Goodbye mango tree, hello AWS: The cloud sovereignty paradox behind Nigeria’s new postcode

“Turn left at the blue container, look for the mango tree, and stop before the brick fence.”

For generations, finding a home in Nigeria meant understanding street codenames and landmarks. Now, the government is replacing that with a digital postcode system that promises building-level precision.

On October 1, Nigeria launched the National Digital Alphanumeric Postcode System (NDAPS), assigning unique 11-character codes to “addressable buildings” across the country. The system is designed to pinpoint buildings, making it easier to locate deliveries, emergency response, financial services, and government programmes.

But the more accurately the system locates buildings, the more valuable its data becomes—and the more it matters who can access and control it.

The system raises questions about where the data is stored, who can access it, and what a breach could expose. It also tests Nigeria’s ability to protect a database that pinpoints buildings nationwide as the government pushes for greater control over its digital infrastructure.

A postcode that points to a building

The new system assigns an 11-character alphanumeric code to each building that can be assigned an address.

The first two letters identify the state. Two digits identify the local government area. Three characters identify the district, the primary unit used for postal sorting. Two letters identify the area, which can contain no more than 99 buildings. The final two digits identify the individual building as a GIS-located delivery point.

Speaking during the launch on October 1, Bosun Tijani, Nigeria’s Minister of Communications, Innovation and Digital Economy, said the country loses an estimated ₦50 billion ($37.66 million) to ₦80 billion ($60.26 million) a year because of missed and failed deliveries linked to poor addressing.

Yet, Tijani stressed that the addressing crisis stretches far beyond that.

“Where is your home?” he asked. “Where is your business? Where should an ambulance go in an emergency? Where should a package be delivered? And where should government provide critical services? For too long in Nigeria, answering that simple question accurately has been more difficult than it should be. The consequences are significant.”

An accurate address can help an ambulance find a patient faster, a bank confirm where a customer lives or a business operates, and a food delivery rider reach a customer without relying on directions to a nearby petrol station or landmark.

For businesses such as restaurants, the benefit is immediate. Blessing John, who runs a food business in Abuja, Nigeria’s capital, said the system could make deliveries easier. But she raised a concern about what happens to the information once it enters the system.

“If the postcode is compromised, what happens to us?” she said.

The sovereignty question

In August, the federal government unveiled its National Digital Cloud Policy, which sets requirements around the protection, residency and control of certain government and regulated data.

The National Information Technology Development Agency (NITDA)  and the Budget Office in August also established a technical committee to advance the National Sovereign Cloud Initiative, including the financial, procurement and investment framework needed to build greater domestic control over cloud infrastructure.

The Central Bank of Nigeria is moving in the same direction. In a June 15 circular, it directed financial institutions and payment participants to store and manage payment transaction data generated in Nigeria within the country. The requirement takes effect on January 1, 2027.

For categories of sensitive or regulated information, Nigeria wants more control over where data is stored and which legal jurisdictions govern it. That makes the infrastructure behind NDAPS worth examining.

TechCabal found that postcode.gov.ng’s public-facing infrastructure resolves to Amazon Web Services, a foreign-headquartered cloud provider.

That does not, by itself, establish where the underlying NDAPS database is stored, nor does it prove that the postcode data itself is outside Nigeria. A website’s public-facing infrastructure and the location of its databases can be different.

But for a government increasingly committed to digital sovereignty, the finding raises legitimate concerns about where the national postcode database is stored and which jurisdiction governs it.

But the finding raises a legitimate question for a government increasingly committed to digital sovereignty: where exactly does the national postcode database live, and under whose jurisdiction?

Smith Osemeke, founder and chief executive of Unitellas Edge Cloud, a Lagos-based edge cloud platform, believes the issue deserves scrutiny.

“Offshore hosting of NDAPS undercuts the government’s own localisation message,” he told TechCabal in a telephone interview. “A foreign-headquartered provider can be compelled under foreign law.”

Beyond cloud ownership, his concern is about what a building-level registry linked to geographic coordinates reveals. “strategic data,” he stressed, because it can show the location of citizens, critical facilities and security assets. 

The argument for him is that “A foreign headquartered provider can be compelled under foreign law… and Nigerian authorities cannot guarantee access to, or protection of, the data during a dispute or sanctions episode.”

Osemeke argues that Nigeria does not lack the infrastructure needed to host NDAPS domestically.

According to him, Nigeria’s data centre portfolio shows that Nigeria is capable. A June 2026 analysis by Arizton, a global market research and advisory firm headquartered in Chicago, Illinois, of Nigeria’s data-centre market identified 21 operational facilities and 16 more in development, with Lagos emerging as the country’s main digital infrastructure hub.

Osemeke says the main NDAPS database needs relatively little storage, and local cloud providers should be able to handle requests from connected applications and process the system’s mapping data.

“Capacity is not the binding constraint as the registry is modest in storage terms,” he said. The bigger factors, he argues, are resilience, compliance and security.

Chidi Omeje, editor-in-chief of Security Digest magazine, a security- and defence-focused publication, is less concerned about the idea of digital addressing itself than about the limits of its coverage and the consequences of a breach.

“If it’s just to cover maybe 25% of the entire country, then it’s a useless venture because who told you that the criminals are living in the addressable places?” Omeje told TechCabal in an interview.

Nigeria’s security challenges reach well beyond neighbourhoods with formal addresses. Criminal groups also operate in informal settlements, rural communities and remote areas, where limited infrastructure makes mapping more difficult.

For him, the digital postcode system will only become a useful security tool if it reaches these places, not just affluent urban neighbourhoods. Its real test is whether it can bring areas long excluded from formal maps into view.

As the government races to build a modern, data-driven economy, it must reconcile the promise of precision with the reality on the ground—ensuring that the infrastructure protecting its citizens’ data is as robust as the map itself, and that the benefits of connectivity reach every corner of the nation, not just those in “addressable buildings.“

True scale demands moving beyond surface-level integrations to robust execution. We’ve filtered the noise out of Moonshot 2026, optimising the conference strictly for high-calibre connections between startup founders, global financial operators, enterprise leaders and individuals rewiring Africa’s technical frameworks. Get 20% off Early Bird tickets for a limited time.