The new CBN directive mandates that local transaction data, payment records, customer financial information, and core banking operations must reside within Nigeria’s borders. Institutions that fail to comply face regulatory enforcement, penalties, and licence risk. The question is no longer whether to move, but how and how fast.
The challenge is that most Nigerian financial institutions are deeply embedded in foreign cloud infrastructure. Their applications, data pipelines, security frameworks, and disaster recovery protocols were all designed and optimised for these large global cloud environments.
Migrating critical workloads to domestic infrastructure is not a simple copy-and-paste exercise; rather, it requires re-architecting for a new environment, testing performance parity, and ensuring security equivalence. Doing all of this in six months while running a live banking operation is a feat of engineering and project management that few institutions are fully prepared for.
Infrastructure providers like MTN are investing heavily in domestic capacity, signaling that the gap between local and foreign clouds is narrowing. For compliance-regulated workloads, domestic infrastructure is no longer just a fallback but a rational choice, leaving CIOs to determine which provider can best handle tier-1 workloads. That evaluation is where the real difficulty lies because vendor sales pitches are abundant but inherently biased, and industry conferences are often public and postured.
What decision-makers need is independent, technically rigorous guidance on how to think about the problem. They must understand what the CBN framework requires in architectural terms, how to model the total cost of ownership when comparing providers, and what a phased migration looks like for a live banking environment. These are the questions that must be answered through industry-wide collaboration rather than individual vendor interests.
While significant investments in domestic infrastructure now offer the capacity to meet the demands of Nigeria’s financial sector, the compliance journey remains a systemic challenge that transcends the capabilities of any single provider.
The January 2027 deadline is real. It is enforceable and the institutions that delay will find themselves in a compliance crisis, not a competitive one. The institutions that act now, strarting with begin their gap assessments, their vendor evaluations, and pilot their migrations, will not only meet the deadline. They will emerge stronger, with infrastructure that is closer to their customers, subject to Nigerian jurisdiction, and aligned with the strategic direction of the economy.