliance Audit Report for you should be able to show you the same thing.

Start with a conversation about where you actually stand.

Book a Call

Not sure where to start

If the question is which NDPA obligations reach you at all, the classification check is the shorter route.

Check your NDPA classification

The classification check is an indicative self-assessment. It is not an NDPA compliance audit and does not constitute a compliance opinion.

Assurance note

Readiness work does not guarantee a licence, certification, audit result or partner decision. Blaecwood's advisory and readiness work is separate from its DPCO assurance work.

The formal NDPA compliance audit, DPCO Verification Statement and Compliance Audit Return filing are contracted separately, with separate scope and review. SOC 2 examinations are performed by an eligible independent CPA or equivalent. PCI DSS validation follows the applicable SAQ, ASV or QSA route.