The National Information Technology Development Agency (NITDA) and the Central Bank of Nigeria (CBN) will bring together regulators, banks, fintech companies and digital infrastructure providers for an Executive Regulatory Dialogue on the National Sovereign Cloud Initiative (NSCI). The meeting, announced on 19 October 2026, is scheduled for 28 October 2026 in Lagos.

The goal is to work out how Nigeria’s push for “sovereign” cloud, meaning cloud services that keep data and control within the country, will be applied in one of the most data-heavy parts of the economy. For anyone who runs payments, lending, savings or accounting systems in the cloud, this is a development to follow closely.

What is on the agenda

According to the announcement, the dialogue will cover regulatory expectations, how ready domestic infrastructure is, and practical approaches to data localisation and sovereign cloud adoption. Four themes are expected to dominate:

• Workload classification: deciding which systems and data must be hosted under sovereign or domestic arrangements, and which can stay where they are.
• Regulatory compliance: how institutions will show they meet the rules.
• Infrastructure capacity: whether local data centres and providers can handle the demand.
• Investment opportunities: where new capacity and services are needed.

The organisers say they want to identify priority actions and areas that still need regulatory clarity, with implementation described as “coordinated, practical and phased”. No new obligations were announced with the dialogue itself.

How we got here

The financial-sector talks build on a set of policy steps taken earlier this year. In August 2026, NITDA Director-General Kashifu Inuwa Abdullahi signed a package of cloud instruments, including a National Cloud Computing Guideline, a National Cloud Technical Guideline and a National Digital Infrastructure Assurance Framework. The assurance framework is meant to verify, through assessment, that cloud and data centre providers actually meet national technical standards rather than simply claiming to. NITDA also set up a taskforce to drive the sovereign cloud programme.

NITDA said a regulatory platform for onboarding, assessing and certifying providers would be running by October 2026, with plans for a public register of certified cloud providers. The agency has stressed that the same standards apply to local providers and global hyperscalers, and that Nigeria is not closing its market to foreign cloud companies.

The CBN’s payment data rules

The CBN’s involvement matters because of its own data localisation directive. As reported, it requires payment transaction data generated in Nigeria to be stored and managed domestically, and covers deposit money banks, microfinance banks, mobile money operators, switching companies and payment service providers, with effect from 1 January 2027. A certified provider register would give these institutions a standard way to check whether a cloud provider meets the requirements, something they previously lacked.

Why this matters beyond the big banks

Even if your business is not a licensed financial institution, these changes may reach you. Many SMEs build on fintech platforms, payment gateways and core banking software, and those partners will be the first to adjust. That could mean new hosting arrangements, updated contracts and data-processing terms, and in some cases price changes as providers pass on the cost of local infrastructure.

There are potential benefits too. More local data centre capacity can mean lower latency for Nigerian users, less exposure to foreign-exchange swings on cloud bills paid in dollars, and clearer rules about where customer data lives, which helps when dealing with the Nigeria Data Protection Act.

Key details are still open, including the exact certification criteria, any fees and how strictly workload classification will be applied. That is precisely what the Lagos dialogue is meant to clarify, so businesses should avoid making expensive moves on rumours alone.

What you should do

1. Map your data. List the systems that hold payment, customer and financial records, and note where each one is hosted.
2. Ask your providers. Write to your cloud, payment and software vendors and ask how they plan to meet the NSCI and CBN requirements, and whether they intend to seek NITDA certification.
3. Review contracts. Check whether your agreements let you choose data location and move data if rules change.
4. Watch for the outcomes of the 28 October dialogue and NITDA’s certified provider register before committing to migrations.
5. Budget early if you are a payment service provider or microfinance bank, since the CBN directive’s January 2027 date is close.

Sources

• Hyperscalers Africa: NITDA, CBN To Convene Financial Sector Dialogue On Data Localisation
• CIO Africa: Nigeria Begins Sovereign Cloud Certification In October
• Lawyard: Nigeria's Certified Cloud Register and financial sector compliance

Featured image: Photo: "Mediq Utrecht Data center Gwan Kho" by Gwan Kho, CC BY-SA 2.0, via Openverse — source