The Central Bank of Nigeria (CBN) has issued a sweeping directive requiring all institutions facilitating payments in the country to store and process payment-related data exclusively within Nigerian borders β and the order has set off alarm bells across the country's fintech sector.
In a circular released on Monday, June 15, 2026, the apex bank mandated that all data generated within Nigeria's financial system must be hosted and managed domestically. The policy is scheduled to take effect from January 2027, giving banks, payment companies, and fintech operators approximately six months to achieve compliance.
What the Directive Requires
The CBN frames the directive as a measure to strengthen the integrity, sovereignty, and resilience of Nigeria's payments infrastructure. Under the new rules, companies may continue working with major cloud infrastructure providers, but those providers must guarantee data residency within Nigeria's geographic borders.
That requirement effectively shifts workloads away from foreign cloud regions and into domestic data centres. Facilities that stand to absorb this migration include Equinix's MDXi, Rack Centre, Open Access Data Centres (OADC), and Kasi Cloud, alongside telco-backed infrastructure operated by MTN Nigeria and Airtel Africa.
Industry Pushback on Infrastructure Readiness
The core concern among fintech executives is not whether local data centres exist, but whether they can reliably support the scale and complexity of Nigeria's rapidly expanding payments sector. Most operators currently depend on global cloud giants such as Amazon Web Services (AWS) and Microsoft Azure for transaction processing, fraud detection, and customer data management.
Adedapo Sobayo, co-founder and Chief Technology Officer of payments company Rank, has been among the most vocal critics of the directive's timeline and preconditions.
"Of course, there are data centres in Nigeria, but the problem I have is the processing capacity of these data centres. The biggest companies in Nigeria are financial institutions, so what is the quality of service that these data centres can offer?" β Adedapo Sobayo, Co-founder and CTO, Rank
Sobayo acknowledges that Nigeria has seen a notable expansion in data centre investment in recent years, including new builds and capacity upgrades from MDXi, Rack Centre, OADC, Kasi Cloud, MTN Nigeria, and Airtel Africa. However, he argues that many fintechs have not yet stress-tested these facilities at production scale.
The Gap Between Paper Capacity and Real-World Performance
The distinction between available capacity and proven performance is central to the industry's unease. Fintech platforms processing millions of daily transactions require near-zero downtime, rapid failover mechanisms, and disaster recovery infrastructure that can absorb sudden spikes in payment volumes.
Executives also point to migration risk as a major operational hazard. Moving core payment workloads from globally distributed cloud environments to domestic facilities β under a compressed timeline β creates exposure to service disruptions, data integrity issues, and potential compliance gaps during the transition period.
Costs and Competitive Pressure
Beyond infrastructure concerns, fintech operators are weighing the financial implications of compliance. Domestic data hosting in Nigeria has historically carried a price premium compared to global hyperscaler pricing, particularly for smaller startups and mid-tier payment processors that lack the negotiating power of larger institutions.
The directive also raises questions about disaster recovery architecture. Nigerian data centres have expanded in number and total capacity, but multi-region redundancy β a standard resilience feature in global cloud deployments β remains more difficult to achieve when all data must stay within one country's borders. Companies tracking Nigeria's regulatory and fintech news are watching closely for further CBN guidance on disaster recovery requirements under the new framework.
What Comes Next
The CBN has not yet issued detailed technical guidance on how compliance will be audited or what penalties non-compliant institutions will face after January 2027. Industry groups and fintech associations are expected to engage the apex bank in the coming weeks to seek clarity on transition frameworks and phased implementation timelines.
For Nigerian fintech operators already navigating a demanding talent and technology environment, the directive adds a significant compliance burden to an already complex operational picture. The next six months will be a critical test of whether Nigeria's domestic data infrastructure can rise to meet the challenge β or whether the CBN will need to recalibrate its expectations before the January deadline arrives.