About Priva
Compliance infrastructure, built for Mauritius.
Priva is software that helps organisations in Mauritius manage their duties under the Data Protection Act 2017. Data protection is only the first pillar of the regulatory burden Mauritian businesses carry, and Priva is being built to carry all of it.
Get StartedWhy Priva exists
The problem
Real duties, no tooling
Every Mauritian organisation that processes personal data carries obligations under the Data Protection Act 2017: records of processing, security of processing, replies to data subject requests within 30 days, 72-hour breach notification to the Data Protection Commissioner. Yet there has been no affordable tooling built for this law, so compliance lives in scattered spreadsheets and expensive outside help, and the deadlines still run either way.
2027 brings the DPO in-house
The pressure is growing. From 1 January 2027, the Data Protection (Designation, Tasks and Position of Data Protection Officers) Regulations 2026 (GN No. 117 of 2026) require the DPO to be an in-house staff member. That duty cannot be handed to an outside firm any more, it lands on someone inside your business, and that person needs proper tools. Priva exists so they have them.
Who builds Priva
The mind behind it
Faiz Khayrattee
Founder, Khay Digital Ltd
"I'm Faiz Khayrattee. Nearly ten years across data protection, digital systems and business operations, and I sit in the DPO chair myself, as a designated data protection officer. Priva wasn't designed in a boardroom; it was built from that chair, one register and one deadline at a time."
"Priva is the workspace I needed and couldn't buy: the registers a DPO actually keeps, the deadlines the law actually sets. Nothing padded, nothing invented. We even run Priva on Priva, our own RoPA, registers and policies live in the product."
That inside-out perspective shapes every module: the registers are the ones a DPO actually keeps, the deadlines are the ones the DPA actually sets, and the reports are the ones the Data Protection Office actually asks for. Priva is not compliance theory, it is the daily practice of data protection in Mauritius, turned into software.
Our Mission
To make regulatory compliance achievable for every Mauritian business: affordable, understandable, and handled in one place, without needing a full in-house legal or compliance team.
Software, not services
Priva ships software you run yourself. Your team keeps the registers, the tool keeps the structure, the deadlines and the audit trail, no staffed offering in the middle.
Real practice, not theory
Every register, countdown and report in Priva comes from the daily practice of data protection work in Mauritius, not from a template library.
Mauritius first
Purpose-built around the DPA 2017 and the Data Protection Office's actual deadlines, not a GDPR product with the labels swapped.
Transparency: how Priva treats data
A compliance product should be judged by its own practices first. Here are ours, the same ones documented in our Privacy Policy and Data Processing Agreement.
Mauritius jurisdiction, DPA 2017 first.
We never see or store card details, payments are handled entirely by Stripe.
No ad tracking anywhere on Priva; cookie-consent logs are anonymised by design.
Every sub-processor is disclosed in our DPA. On termination: 90-day export window, then deletion.
We run on our own product, Priva’s RoPA, registers and policies live in Priva.
Our Story
Priva is a product of Khay Digital Ltd, born out of firsthand experience navigating DPA 2017 compliance for Mauritian businesses. We saw how complex, expensive, and time-consuming compliance was, so we built the platform we wished existed.
Data protection was the natural place to start: it touches every organisation, the deadlines are real, and the tooling simply didn't exist locally. But we've always seen Priva as something bigger than one Act. Mauritian businesses juggle overlapping obligations: data protection, anti-money-laundering, counter-financing of terrorism, and more, often across disconnected spreadsheets and outside firms. Our roadmap is to bring those obligations into a single, coherent compliance platform.
Where Priva Is Headed
Data protection is the foundation, not the finish line. Here's the path we're building, one regulatory pillar at a time.
- Phase 1 · FoundationLive now
DPA 2017 Data Protection Compliance
The full data-protection stack: DSAR management, RoPA & data mapping, consent, breach register with 72-hour tracking, DPIAs, vendor due diligence, DPC registration, cross-border transfer records, and audit-ready reporting.
- Phase 2 · DepthIn progress
Deeper data-protection coverage & DPO Workspace
Expanding the compliance registers, equipping in-house DPOs with the DPO Workspace, and staying ahead of the DPO Regulations 2026 so our customers are ready before the law changes.
- Phase 3 · Next PillarComing next
AML / CFT Compliance
Anti-Money-Laundering and Counter-Financing of Terrorism tooling: KYC/CDD workflows, risk scoring, sanctions & PEP screening, suspicious-transaction record-keeping, and FIU-aligned reporting. Built to the same standard as our data-protection modules, in the same platform.
- Phase 4 · The VisionOn the horizon
One compliance platform for Mauritian business
A single home for the regulatory obligations Mauritian organisations carry, so compliance stops being a scramble across tools and outside firms, and becomes something you simply run.
Start with data protection today. When AML/CFT and future modules launch, they'll be part of the same Priva you already know: no new vendor, no new login, no migration.
Our Values
Customer first, always
Every decision is measured against whether it genuinely helps our customers meet their obligations.
Security by design
We hold our own platform to the standards we help our customers meet.
Simplicity over complexity
Regulation is complicated enough; the tool for it should not be.
Accuracy & integrity
We describe what the platform does honestly, and keep it aligned with the law as it evolves.
Independent, local, and here for the long term
Priva is independently built and operated by Khay Digital Ltd in Mauritius. We're not a reseller of foreign software; we build compliance tooling around Mauritian law, for Mauritian organisations, and we're in it for the long haul as the regulatory landscape grows.
Proudly made in Mauritius 🇲🇺
Serving Mauritian businesses with local expertise and global standards.