mydpo.com.br

What It Is

MyDPO is a Data Privacy Management System (DPMS) from W2CONN, designed primarily to help organizations comply with Brazil’s General Personal Data Protection Law (LGPD). It is not a technical security product such as a firewall, EDR, or vulnerability scanner; instead, it is a platform focused on privacy governance, legal compliance, IT risk, and process management.

Core Capabilities

Based on the available description, MyDPO covers employee engagement, contract management, ROPA, risk management, risk reporting, and DPIA, with dashboards showing key compliance metrics. Its BRAVO360 methodology emphasizes assessing an organization’s compliance status based on risk, asset management, and the behavior of relevant personnel. The Advanced plan supports customization of assets, root causes, and departments, and can include a company logo and an LGPD adaptation quality mark. The Custom plan further adds capabilities such as SADT data subject access requests, dedicated hosting, custom domains, white labeling, and support for multiple CNPJ registrations.

Pricing and Deployment

Pricing is relatively transparent: the Basic plan supports 1 DPO administrator and 10 users, priced at R$208.32/month or R$2,499.89/year; the Advanced plan supports 1 DPO administrator and 20 users, priced at R$499.99/month or R$5,999.89/year; the Custom plan requires contacting the vendor for a quote. In terms of deployment, the text presents it as an online system and mentions implementation through 100% digital consulting. The Custom plan can also provide dedicated hosting and an independent domain.

Pros and Cons

The main advantage is that its features are designed around a closed-loop LGPD compliance workflow, covering contracts, ROPA, DPIA, risk, and employee engagement. This makes it suitable for DPOs and compliance teams that need to manage materials and metrics in one place. Public package pricing also makes budget evaluation easier. Limitations include the lack of disclosed security certifications such as ISO 27001 or SOC 2, as well as no clear information on integrations such as API, SSO, SIEM, or ticketing systems. Details on alerting mechanisms, SLA, payment methods, and multilingual support are also insufficient.

Best Fit and Access from China

MyDPO is better suited to SMEs, legal and compliance teams, DPOs, and privacy consulting projects operating in Brazil and needing to establish an LGPD compliance framework. If a company is mainly dealing with GDPR or China’s Personal Information Protection Law scenarios, it should carefully assess how well the product fits. Access from China is not mentioned in the available text and is therefore unknown; payment methods are also not disclosed. Alternatives to consider include OneTrust, TrustArc, DataGrail, Securiti, BigID, or local Chinese data security governance and compliance consulting solutions.