Nigeria Gives Banks & Fintechs Deadline To Bring Payment Data Home & Make USD 850 M Cloud Spending Local
On paper, Nigeria’s ten largest banks look like they’re investing heavily in their future. They spent NGN 177.91 B (~USD 130 M) on technology in the first quarter of 2026 alone, up nearly 31% from the same period last year. But a substantial chunk of that money never stays in Nigeria.
It flows out as recurring payments to foreign cloud platforms like Amazon Web Services, Microsoft Azure and Google Cloud, where most of the country’s financial data currently sits.
Industry estimates suggest Nigerian enterprises spend as much as USD 850 M annually on foreign cloud infrastructure, capital that leaves the economy and places sensitive Nigerian data under foreign legal jurisdiction. That era is ending. And Nigeria’s banks are running out of time.
On 15 June 2026, the Central Bank of Nigeria issued a circular requiring all payment transaction data generated in the country to be stored and managed locally from 1 January 2027. The directive applies to deposit money banks, microfinance banks, mobile money operators, switching companies and payment service providers.
While the obligation was clear, the mechanism for proving compliance was not, at least until now.
A new mechanism
On 4 August 2026, NITDA, Nigeria’s federal technology regulator, signed three regulatory instruments establishing the National Sovereign Cloud Initiative: the National Cloud Computing Guideline, the National Cloud Technical Guideline, and the National Digital Infrastructure Assurance Framework, alongside a National Cloud Investment Strategy.
From October 2026, a national digital regulatory platform will go live as the central portal for onboarding, registration, technical assessment and certification of cloud providers, data centre operators, systems integrators, managed service providers and AI infrastructure operators. A public register of certified providers will follow.
“The same technical standard will apply to Nigerian companies and global hyperscalers,” NITDA Director General Kashifu Inuwa Abdullahi said at the signing ceremony. “Certainty attracts investment. Ambiguity deters it.”
The scramble
The timeline is tight for Nigeria’s banks and even tighter for fintechs. According to Krishnan Ranganath, CEO of UniCloud Africa, most Tier-1 and Tier-2 commercial banks have already localised their transaction data. But fintech companies, digital banks and other financial institutions that still host data overseas are racing against time.
“Many fintech firms have existing long-term agreements with international cloud providers, making migration expensive and operationally complex,” Ranganath told BusinessDay. “There is also a major trust factor. Institutions want assurance around infrastructure resilience and cybersecurity”.
Industry estimates suggest more than 90% of regulated businesses in Nigeria currently host data on foreign cloud platforms. Migrating critical applications and infrastructure within six months will require substantial investment, operational adjustment and technical redesign.
Opportunity beckons
The CBN directive has effectively turned a policy aspiration into a demand signal. Temitope Osunrinde, executive director of Africa Hyperscalers, described it as “one of the strongest demand signals yet for local data centres, cloud platforms and interconnection services”.
Nigeria currently has about 26 data centre facilities, with installed capacity estimated between 65 and 86 megawatts. Industry projections suggest that could climb beyond 400 megawatts within the next three to five years as new facilities come online. Local providers like Galaxy Backbone are already positioning themselves to serve banks and fintechs through sovereign cloud platforms.
Ayotunde Coker, CEO of Open Access Data Centres, told a media briefing in June that “we’ve spent years building reliable, world-class data centres that allow banks and other businesses to host their systems in Nigeria”.
Beyond enforcing data localisation rules, Nigeria is building an assurance framework that turns a regulatory burden into a structured market. Banks and fintechs now have a clear path to compliance. Providers, both foreign and domestic, have a single published standard against which they will be assessed.
It’s now a question of whether the infrastructure, the capital and the technical capacity can scale fast enough to meet demand before the January deadline.
