Nigeria’s sovereign cloud drive faces a test: can banks, fintech companies and payment operators migrate critical systems before the Central Bank of Nigeria’s January 1, 2027 deadline?
On November 9, the CBN and NITDA, with Africa Hyperscalers, convened a Lagos dialogue on migration, cybersecurity and operational resilience.
The bottleneck is execution, not simply server capacity
NITDA’s survey found that 26 of 44 financial institutions answering a readiness question had completed the required actions or expected to do so by the deadline. Fifteen said completion was unlikely or very unlikely; three could not assess their position. Twenty-two had not started implementation.
Meanwhile, 79 per cent of surveyed digital infrastructure providers said they were ready for financial-sector workloads. The immediate obstacle may therefore be institutions’ ability to turn plans into budgets, contracts and completed migrations, rather than a lack of local hosting capacity.
BusinessDay reported that only 25 per cent of respondents had secured board or executive approval and a budget, 23 per cent had contracted local providers, and 18 per cent had begun migration or remediation. The survey was self-reported, not a formal compliance assessment. Its figures indicate readiness, not confirmed compliance.
Also Read: Nigeria’s Sovereign Cloud Plan: What It Means for Data Security, AI and Digital Independence
What the January deadline actually covers
A CBN circular issued on June 15, 2026 requires financial institutions and other participants facilitating payments in Nigeria to store and manage payment transaction data generated within the country in Nigeria, in line with data-protection laws. Full compliance is required from January 1, 2027. Punch Newspapers+1
This is not an order for every Nigerian business to move all commercial data into the country. The Federal Government’s National Digital Cloud Policy keeps the market open to domestic and international providers. Its sovereignty safeguards apply to defined categories of government and regulated data, not all commercial information. fmcide.gov.ng
Payment operators must identify covered transaction records, establish where they are processed and stored, and check whether backups and vendor arrangements support local management. The deadline therefore reaches beyond buying rack space: institutions must carefully coordinate procurement, legal review, system architecture, staff controls and tests without interrupting live payment services across multiple providers.
Local hosting still has to be secure
Data stored in Nigeria are not automatically safe. At the November dialogue, CBN Deputy Governor Lamido Abubakar Yuguda stressed the need for cybersecurity, business continuity, disaster recovery and third-party risk controls. Institutions facing migration or contractual difficulties were urged to submit compliance plans. THISDAYLIVE
A poorly managed transition could disrupt transfers, card payments and other digital services. A well-tested migration could improve regulatory access to records and reduce dependence on infrastructure outside Nigeria. The difference will depend on recovery arrangements and operational controls, not a server’s location alone.
Back Story: From cloud policy to payment rules
The CBN issued its payment-data circular on June 15, 2026. On August 17, the Federal Government unveiled a National Digital Cloud Policy to attract investment, expand domestic infrastructure, modernise government services and position Nigeria as a hosting market. Punch Newspapers+1
The measures share a digital-sovereignty goal but serve different purposes: the cloud policy sets national direction, while the CBN circular creates a specific obligation for payment-system participants. Progress should be judged by completed, tested migrations, not announced plans or providers’ stated capacity.
Also Read: CBN Moves to Keep Nigerian Banks and Fintech Payment Data Inside Nigeria
