Company

A Nigerian software company, built for a Nigerian statute.

Estreat Technologies Limited is a private company incorporated in Nigeria and based in Lagos. It is wholly owned by Nigerian citizens. We build one thing: the record and reporting layer that Nigerian organisations need in order to meet the Nigeria Data Protection Act 2023 and the General Application and Implementation Directive 2025.

The name is a legal term. An estreat is the certified extract of a record, taken from the register and sent to the authority. That is precisely the transaction our customers have to complete every year, and precisely the one that goes wrong when no register was kept.

Company facts
Legal nameEstreat Technologies Limited
FormPrivate company limited by shares, Nigeria
OwnershipWholly held by Nigerian citizens
BaseLagos, Nigeria
MarketNigeria first
What we are notNot a law firm, not a licensed DPCO

Registration particulars, including our RC number and registered office, are provided in full on request and in any contracting pack.

Why we exist

The obligation is now real, and the market response has mostly been paperwork.

Nigeria moved from a guidance-era regime to an enforced one. Tens of thousands of organisations are registered with the Commission as controllers and processors of major importance, penalties are being recovered, and an annual audit return is now a fact of corporate life rather than a policy ambition.

Most organisations answered that by buying a document once a year. A document produced from records that were never kept cannot survive a question, and it does nothing for the organisation in the eleven months when the risk actually sits. We built the register instead, and made the document fall out of it.

Abuja seen from Katampe hill, with Aso Rock on the horizon
Abuja from Katampe hill, with Aso Rock on the horizon. The Commission sits in the Federal Capital Territory, and every return we prepare is filed there. Photograph by Kritzolina, CC BY-SA 4.0.

How we work

Four commitments we hold ourselves to.

The record is the product

We do not sell a score or a dashboard. We sell a maintained record and the ability to produce a certified extract of it on demand. Everything else in the platform exists to keep that record true.

Say what the law says

Regulatory copy is written from the instrument, cited to it, and dated. Where a rule is unsettled or where our reading is a reading, we say so rather than presenting it as certainty.

No claim without an artefact

We do not describe capabilities we have not shipped, certifications we do not hold, or customers we do not have. A claim on this website should be answerable with a document.

Small team, high leverage

The platform is built to be operated by a small engineering group with strong automation, because that is what lets a Nigerian company charge Nigerian prices and still run to an international standard.

Where the engineering comes from

Nigerian company, international build standard.

Estreat was founded by Leonard Esere, who has spent his career building cloud security, identity governance and compliance-as-code systems for regulated and public sector buyers in the United States, where evidence, auditability and control mapping are procurement requirements rather than differentiators.

The compliance engine underneath Estreat originates in that work and was assigned into the Nigerian company outright, so there is no ongoing offshore licence, no royalty stream and no foreign dependency in our cost base. What is Nigerian about Estreat is not a marketing position; it is the entity, the ownership, the currency, the pricing and the regulatory perimeter we build against.

We hold ourselves to the review discipline, documentation standard and security controls expected of a vendor selling into a regulated US enterprise, and we apply them here first.

Our position on certification

We do not hold ISO 27001 or a SOC 2 report today, and we will not imply otherwise. Both are on our roadmap, and until they are issued we answer security diligence with the actual controls in force and the evidence behind them.

We also do not hold a DPCO licence. The audit and the filing of a Compliance Audit Return are performed by DPCOs licensed by the Commission, and we work alongside them.

Read the trust page

Talk to the people building it.

Early customers deal directly with the team writing the software, which is one of the few genuine advantages of buying from a company our size.

Get in touch