Storage and handover
We agree which records NXT will hold, where they will be stored, who owns the account and how files will be handed over securely. The plan records any backup and recovery requirements.
Zimbabwe / Monthly managed serviceManaged Data Storage
Managed Data Storage
& Protection
We help businesses hold and look after customer, staff and operational records for an agreed monthly fee. We organise the files, manage approved access and give you a record of the work each month.
What NXT can take on
Access and record updates
We maintain an authorised access list, process approved corrections and log changes. Your nominated contact decides who may view, amend or export records.
Retention and incident handling
We track review dates, flag records due for return or deletion and document your instructions. If we suspect unauthorised access, we alert your nominated contact immediately.
A monthly report
You receive a summary of work completed, access changes, outstanding requests and decisions needed from your team. We review volume and scope with you as the service grows.
Zimbabwe / Data protection
Working under Zimbabwe’s data protection framework
Zimbabwe’s Cyber and Data Protection Act [Chapter 12:07] designates POTRAZ as the Data Protection Authority. When your organisation decides why and how personal data is used, it is the data controller. When NXT handles those records on your instructions, it acts as a data processor.
Before any records move, we agree a written processing arrangement covering authorised access, security measures, retention, return or deletion, and incident escalation. We document where data will be hosted or accessed and identify any cross-border transfer requirements.
During scoping, we identify the licensing, registration and data protection officer requirements your organisation needs to check under Statutory Instrument 155 of 2024, including any applicable exemption. Your nominated lead retains responsibility for the controller’s decisions and notifications.
We escalate a suspected incident to your nominated contact immediately. Section 19 of the Act requires the controller to notify POTRAZ within 24 hours of a security breach affecting data it processes.
Start with a scoping call
Request a monthly data planTell us what you need to hold.
Share the types of records, approximate volume and the support you need. Please keep actual records, ID numbers and confidential documents out of the enquiry form.