← Back to all ventures
🔄  Mabadiliko · Transformation — Governance, Cybersecurity & Custom Software

Compliance is the start.
The system we build is the point.

We start by helping institutions comply with Tanzania's Personal Data Protection Act (Act No. 11 of 2022) — then go further, building the custom software, AI systems, and ICT infrastructure that make protection something you run, not just something you filed.

⚖️ PDPA Act No. 11 of 2022 🔒 GRC Advisory 💻 Custom Software Development 🤖 AI Systems & Automation ✅ Enforcement Active Since May 2023
2022
Act No. 11 — Tanzania's Personal Data Protection Act
May 2023
Enforcement became active
3
Disciplines combined — governance advisory, ICT delivery & custom software

A full business solution.
Not five different vendors.

Everything below already lives inside our four ventures and our advisory work — this is the map of how it fits together.

💻
Innovation

Innovation, Through Software

Ideas, built and running

Custom software development and AI systems — from a business dashboard to a full product like Mapato, built and run by this team.

  • Custom web & business software development
  • AI systems & automation consulting
  • The AI-native School Operating System (Maarifa)
  • Built and maintained in-house, not outsourced

For: businesses and schools that need a system no template can offer.

See Mabadiliko →
📣
Marketing

Marketing & Growth

Value that gets seen

Brand identity, logo design, digital marketing campaigns, and growth consultancy — the Digital Growth layer that runs through every venture.

  • Brand identity & logo design
  • Digital marketing — social, WhatsApp, search
  • Growth & business consultancy retainers
  • Free marketing support on the Fursa earning track

For: any business that's capable but not yet visible.

See Digital Growth →
🔐
ICT, Cyber & AI

ICT, Cybersecurity & AI

The ground everything else stands on

PDPA compliance, cybersecurity, and managed ICT — plus the custom software and AI systems that make it all operational, at Mabadiliko.

  • PDPA / GRC compliance advisory
  • Cybersecurity & staff awareness training
  • Custom software & AI systems (Mabadiliko)
  • Managed ICT support retainers

For: institutions that need protection they can actually run.

See Mabadiliko →
📊
Financial Management

Financial Management

Learn it, then run it

Bookkeeping, financial literacy, and business-ethics training at Mafunzo — and Mapato, the app that keeps the books day to day.

  • Financial literacy & bookkeeping training
  • Practical AI training for teams & professionals
  • Mapato — bilingual WhatsApp + PWA bookkeeping app
  • Automated payment reconciliation (on the roadmap)

For: SMEs that want the discipline and the tool, not just one of them.

See Mapato →
🤝
Professional Networking

Professional Networking

Trust, made introducible

Structured introductions to funders, banks, and trade partners, plus founder peer circles — with Fursa's community events as the low-commitment way in.

  • Trusted business identity for banks & funders
  • Founder & leadership peer circles
  • Trade-partner & funder introductions
  • Fursa networking, relationship & finance circles

For: founders and directors who need a wider, more useful circle.

See Fursa →

What the PDPA actually
requires of you.

Enforcement of Tanzania's Personal Data Protection Act has been active since May 1, 2023. Here's what that means in plain terms — not legal jargon.

01
You're a 'data controller' if you collect data
If your organization collects customer, student, patient, or staff personal data, the Act applies to you — regardless of your size.
02
Consent has to be real, not assumed
The Act requires clear, informed consent for collecting and using personal data — a signed form buried in fine print won't hold up.
03
Breaches must be reported, not managed quietly
Data breaches carry notification obligations. Institutions without a response plan discover this the hard way, mid-crisis.
04
Non-compliance carries real penalties
This is enforced law, not a best-practice suggestion — the cost of ignoring it now outweighs the cost of a proper audit.

Advisory that ends
in something implemented.

Mabadiliko combines governance advisory with hands-on ICT delivery — and, when a business needs more than a template can offer, custom software and AI systems built from scratch. Recommendations don't stay stuck in a report.

🔍
Step One

PDPA Compliance Audit

Know your exposure

A structured audit of how your organization collects, stores, and shares personal data, benchmarked directly against Act No. 11 of 2022.

  • Full data-flow & exposure mapping
  • Gap analysis against PDPA requirements
  • Clear, prioritized findings report
  • No jargon — findings your leadership can act on

For: schools, SMEs, NGOs, and institutions handling customer, student, or patient data.

📋
Step Two

GRC Advisory & Policy Drafting

Governance you can defend

Practical governance, risk, and compliance advisory — including drafted data-protection policies, consent frameworks, and staff training, grounded in consultative, board-style decision-making.

  • Data-protection policy & consent framework drafting
  • Board and leadership governance advisory
  • Staff cybersecurity & awareness training
  • Breach-response planning

For: leadership teams who need policy that will actually hold up under scrutiny.

🖥️
Step Three

ICT & Managed Support

Compliance you can run day to day

The technology layer that makes compliance operational — bundled ICT services, secure systems, and tools like Hesabu Pro and EazSell that keep your operations running on solid ground.

  • Bundled ICT services for SMEs & institutions
  • Secure systems setup & hardening
  • Hesabu Pro & EazSell deployment support
  • Ongoing technical support retainers

For: organizations that need the audit's recommendations actually implemented, not just documented.

💻
Step Four

Custom Software Development & AI Systems

Built for you, not off a shelf

When an off-the-shelf tool isn't enough, we build the system — web apps, business dashboards, and integrations, with AI-assisted automation baked in where it earns its place. The same team that built Mapato, our own retail-tracking product, from the ground up.

  • Custom web & business software, scoped to how you work
  • AI systems & workflow automation consulting
  • Integrations with the tools you already use
  • Built and maintained by the team behind Mapato

For: organizations that have outgrown generic software, or need something no template can do.

From first message
to an ongoing safeguard.

Free Gap-Check Call
A short WhatsApp or phone conversation to understand what data you hold and where your biggest exposure likely sits.
Audit & Report
We map your data flows against the PDPA and deliver a clear, prioritized findings report.
Remediation & Policy
We draft the policies, consent frameworks, and staff training your findings call for.
Ongoing Retainer
Stay compliant as your organization grows, with ICT support and periodic reviews built in.

"Wealth is a trust, not a possession — and so is the data an institution is entrusted with."

Mohd Asaa Khamis — Director & Business Growth Automation Architect, MOHD Technologies
Ready When You Are

Find out where you stand
before a regulator does.

Message us what you need — a compliance gap-check, or a custom system you want built — and we'll scope the right first step around it.