Data protection
How TaxAudit meets the Nigeria Data Protection Act 2023 (NDPA).
Draft. Final wording is being reviewed by our Nigerian lawyer and data protection officer.
Version 1.0 (draft). Last updated 7 October 2026.
Our role
For your account, billing and website data, Rivium Analytics Ltd is the data controller. For the business records you put into TaxAudit, your business (or its accounting firm) is the controller and we process the records on its instructions, under our Data Processing Agreement.
Data Protection Officer
dpo@taxaudit.ng
Your rights
You can ask to access, correct, delete or export your data, object to some uses, withdraw consent, restrict processing, and ask for a person to review an AI-assisted outcome. Use Request your data.
Where data is processed
Our servers and storage are in the European Union; AI requests are processed by Anthropic in the United States. Transfers are covered by the safeguards the NDPA requires. See Sub-processors and our Privacy Policy.
Complaints
Contact our DPO first. You can also complain to the Nigeria Data Protection Commission (NDPC).