{"id":13861,"date":"2026-11-10T06:30:57","date_gmt":"2026-11-10T06:30:57","guid":{"rendered":"https:\/\/globalnigerianews.com\/index.php\/2026\/11\/10\/nigeria-turns-to-hybrid-cloud-infrastructure-for-its-postcode-database\/"},"modified":"2026-11-10T06:30:57","modified_gmt":"2026-11-10T06:30:57","slug":"nigeria-turns-to-hybrid-cloud-infrastructure-for-its-postcode-database","status":"publish","type":"post","link":"https:\/\/globalnigerianews.com\/index.php\/2026\/11\/10\/nigeria-turns-to-hybrid-cloud-infrastructure-for-its-postcode-database\/","title":{"rendered":"Nigeria turns to hybrid cloud infrastructure for its postcode database"},"content":{"rendered":"
\n

When Nigeria\u2019s National Digital Addressing System (NDAPS) launched on October 1, it promised to replace informal, landmark-based navigation with precise 11-character alphanumeric codes. The system is designed to improve e-commerce deliveries, enable address verification for banking and identity services, and assign unique digital postcodes to addressable buildings nationwide.<\/p>\n

Led by the Nigerian Postal Service (NIPOST) under the Federal Ministry of Communications, Innovation and Digital Economy, the initiative is intended to provide a reliable digital addressing infrastructure for the country.<\/p>\n

TechCabal reported<\/a> that technical checks of postcode.gov.ng<\/a>\u2019s public domain name system (DNS) records pointed to Amazon Web Services (AWS) infrastructure in the United States. The finding raised questions about whether a critical public digital asset was hosted abroad, just as Nigeria strengthens its push for data sovereignty.<\/p>\n

\u201cThe system has distinct layers,\u201d NIPOST spokesperson Ibrahim Musa told TechCabal in an email response. \u201cNigeria\u2019s digital postcode infrastructure runs on both AWS and Galaxy Backbone\u2014Nigeria\u2019s official digital infrastructure and shared services provider\u2014but they serve distinct functions.\u201d\u00a0<\/p>\n

What AWS\u2019s cloud services mean<\/strong><\/h2>\n

AWS has infrastructure across 247 countries. It opened its first Nigerian office<\/a> in Lagos in 2022 and has invested in an AWS Local Zone in Lagos to support customers and partners adopting its services locally.\u00a0<\/p>\n

The company told TechCabal that it does not disclose customer relationships without their permission.<\/p>\n

\u201cAWS is sovereign-by-design,\u201d AWS Communications Manager for Sub-Saharan Africa, Sonwabise Mzinyathi, said in an email response. \u201cWe have infrastructure globally so organisations can run AWS services in their own facilities or in a location they specify, keeping data exactly where they need.\u201d<\/p>\n

AWS also points to its Nitro System<\/a>, which uses specialised hardware and firmware to protect customer workloads running on Amazon Elastic Compute Cloud (EC2<\/a>). It is designed to prevent outside access to those workloads, including by AWS employees.<\/p>\n

The global cloud services provider stated that customers can also encrypt their data and manage their own encryption keys. \u201cCustomers who need to store and use encryption keys outside the AWS Cloud can use an AWS Key Management Service (AWS KMS<\/a>) external key store,\u201d said Mzinyathi, \u201cretaining exclusive control over cryptographic material.\u201d<\/p>\n

AWS argued that its infrastructure is designed to remain available during supply chain disruptions, network interruptions and natural disasters. \u201cWe\u2019ve instilled cloud resilience into our infrastructure, service design and deployment, operational model, and mechanisms to build more resilient cloud architectures,\u201d the company said.<\/p>\n

These capabilities, the company said, support its Digital Sovereignty Pledge<\/a>, which promises customers greater control over where their data resides, how it is accessed, and how workloads are managed. However, these controls do not automatically determine where customer data lives. That decision ultimately depends on how the customer builds and manages its system.<\/p>\n

The website is not the database<\/strong><\/h2>\n

NIPOST emphasised that the public-facing postcode.gov.ng uses AWS\u2019s global content delivery and web-protection services. These help pages load faster and protect the website against distributed denial-of-service (DDoS) attacks, which overwhelm online platforms with traffic until they become unavailable.<\/p>\n

\u201cThe public website, postcode.gov.ng, uses AWS\u2019s global content delivery and web-protection services, a standard approach used by many government and financial platforms to keep public portals fast and protected,\u201d NIPOST told TechCabal.<\/p>\n

The agency said Galaxy Backbone hosts and manages the core database. It contains the records that make the addressing system work, including building locations, geographic coordinates, and administrative boundaries.<\/p>\n

Its technical team and private partners support development and maintenance under its direction.<\/p>\n

\u201cThe content-delivery provider serving the public website does not host or have administrative access to the core database,\u201d NIPOST said.\u00a0<\/p>\n

AWS helps deliver and protect the public website but, according to NIPOST, does not hold or manage the master postcode records. The database and its backups remain within Nigeria.<\/p>\n

What Nigeria\u2019s cloud policy says<\/strong><\/h2>\n

NIPOST\u2019s arrangement is based on the National Digital Cloud Policy<\/a>, released by Communications Minister Bosun Tijani in August 2026, and NITDA\u2019s supporting National Cloud Computing<\/a> and Cloud Technical Guidelines.<\/a><\/p>\n

The policy distinguishes between public information and sensitive government data, with different hosting requirements for each.<\/p>\n

NIPOST considers public postcode lookups to fall under the policy\u2019s \u201cOpen\u201d data category, which has no data residency restrictions. This allows the public-facing website to use global infrastructure such as AWS.<\/p>\n

The core database is treated differently. NIPOST said it applies controls consistent with the policy\u2019s \u201cHighly Sensitive\u201d (Level 3) requirements, including keeping records within Nigeria and maintaining domestic disaster-recovery capabilities.<\/p>\n

Using Galaxy Backbone also reflects the policy\u2019s direction for federal agencies to meet their cloud hosting needs through the government\u2019s shared services model.<\/p>\n

However, NIPOST said it will still engage the Sovereign Government Cloud Governance Committee and NITDA on the system\u2019s formal classification as the policy\u2019s sovereignty framework is implemented.<\/p>\n

Formal classification is still part of the process, even though NIPOST says its current hosting arrangements follow the relevant Level 3 controls.<\/p>\n

In July, TechCabal examined<\/a> whether Nigeria\u2019s domestic data centre industry could support the Central Bank of Nigeria\u2019s (CBN) directive requiring banks, fintechs and payment companies to move their transactional data from foreign cloud servers to infrastructure within the country by January 1, 2027. The directive is expected to trigger one of Nigeria\u2019s largest cloud migrations.\u00a0<\/p>\n

NIPOST\u2019s arrangement reflects a wider push to keep sensitive information within Nigeria.\u00a0<\/p>\n

\n
\"Digital
Nigeria\u2019s digital postcode system aims to improve deliveries. Image source: iStockphoto<\/figcaption><\/figure>\n<\/figure>\n

The agency added that its hosting decisions balance security, resilience, cost, scalability and data sovereignty, with core infrastructure provided by government-owned Nigerian provider, Galaxy Backbone. It said the hosting arrangements would be reviewed as the use of NDAPS expands. It, however, didn\u2019t disclose the contract details of the current hybrid arrangement, arguing that they are subject to public procurement rules.<\/p>\n

Who controls the postcode database?<\/strong><\/h2>\n

With the core database hosted locally, the next question is who can access or control it.<\/p>\n

NIPOST said it retains ownership of NDAPS data and controls administrative privileges alongside Galaxy Backbone. The two organisations also manage the encryption keys protecting the system.<\/p>\n

Private contractors and technical partners, including Milsat Technologies, do not have unrestricted access. NIPOST said service providers access the system only when necessary to perform their duties, under contractual confidentiality and data-protection obligations, role-based access controls and audit logging.<\/p>\n

Banks, logistics companies and government agencies will connect to NDAPS through application programming interfaces (APIs), allowing different software platforms to exchange information. These integrations could let a bank verify an address or a delivery company locate a customer\u2019s building without relying on informal landmarks.<\/p>\n

NIPOST said access will be governed by agreements and limited to the location information required for service delivery.<\/p>\n

\u201cPersonal data is not shared through these interfaces,\u201d it said.<\/p>\n

Although the platform provides location information rather than personal identity records, how organisations combine that information with their existing customer databases will matter for privacy.<\/p>\n

Can local infrastructure handle the demand?<\/strong><\/h2>\n

Keeping the database in Nigeria addresses where the information lives, but not necessarily how reliably it can be accessed.<\/p>\n

Galaxy Backbone will support the infrastructure behind a system expected to serve banks, logistics companies and government agencies through automated queries. As adoption grows, demand will increase.<\/p>\n

Nigeria\u2019s domestic hosting environment faces practical challenges, including unreliable power supply, fibre cuts and network disruptions. Local providers must demonstrate that they can maintain services and recover quickly when infrastructure fails.<\/p>\n

NIPOST said NDAPS has primary databases, replicas, backups and disaster-recovery arrangements within Nigeria. It added that the system undergoes regular testing and continuous monitoring to restore services following cyber incidents, infrastructure failures or loss of access to a hosting environment.<\/p>\n

But having backup arrangements is different from showing they can withstand a major disruption. The real test will be how quickly the system can recover when millions of users and businesses depend on it.<\/p>\n

The outstanding data protection question<\/strong><\/h2>\n

Another compliance question concerns the system\u2019s data protection assessment.<\/p>\n

NIPOST confirmed that its Data Protection Impact Assessment (DPIA) is still in progress and that it is engaging the Nigeria Data Protection Commission (NDPC) on the system\u2019s data-processing arrangements.<\/p>\n

A DPIA helps organisations identify privacy risks associated with systems that process personal information. NDAPS is designed to map buildings across Nigeria, creating a national location database that could become increasingly useful to banks, businesses and government agencies.<\/p>\n

Although NIPOST said it doesn\u2019t share personal data through its APIs, location information can become more revealing when combined with other datasets, particularly those held by financial institutions and government agencies.<\/p>\n

While hosting the database on domestic servers satisfies data residency rules, location is only half the equation. The true test for NDAPS will be whether local infrastructure can deliver the uptime, automated query speeds, and disaster recovery that banks and logistics firms would need to make the system reliable.<\/p>\n<\/div>\n

Source: <\/p>\n

TechCabal<\/div>\n","protected":false},"excerpt":{"rendered":"

When Nigeria\u2019s National Digital Addressing System (NDAPS) launched on October 1, it promised to replace informal, landmark-based navigation with precise 11-character alphanumeric codes. The system is designed to improve e-commerce… <\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[13],"tags":[],"class_list":["post-13861","post","type-post","status-publish","format-standard","hentry","category-technology"],"_links":{"self":[{"href":"https:\/\/globalnigerianews.com\/index.php\/wp-json\/wp\/v2\/posts\/13861","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/globalnigerianews.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/globalnigerianews.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/globalnigerianews.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/globalnigerianews.com\/index.php\/wp-json\/wp\/v2\/comments?post=13861"}],"version-history":[{"count":0,"href":"https:\/\/globalnigerianews.com\/index.php\/wp-json\/wp\/v2\/posts\/13861\/revisions"}],"wp:attachment":[{"href":"https:\/\/globalnigerianews.com\/index.php\/wp-json\/wp\/v2\/media?parent=13861"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/globalnigerianews.com\/index.php\/wp-json\/wp\/v2\/categories?post=13861"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/globalnigerianews.com\/index.php\/wp-json\/wp\/v2\/tags?post=13861"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}