Assura is a GRC platform purpose-built for Caribbean data protection law. Manage risk, respond to breaches, handle DSRs, and stay audit-ready — all in one place.
Build a complete record of processing activities with a structured 5-step wizard. Map legal bases, data categories, retention periods, and third-party processors — all linked to the relevant jurisdiction’s requirements.
Log, route, and respond to all request types — access, erasure, restriction, objection, blocking, portability, and more — with statutory deadlines automatically calculated per jurisdiction. Never miss a deadline again.
A structured 9-step workflow captures everything from initial report through classification, root cause, risk assessment, and notification decision. Jurisdiction-specific timelines keep you on the right side of the regulator.
The TR²UST® Framework maps 34 foundational controls across six domains — Governance, Rights & Consent, Data Lifecycle, Information Security, Third-Party Management, and Incident Management. Get a real maturity score, not a checkbox survey.
From project scoping through lawful basis, data sharing, transfers, consultation, necessity, risk identification, and DPO sign-off — Assura’s DPIA engine walks every assessor through a defensible, documented process.
Register all third-party vendors with full details — type, criticality, processing location, lifecycle stage, contract status, and risk profile. Know who is processing data on your behalf, and on what terms, at all times.
Across every regulated sector
No implementation projects. No expensive consultants. A guided setup that gets your compliance programme live fast.
Add your entity details, select your jurisdiction or jurisdictions, and invite your team. Assura pre-loads the relevant legal obligations for your territory so you start from a compliant baseline.
Use guided templates to map your processing activities, data flows, and third-party processors. The wizard walks you through each field with jurisdiction-specific guidance at every step.
Conduct DPIAs, log incidents, track DSRs, assess maturity, and monitor your compliance posture — all from a single dashboard. Your DPO gets a clear picture of the programme at all times.
Assura handles sensitive personal data on behalf of its clients. The platform is built to the same standards of security and data protection that it helps organisations achieve.
All data is encrypted at rest and in transit using industry-standard AES-256 and TLS 1.3. Role-based access controls, full audit logging, and session management ensure only authorised users can access your compliance records.
Assura is deployed on AWS cloud infrastructure with high-availability architecture, automated backups, and global content delivery. Your compliance programme stays accessible when you need it most.
All traffic is routed through Cloudflare's global network, providing enterprise-grade DDoS protection, web application firewall filtering, and bot mitigation — keeping the platform fast and protected around the clock.
Most compliance tools are GDPR products with a flag. Assura was designed from the ground up around the laws your organisation actually operates under — with the right terminology, the right timelines, and the right obligations at every step.
Four tiers aligned to organisational size and compliance complexity. All prices in USD. Annual subscriptions include two months free.
For solopreneurs, startups and micro-teams of up to 5 employees establishing a basic compliance framework.
For growing organisations with 6 to 25 employees managing foundational third-party vendor relationships.
For established regional entities with 26 to 100 employees requiring comprehensive, multi-module data governance.
For group structures, multi-jurisdiction deployments, and DPO consultancies.
Additional seats available as a paid add-on across all tiers · Contact us for add-on pricing
Data protection obligations apply to every organisation that handles personal data — not just corporations. Assura offers special pricing for non-commercial and community organisations across the Caribbean.
We respond within 2 business days · [email protected]
Run fully isolated compliance programmes for each client from a single login. Switch between entities in one click, keep every register, DPIA, breach log, and DSR queue separate, and deliver a consistent programme across jurisdictions — without the overhead.
Whether you have a question about the platform, want to discuss your organisation’s compliance needs, or are ready to get started — we’d like to hear from you.
Enterprise enquiries, multi-jurisdiction deployments, and DPO consultancy integrations are all handled individually. Reach out and we’ll respond within 2 business days.
Book a 30-minute demo and see the platform in action. Or reach out on WhatsApp for a quick conversation.
Prefer email? Write to us at
[email protected]
Purpose-built for the Caribbean. Up and running in under a day.
Enterprise enquiries welcome · [email protected]