Nigeria Begins Sovereign Cloud Certification In October

Nigeria’s National Information Technology Development Agency (NITDA) has signed the regulatory instruments underpinning the National Sovereign Cloud Initiative (NSCI), establishing unified rules, technical standards and an investment roadmap for cloud service providers, data centres, artificial intelligence infrastructure and government digital assets.

Kashifu Inuwa Abdullahi, NITDA Director-General signed three instruments at a ceremony in Abuja on 4 August, with the agency publishing the documents for public download this week. Attendees included Nadungu Gagare, Permanent Secretary of the Federal Ministry of Communications, Innovation and Digital Economy; Rakiya Opemi Yusuf, Director of the Payment Systems Supervision Department at the Central Bank of Nigeria; and Ikechukwu Nnamani, Chief Executive Officer of Medallion Data Centres.

The composition of the gathering highlighted the intersection between financial-sector regulation and commercial data-centre operations.

“Today’s signing marks our transition from policy development to implementation,” Abdullahi said.

The Four Documents

The initiative rests on four instruments. The National Cloud Computing Guideline sets the overarching rules for cloud adoption, while the National Cloud Technical Guideline establishes the technical standards providers must meet.

The National Digital Infrastructure Assurance Framework (NDIAF) provides the assurance mechanism through which compliance is verified rather than simply asserted. Alongside these frameworks, NITDA unveiled the National Cloud Investment Strategy, a roadmap for attracting investment into cloud infrastructure, data centres, sovereign computing and AI infrastructure.

The initiative builds on the federal government’s existing Cloud First Policy. NITDA said the instruments were developed through consultations involving government agencies, indigenous cloud providers, global hyperscalers, data-centre operators and development partners — a stakeholder base that matters because the framework will apply across the ecosystem.

The Date That Changes Behaviour

The operative provision is a deadline.

NITDA plans to operationalise a national digital regulatory platform by October 2026, through which it will conduct the onboarding, technical assessment, certification and regulation of cloud and digital infrastructure providers operating in Nigeria.

That moves the framework from a statement of principles towards an enforceable regulatory regime with a defined start date. Providers serving the Nigerian market — domestic operators and international hyperscalers alike — will be assessed and certified against the technical standards established by the new instruments.

Oversight will sit with a Sovereign Cloud Governance Committee, which the agency said would be constituted within two weeks of the signing.

What “Sovereign Cloud” Means In Practice

The term is used loosely across the industry, but the instruments give it more specific content.

A sovereign cloud framework typically addresses where data physically resides, which legal jurisdiction applies to the provider and its subcontractors, who can access data and under what authority, what assurance and audit rights the state retains, and what happens to workloads if a provider withdraws or a commercial relationship ends.

Abdullahi framed cloud infrastructure as a strategic national asset underpinning digital government, financial services, artificial intelligence, digital public infrastructure, innovation and digital trade.

The presence of the Central Bank’s payment systems supervisor at the signing also reflects that overlap. Nigeria’s financial sector already operates under data-localisation expectations, while cloud certification could provide a technical and institutional mechanism for enforcing those requirements.

An Explicitly Regional Ambition

NITDA did not confine the framework’s purpose to Nigeria.

Abdullahi told the ceremony that the country should “position ourselves not to serve Nigeria alone, but to serve West and Central Africa,” describing Nigeria as already the digital gateway to West Africa and arguing that achieving the wider ambition depends on building the infrastructure first.

That ambition, however, faces a measurable constraint.

The IMF’s recent assessment of AI in sub-Saharan Africa counted roughly 160 data centres on the continent — about 5.5 percent of the global total — with nearly half concentrated in South Africa, Nigeria and Kenya.

By capacity rather than facility count, the Africa Data Centres Association’s 2026 economic report places Africa at around 0.6 percent of global capacity.

Nigeria is among the three markets that account for most of the continent’s existing capacity. Whether certification can attract the investment needed to expand that capacity is the question the National Cloud Investment Strategy is intended to address.

Part of a wider regulatory sequence

The sovereign cloud instruments are the second major framework NITDA has issued in a month, following the National Software Quality Assurance Framework, signed on 30 July. That framework will make independent third-party testing a precondition for federal software deployment from the second quarter of 2027.

Both sit within a broader Nigerian regulatory build-out this year that includes the NIMC Act 2026, which designates the identity commission as the country’s root of digital trust, and an executive order placing telecommunications infrastructure under critical national information infrastructure protection.

The trajectory across these measures is consistent: Nigeria is moving from digital policy towards enforceable regulatory regimes with designated oversight bodies and defined deadlines.

What can be tracked from here is specific: whether the regulatory platform opens on schedule in October; how many providers — domestic and international — are certified in the first cycle; the composition and published decisions of the Sovereign Cloud Governance Committee; and whether the investment strategy translates into announced data-centre capacity.