AWS for Industries

Sovereign by design: How AWS helps Nigeria’s financial services industry protect data and drive innovation

Nigeria’s financial services industry is thriving. Digital payments are growing at pace, fintech innovation is reshaping customer expectations, and regulators are strengthening frameworks around data governance, operational resilience, and transparency. The Central Bank of Nigeria’s recent Circular PSS/DIR/PUB/CIR/001/004—addressing data localization, market structure, and beneficial-ownership disclosure—underscores the direction of travel: institutions must demonstrate robust control over how and where customer data is managed.

For financial institutions, navigating this evolving landscape and the choice of technology partner matters more than ever. That partner must offer verifiable data control, world-class security, and the scale to support continuous innovation—today, and into the future.

This is what Amazon Web Services (AWS) was built to deliver.

In this post, we share how AWS helps Nigeria’s financial services industry protect data and drive innovation.

AWS is sovereign by design

Sovereignty is how AWS was built from day one. Our sovereign-by-design architecture helps highly regulated organizations, such as financial institutions, comply with strict in-country data residency while mitigating latency and maintaining operational sovereignty. It provides financial institutions verifiable control over four things that matter most:

  • Control over where data resides – Using AWS, customers control where their data is stored and processed. We have infrastructure globally so organizations can run AWS services in their own facilities or in a location they specify, keeping data exactly where they need.
  • Verifiable control over data access – The AWS Nitro System uses specialized hardware and firmware to protect data from outside access during processing on Amazon Elastic Compute Cloud (Amazon EC2). The Nitro security model is locked down and prohibits administrative access, avoiding the possibility of human error and tampering. This is validated by the NCC Group in a public report.
  • The ability to encrypt – Customers can decide to encrypt their data, including using customer managed keys that are inaccessible to AWS operators. Customers who need to store and use encryption keys outside the AWS Cloud can use an AWS Key Management Service (AWS KMS) external key store, retaining exclusive control over cryptographic material.
  • Resilience of the cloud – Control over workloads and high availability are essential in events like supply chain disruption, network interruption, and natural disaster. At AWS, we’ve instilled cloud resilience into our infrastructure, service design and deployment, operational model, and mechanisms to build more resilient cloud architectures.

These capabilities support our Digital Sovereignty Pledge—a public commitment to offer AWS customers the most advanced set of sovereignty controls and features available in the cloud.

AWS in Nigeria

The AWS local economic footprint in Nigeria extends well beyond our AWS Local Zones and AWS Outposts infrastructure. AWS opened its first Nigerian office in Lagos in 2022 to support the growing number of customers and partners adopting AWS services in Nigeria. Nigerian fintechs like Aella Credit are building on AWS to solve identity verification challenges unique to the Nigerian market, using Amazon Rekognition to deliver real-time Know Your Customer (KYC) processes at scale across emerging markets.

In January 2025, AWS began accepting card payments in Nigerian Naira (NGN), so Nigerian businesses can settle their cloud invoices in local currency. This is part of a broader commitment of AWS investing in Nigeria’s digital ecosystem, alongside the Local Zone in Lagos, and reflects a commitment to making world-class cloud infrastructure accessible to Nigerian enterprises on local terms.

AWS is also investing in Nigeria’s digital talent pipeline. AWS has trained more than 180,000 people in Nigeria on cloud skills since 2017. We have partnered with the Federal Ministry of Education for a free digital skills program covering cloud computing, AI, and machine learning. The Federal Government’s 3 Million Technical Talent (3MTT) program also runs on AWS, training Nigeria’s next generation of digital professionals.

The AWS partner ecosystem in Nigeria includes local systems integrators and consulting firms delivering cloud solutions to Nigerian enterprises, and our presence supports local businesses, develops local talent, and helps Nigerian organizations compete globally from a local foundation.

The most secure cloud for Nigerian financial services

Nigerian financial institutions process billions of Naira in transactions daily. The Local Zones and Outposts infrastructure meets the highest global security standards to underpin those services.

AWS provides security, compliance, and governance services and features, built to meet the requirements of the most security-sensitive organizations in the world. We hold 143 security standards and compliance certifications, including SOCs 1/2/3, ISO 27001, ISO 27017, ISO 27018, and PCI DSS Level 1. Customers can access third-party audit reports through AWS Artifact, supporting regulatory oversight and institutional due diligence.

Security at AWS is our top priority. Enterprises who move to the AWS Cloud can achieve a higher security posture than in their legacy environments, with greater agility. As an AWS customer, regardless of your size or investment, you inherit all the benefits of our experience, tested against the strictest of third-party assurance frameworks.

When regulators and boards ask “How is our data protected?”, AWS customers can provide independently verified, technically enforced answers—not just contractual assurances.

Operational resilience: Built for always-on payment systems

Financial regulators globally—including in Nigeria—are raising expectations around operational resilience. Payment systems must be available 24/7, withstand disruption, and recover rapidly when incidents occur.

The AWS approach to resilience is structural. Our infrastructure at every level—AWS Regions, Local Zones, and Outposts—are built for resilience. Automated failover and self-healing capabilities are built into core services. Resilience testing tools, including AWS Resilience Hub and AWS Fault Injection Service, help institutions validate their disaster recovery posture continuously, not just during annual exercises.

Conclusion

AWS delivers the most extensive cloud, serving some of the world’s most demanding real-time payment systems.

AWS is sovereign by design, secure by default, and built for the demands of financial services—in Nigeria and around the world.

Michael Jefferson

Michael Jefferson

Michael Jefferson is head of Financial Services Public Policy EMEA at AWS. Michael leads on policy and engagement for issues relating to adoption and use of cloud across the finance sector. He has experience working in technology, trade associations, investment banking and the UK Government. Before joining AWS, he led on capital markets policy at the Investment Association and prior to that at UK Finance, representing the UK-based banking and finance industry. Previously, he was head of Public Policy EMEA at Nomura and spent the early part of his career as a UK civil servant working on international trade and business issues, including working in the office of the UK Minister for Trade and Investment.

Fiona Makaka

Fiona Makaka

Fiona Makaka works in the compliance and security assurance department in Amazon Web Services. She is in charge of ensuring compliance with security requirements in Sub Sahara Africa and is based in Nairobi Kenya. Fiona ensures AWS is compliant with security requirement and gives assurance to regulators and customers on the internal controls AWS has in place to secure customer workloads. Fiona is the main point of contact for cybersecurity authorities in Africa.

Mayowa Amao

Mayowa Amao

Mayowa Amao is an Enterprise Solutions Architect at Amazon Web Services, based in Lagos, Nigeria. He works with financial services customers across West Africa, helping them design and implement cloud solutions that address their unique regulatory, operational, and technology challenges. His focus areas include generative AI, hybrid cloud architecture and application modernization. He is a regular speaker at local and regional technology events, sharing knowledge on cloud adoption, AI/ML, and digital transformation in the African financial services sector.