Programme pricing & implementation support

Choose the support level that fits how your organisation wants to implement.

Every package includes the complete Provara Group POPIA Compliance Programme. The difference is the level of expert support around implementation—from a largely self-directed approach to substantially more hands-on consulting guidance.

Book a Demo → Review the Programme →

Once-off programme pricing · No VAT charged · No mandatory ongoing software subscription

Programme packages

One complete programme. Three support models.

Start with the level of support your organisation realistically needs. The programme itself is not reduced at lower tiers; the difference is the amount of expert implementation involvement. All three programme packages can be purchased securely online.

Self-directed implementation

Programme Essentials

Best for organisations with the internal capacity and confidence to implement the guided programme largely independently.

R24,500

Once-off · No VAT charged

Complete programme · Self-directed implementation

Complete eight-phase POPIA Compliance Programme
Interactive implementation workspace
Implementation guides and guided walkthroughs
Governance documents, registers and evidence outputs
Programme dashboards, checklists and sign-off controls
Suitable where internal implementation capability already exists
No consulting hours included

Recommended Supported implementation

Programme Plus

Best for organisations that want expert guidance and structured support while they work through the programme internally.

R39,500

Once-off · No VAT charged

6 hoursspecialist implementation support included

Everything included in Programme Essentials
Additional implementation guidance across the programme
Structured support as the organisation progresses through phases
Expert input on implementation questions and programme use
Stronger fit for first-time formal POPIA implementation
Balanced internal ownership with external guidance
Up to 6 consulting hours included across the programme

Hands-on implementation support

Fully Guided Programme

Best for organisations that want substantially more consulting involvement and hands-on guidance through implementation.

R79,500

Once-off · No VAT charged

24 hoursspecialist implementation support included

Complete Programme and workspace
Substantially more hands-on implementation support
Greater consulting involvement across phase execution
Review and guidance around implementation decisions
Best fit where internal privacy capacity is limited
Structured engagement focused on getting the programme implemented
Up to 24 consulting hours included across the programme

Consulting-hour limits apply to programme support. Programme Plus includes up to 6 consulting hours and Fully Guided includes up to 24 consulting hours across the implementation period. Included hours are used for programme-related implementation guidance, review discussions and advisory support. Material bespoke work—such as complex PIIAs, breach investigations, extensive contract review, large-scale ROPA builds, legal opinions or multi-jurisdiction assessments—is separately scoped.

Licence scope. Each programme purchase is licensed for internal use by one contracting legal entity. Use for an additional subsidiary, group entity, client or unrelated organisation requires a separate licence unless otherwise agreed in writing.

Compare the implementation models

The decision is really about how much support you want.

The table below is intentionally simple: the programme remains complete across all three options. What changes is the degree of implementation guidance and consulting involvement.

What you are choosing	Essentials	Programme Plus	Fully Guided
Complete eight-phase programme	Included	Included	Included
Implementation workspace	Included	Included	Included
Governance resources & evidence outputs	Included	Included	Included
Implementation approach	Primarily self-directed	Internally led with expert guidance	More hands-on guided implementation
Best fit	Established internal capacity	Most SMMEs implementing formally for the first time	Limited internal privacy capacity
Consulting involvement	Not included as part of the package	Structured implementation guidance	Substantially greater hands-on support
Included consulting allowance	0 hours	Up to 6 hours	Up to 24 hours
Additional consulting	Separately scoped and quoted	Separately scoped and quoted once the included allowance is used	Separately scoped and quoted once the included allowance is used
Published programme price	R24,500	R39,500	R79,500

Included across the programme

Whichever package you choose, the governance model stays intact.

The package level should determine support—not whether the organisation gets a weaker privacy programme.

Eight-phase methodology

A sequenced implementation route from readiness and governance through ROPA, documentation, operators, security, training and monitoring.

Interactive workspace

Guided workflows, dashboards, registers, checklists, evidence currency, sign-off and backup controls.

Governance resources

Practical policies, notices, procedures, registers, assessments and implementation tools aligned to the programme.

Evidence architecture

Phase evidence workbooks, controlled records, Governance File structure and formal Information Officer close-out.

Additional POPIA consulting services

Need help with one specific privacy problem? Scope it separately.

Not every organisation needs the full programme. Provara Group can also support defined POPIA matters as standalone consulting engagements, scoped according to the issue, complexity, volume and required deliverables.

Assessment

POPIA Gap & Readiness Review

Independent review of the current governance position, material gaps, implementation priorities and recommended remediation roadmap.

Data governance

ROPA & Data Mapping Support

Support to identify processing activities, structure the Record of Processing Activities, clarify data flows and improve the quality of existing ROPA records.

Privacy risk

PIIA / Privacy Risk Assessments

Scoped assessment of higher-risk processing, new projects, technologies or data uses requiring a more formal privacy-impact review.

Third parties

Operator & Supplier Privacy Reviews

Review operator relationships, data-protection terms, safeguards, cross-border elements and identified privacy-control gaps for defined suppliers or service arrangements.

Transfers

Cross-Border Data Transfer Review

Assess defined international data flows, POPIA section 72 considerations, contractual safeguards and supporting transfer-governance requirements.

Documentation

Policy, Notice & Procedure Review

Review or develop defined POPIA governance documents, privacy notices, procedures or operational guidance against the organisation’s actual processing context.

Incidents

Security Compromise / Breach Support

Practical privacy-governance support following a suspected or confirmed compromise, including assessment, response coordination and notification-readiness support where appropriate.

People

POPIA Training & Awareness

Scoped awareness sessions, management briefings, Information Officer guidance or role-relevant training tailored to the organisation’s privacy risks and responsibilities.

Assurance

Client & Due-Diligence Privacy Support

Support with client privacy questionnaires, procurement assessments, privacy due diligence and evidence preparation where an organisation must demonstrate its POPIA governance position.

Governance

Information Officer Advisory Support

Defined advisory support for Information Officers or Deputy Information Officers on governance decisions, oversight, prioritisation and privacy-programme maturity.

Remediation

Targeted Compliance Remediation

Implementation support against an agreed set of audit, client, regulator, legal or internal review findings rather than a full programme implementation.

Project privacy

Privacy-by-Design Project Review

Privacy review of a defined new system, process, technology implementation, data use case or business change before or during deployment.

Scoped consulting is quoted separately. There is no standard published price because the effort depends on the number of entities, processing activities, systems, suppliers, jurisdictions, documents, stakeholders and deliverables involved. A short scoping discussion is used to define the work before a proposal is issued.

Discuss a scoped engagement →

How scoped consulting works

Define the problem first. Then define the engagement.

Scoped work is intentionally not sold as an open-ended hourly commitment. The objective is to agree the problem, boundaries and deliverables before work begins.

Scope

Clarify the privacy issue, entities, systems, stakeholders, jurisdictions and desired outcome.

Define deliverables

Agree what will be reviewed, produced, facilitated or implemented and what is outside scope.

Confirm proposal

Issue a defined proposal based on the agreed scope, complexity, assumptions and dependencies.

Deliver

Complete the engagement against the agreed outputs, with any additional work separately scoped before proceeding.

Pricing questions

A few things to clarify before you choose.

The programme is productised; additional consulting is scoped. Keeping those two models separate makes the commercial arrangement clearer for the client.

Do all three programme packages include the full eight-phase programme?

Yes. The programme itself remains complete across all three packages. The key difference is the level of implementation guidance and consulting involvement around the programme.

Is there an ongoing software subscription?

No mandatory ongoing software subscription is required for the browser-based implementation workspace. The programme is structured as a once-off purchase, subject to the applicable licence and package terms.

What does one programme licence cover?

Each programme purchase is licensed for internal use by one contracting legal entity. Additional subsidiaries, group entities, clients or unrelated organisations require a separate licence unless otherwise agreed in writing.

Is VAT added to the published programme prices?

No. Provara Group is not currently registered for VAT, so VAT is not charged on the published programme prices. The amount shown for each package is the programme price payable, subject to the applicable licence and purchase terms.

Can we buy consulting without buying the full programme?

Yes. Defined POPIA matters can be scoped as separate consulting engagements where the organisation needs support with a specific issue rather than the full implementation programme.

Why are consulting-service prices not published?

Standalone privacy work can vary materially depending on the number of entities, systems, processing activities, suppliers, jurisdictions, documents, stakeholders and required outputs. A defined scope is therefore agreed before a proposal is issued.

How do the included consulting hours work?

Programme Plus includes up to 6 consulting hours and Fully Guided includes up to 24 consulting hours across the programme. The allowance is used for programme-related implementation guidance, review discussions and advisory support. Any additional consulting, or material bespoke work outside the programme scope, is separately scoped and quoted before work proceeds.

Which programme package would suit most SMMEs?

Programme Plus is positioned as the recommended option where an organisation wants to retain internal ownership of implementation but would benefit from structured expert guidance while progressing through the programme.

Not sure which route fits?

Start with the outcome you need. We can determine the right engagement from there.

Book a programme demonstration if you are considering full POPIA implementation, or contact Provara Group to scope a specific privacy advisory requirement.

Book a Demo → Discuss a Consulting Scope →

Provara Group is not currently registered for VAT and VAT is not charged on the published programme prices. Included consulting allowances are capped at 6 hours for Programme Plus and 24 hours for Fully Guided. Additional consulting and material bespoke work are separately scoped and quoted before work proceeds. Scoped consulting services are subject to a separate agreed scope and proposal. Provara Group provides structured compliance implementation guidance and practical privacy-governance support. Services do not constitute a guarantee of regulatory compliance and do not replace legal advice where specialist legal interpretation is required.