WHAT YOU ARE DEALING WITH
Four data protection regimes. WhatsApp-dominant execution. No record that holds up under any of them.
Today, without Cognitiva
- WhatsApp approvals scattered across creator threads. No evidentiary record. No timestamp that holds under NDPA or POPIA enforcement.
- 30–45 day creator payment cycles. NGN, ZAR, KES, EGP routed through fragmented local banks with manual FX at each step.
- NDPA (Nigeria), POPIA (South Africa), Kenya DPA — consent not documented at source. Reconstructed at audit time.
- Disclosure compliance (#ad, #sponsored) tracked in spreadsheets per platform. No evidentiary trail per post.
- Brand procurement teams asking for documentation that was never built.
With Cognitiva
- Every approval — WhatsApp, email, Slack — captured as a signed, time-stamped evidentiary event at the moment it fires.
- Creator payouts in 1–2 days via Stripe Africa rails. NGN, ZAR, KES, EGP from one account. No manual FX.
- NDPA/POPIA/Kenya DPA consent documented at brief acceptance — not reconstructed at audit. DPO answers in hours.
- Disclosure status tracked as a first-class event per platform, per post. Compliance is automatic.
- Brand procurement dossier pre-built at execution time. Available on demand.
FOUR MARKETS · ONE LEDGER
Every data protection regime on the continent. Already satisfied.
Nigeria
Nigeria Data Protection Act. Enforced by NDPC. Consent required before data collection. Data subjects have access, correction, and deletion rights. NDPC began active enforcement in 2025 — fines issued, court actions filed. DPO appointment required for large-scale processors.
Advertising Standards Authority of Nigeria / Consumer Protection Council. Influencer content must clearly identify commercial relationships. #ad or #sponsored required per post.
Federal Competition and Consumer Protection Commission. Misleading advertising claims carry enforcement risk. Agency bears liability for commissioned content.
Stripe NGN · local bank rails
South Africa
Protection of Personal Information Act. Fully enforced since July 2021. Information Regulator issued enforcement notices to direct marketers in 2024-25. Consent, purpose limitation, data minimisation. 30-day response requirement for erasure/rectification requests (2025 update). Fines up to R10 million.
Advertising Standards Authority. Influencer disclosure requirements enforced. The Guidance Note on Direct Marketing (2024) clarifies POPIA obligations for marketing agencies.
Amended 2024 (DTIC). Strengthened consumer privacy in direct marketing. Agencies must maintain documented consent trails for all creator-generated commercial content.
Stripe ZAR · instant EFT
Kenya
Enforced by the Office of the Data Protection Commissioner (ODPC). Mandatory registration for data controllers and processors. DPO required. DPIA for high-risk processing. Record fines issued in 2024 — enforcement is active and accelerating.
Kenya's national AI Strategy (March 2025) emphasises ethical data governance and accountability for algorithmic systems. Agencies using AI-assisted approvals or content creation face emerging regulatory scrutiny.
Communications Authority of Kenya / Consumer Federation of Kenya. Digital advertising disclosure requirements for influencer content. Commercial relationships must be identified.
Stripe KES · M-Pesa integration
Egypt
Personal Data Protection Law No. 151 of 2020. Consent required for processing personal data of Egyptian residents. Data subject rights enforced by the Personal Data Protection Centre (PDPC).
The Supreme Media Regulatory Council (SMRC) oversees digital content and advertising. Commercial content must be identified. Influencer licensing requirements apply to high-reach creators.
Law No. 181 of 2018. Consumer Protection Agency (CPA) enforces misleading advertising rules. Agency liability for commissioned commercial content.
Stripe EGP · Meeza · Fawry rails
THE AFRICA REALITY
The campaign runs on WhatsApp. The record has to capture it.
In Nigeria, South Africa, Kenya, and Egypt, the approval is a WhatsApp message. The brief is a voice note. The deliverable confirmation is a thread reply. Cognitiva reads directly from the channels your creators actually use.
Brief sent via WhatsApp. Voice note confirms.
The brand manager sends the brief. The creator responds with a voice note approval. Cognitiva captures the event: who, when, which thread, signed and time-stamped. Under NDPA and POPIA, this is the moment the legal basis for processing is documented — not reconstructed later.
Deliverable posted. Thread confirmed.
The creator publishes. The brand replies with ✓. Cognitiva captures the approval: named human, delivery channel, content reference, disclosure status (ASA/SMRC/CAK requirement). Immutable. Neither party can deny it after the fact.
Payment triggered. 1–2 days.
The approval_granted event triggers the payment rail. Stripe Africa local rails — NGN, ZAR, KES, EGP. Creator receives funds in 1–2 days. The 30–45 day cycle becomes a 2-day cycle. Payment record auto-generated and linked to the approval event.
NDPC asks. Information Regulator asks. ODPC asks. You respond in minutes.
The regulator requests proof of consent, disclosure compliance, or payment documentation. You run a query. The dossier was pre-built at execution time — campaign by campaign, creator by creator, jurisdiction by jurisdiction.
YOUR RECONCILIATION COST
We run the numbers on the call. Here is the model.
Numbers modelled against your actual campaign volume on the proof call. Your portfolio, your CFO, your number.
YOUR STACK. UNCHANGED.
We read from the tools your teams already use across Africa.
WhatsApp, Slack, email, Stripe, local payment rails. Cognitiva sits beneath every tool and captures the events your finance team connects manually today.
Communication
Project & Approval
Payment & Finance
Signing & CRM
WHAT YOUR BRAND CLIENTS NOW GET
Every campaign you bill — auditable before the invoice arrives.
Brand procurement and legal teams across Africa increasingly require documentary proof that agency-delivered work happened as commissioned — and that it complied with NDPA, POPIA, and the Kenya DPA.
The approval record.
Who approved the deliverable, when, via which channel, against which version of the brief. Cryptographically signed. Neither party can amend it. WhatsApp voice note, Slack message, email — all captured with equal evidentiary weight.
The payment trail.
Every local rail payment linked to the specific approval that authorised it. NGN, ZAR, KES, EGP — each with a compliant payment record. Your CFO and your client's CFO see the same object.
The compliance dossier.
NDPA/POPIA/Kenya DPA consent, disclosure status per post per platform, VAT/WHT metadata per transaction — assembled automatically as the campaign runs. Available on demand.
The competitive moat.
Agencies that deliver auditable execution records across multiple African jurisdictions become the agencies that win enterprise procurement. The brands asking for this documentation are growing. Your record is your retention tool.
THE PROOF CALL
45 minutes. One live campaign. You leave with the dossier.
We model the reconciliation saving and the compliance gap against your actual campaign volume. No deck. No general claim. Your portfolio, your CFO, your number. The export lands in your inbox before the call ends.
Book the walkthrough →NO DECK · NO NDA · JUST YOUR STACK ON SCREEN