CVE commitment
Official support for the open source databases that already run the core of the bank.
Databases & In-Memory
PostgreSQL, MySQL, Valkey and Tanzu GemFire / Apache Geode, deployed inside Nigeria and backed by an SLA your auditor can read. We design the topology, run the failover drills and patch the CVEs, so your team owns the platform without carrying the risk alone.
- PostgreSQL
- MySQL
- Valkey
- Tanzu GemFire
- Apache Geode
The technologies we cover
Products in this family

PostgreSQL
The relational database of record for transactional systems, with Patroni-managed high availability.
Bare metalVirtual machinesKubernetesPrivate cloudAir-gappedOfficial support

MySQL
InnoDB Cluster and Group Replication for the channel, CRM and web workloads that already depend on MySQL.
Bare metalVirtual machinesKubernetesPrivate cloudOfficial support

Valkey
The Linux Foundation fork of Redis: in-memory cache, session store and rate limiter under a BSD licence.
Virtual machinesKubernetesPrivate cloudAir-gappedOfficial support

Tanzu GemFire
Commercial in-memory data grid for transaction authorisation, with WAN replication between data centres.
Virtual machinesKubernetesPrivate cloudOfficial support

Apache Geode
The open source core of GemFire: partitioned regions, continuous queries and event listeners.
Virtual machinesKubernetesPrivate cloudAir-gappedOfficial support
Why it matters for data localisation
Where this family meets the CBN directive
Databases are the first line on any data-localisation inventory. The CBN directive requires primary processing of payment and customer data, the databases that hold it, their backups, the identity systems that guard access, the encryption keys and the audit logs to reside in Nigeria by 1 January 2027, with no dependency on a foreign cloud provider. A managed database service in a hyperscaler region abroad fails every one of those tests at once: the data, the WAL archive, the snapshots and the control plane all sit outside the country. PostgreSQL, MySQL, Valkey and GemFire/Geode let you rebuild the same capability on infrastructure you control, without licence lock-in and without a rewrite. This family covers the pieces inspectors ask about: encrypted storage with locally held keys, backups replicated between two Nigerian data centres, audit logging of every privileged session, and IAM integrated with your own directory. Because the software is open source and the support contract is with a company operating in Nigeria, the residency of the whole chain (data, tooling and people) can be demonstrated rather than asserted.
The journey with NuxFamily
- 01Assess
- 02Design
- 03Build
- 04Migrate
- 05Operate
- 06Evolve
Every family is delivered through the same six-stage journey, with official 24×7 support and knowledge transfer built in.
Our expertise
Credentials, not adjectives
Our engineers ran PostgreSQL and in-memory grids for European banks and insurers before managed cloud databases existed, which means we know how to operate them without one. We have moved core ledgers from proprietary databases to PostgreSQL under regulatory audit, built GemFire authorisation grids for card issuers, and tuned Valkey clusters for retail platforms with seasonal peaks. That experience comes to Nigeria with the same runbooks, the same drills and the same people on the escalation path.
Sectors
- Banking
- Insurance
- Retail
- Industry
18+
Years with these technologies
60+
Production deployments
40 TB PostgreSQL estate at 12,000 transactions per second
Largest scale delivered
Official vendor support
Support tiers for this family
Essential
- Coverage
- 8×5, Nigeria business hours
- P1 response
- 4 h
- Corrective support on PostgreSQL, MySQL, Valkey and GemFire/Geode
- Security patches and CVE advisories for your installed versions
- Knowledge base, runbooks and ticket portal
Business
- Coverage
- 24×7
- P1 response
- 1 h
- Everything in Essential
- Proactive monitoring review and quarterly health checks
- Minor version and patch lifecycle management
- Backup restore and failover drill reviews
Mission Critical
Most chosen- Coverage
- 24×7 with named engineer
- P1 response
- 15 min
- Everything in Business
- Designated engineer who knows your estate and topology
- Architecture review, capacity planning and query tuning
- Major upgrade support, for example PostgreSQL 14 to 17
- CBN audit accompaniment and evidence preparation
Version policy
Response times and tier names are indicative and confirmed contractually.
Use cases
How it is used in a regulated bank
Use case 01
PostgreSQL high availability with automatic failover
A bank's core ledger cannot depend on a manual failover at three in the morning. The requirement is a topology that promotes a replica automatically, keeps RPO at zero for committed transactions and lets applications reconnect without human intervention. Patroni on PostgreSQL delivers this with quorum-based leader election on etcd.
Technologies
- PostgreSQL
- Patroni
- etcd
- HAProxy
- pgBackRest
Expected outcome
The bank gets an automatic failover that has been rehearsed, documented and measured rather than assumed. Every drill leaves a report the CBN inspector can read.
Metric: Failover under 30 s with RPO 0 for synchronous commits
- 1Primary accepts writes. All transactions land on the primary. WAL is streamed to a synchronous replica in the same data centre and an asynchronous replica in the DR site.
- 2Patroni holds the lease. Each node runs a Patroni agent that renews a leader lease in etcd. The lease is the single source of truth about which node is primary.
- 3Quorum detects failure. If the primary stops renewing its lease, the etcd quorum expires it. A node that cannot reach quorum demotes itself, so there is no split brain.
- 4Sync replica promoted. Patroni promotes the replica that has confirmed every committed transaction. Nothing acknowledged to the application is lost.
- 5Traffic follows new primary. HAProxy or the Kubernetes service checks Patroni's REST endpoint and routes writes to the new leader within seconds.
- 6Old primary rejoins. When the failed node returns, pg_rewind aligns its timeline and it re-enters the cluster as a follower. Backups continue from pgBackRest without interruption.
Use case 02
Session cache and transaction authorisation with Valkey and GemFire
Use case 03
Migration from a managed cloud database to on-prem PostgreSQL
Reference architecture
What a compliant deployment looks like
Applications
Access and control
Database cluster
Backup and DR
Migration path
From where you are to a compliant platform
01
2-3 weeksAssess
Activities
- Inventory every database, extension, size and application dependency
- Classify data by CBN scope: payment, customer, backups, keys, audit logs
- Review licences and costs of Oracle, SQL Server and managed cloud services
- Define target topology, RPO and RTO per service tier
02
3-4 weeksDesign and build
Activities
- Deploy Patroni clusters, Valkey and GemFire with encryption at rest and in transit
- Configure pgBackRest, monitoring, pgAudit and LDAP or Keycloak integration
- Automate provisioning with Ansible or Kubernetes operators
- Build the DR site replica and write the failover runbooks
03
4-8 weeks, in wavesMigrate
Activities
- Set up logical replication or dump-and-restore for each database wave
- Run validation suites: row counts, checksums and application tests
- Execute cutovers in agreed windows with a rollback path per database
- Record evidence of residency and cloud decommissioning
04
OngoingOperate
Activities
- 24×7 support under the chosen tier with CVE patching by severity
- Quarterly failover and restore drills with written reports
- Capacity and query performance reviews
05
From month 6Evolve
Activities
- Major version upgrades with logical replication and minimal downtime
- Consolidation of instances and right-sizing of hardware
- Knowledge transfer so the bank's DBAs run day-to-day operations
FAQ
Questions architects ask us
Yes. The directive covers primary processing, the databases themselves, backups, IAM, encryption keys and audit logs. A replica or snapshot in a foreign region is still customer data outside Nigeria. Our designs keep primary, replicas, WAL archives and backups in two Nigerian data centres. This is general guidance, not legal advice; your compliance team should confirm the interpretation with the regulator.
PostgreSQL runs ledgers, payment hubs and risk engines in banks across Europe, and it has done so for over a decade. It offers ACID transactions, point-in-time recovery, row-level security and logical replication. The gap is usually operational, not functional, and that gap is exactly what our support contract closes.
It means a contract with response times, a named escalation path and engineers who fix the problem rather than point at a mailing list. We track upstream CVEs, test patches against your versions and take responsibility for the outcome. The software stays free of licence fees and the bank retains ownership of the platform.
Valkey is the Linux Foundation fork created after Redis changed its licence in 2024. It is API-compatible with Redis 7.2, keeps the BSD licence and is backed by AWS, Google and Oracle among others. For a bank that wants no licence risk and no dependency on a single vendor, Valkey is the safer choice, and migration from Redis is a restart with the same data files.
Apache Geode is the open source core; Tanzu GemFire adds commercial features such as WAN replication tooling, management console and vendor support. If you need multi-site replication between two Nigerian data centres and a vendor-backed SLA, GemFire is the practical choice. For a single-site authorisation cache, Geode with our support is sufficient.
Critical CVEs are patched or mitigated within 72 hours, high within 14 days. Minor upgrades are applied as rolling restarts through Patroni with no application downtime. Major upgrades are planned exercises using logical replication, rehearsed in staging and executed with a rollback path.
Yes, and many of our deployments do, using operators such as CloudNativePG or Zalando for PostgreSQL and the Valkey and GemFire operators. Kubernetes adds self-healing and consistent provisioning. For the largest ledgers we still recommend dedicated nodes with local NVMe storage, which the operators also support.
For a typical estate of ten to twenty databases, assessment and build take six to seven weeks and the migration waves another four to eight, depending on data volume and application testing capacity. Each cutover itself is a matter of minutes thanks to logical replication.
Over two decades
Built by the team behind the platforms of Santander, ING, Bankinter, Mapfre and Inditex
More than twenty years designing, building and operating private clouds for institutions that cannot afford to fail, and a delivery model where we stay with you from assessment to operation.
See our track record20+
Years building private clouds
40+
Private clouds delivered
Talk to an architect about this family
Tell us where you are today and we will come back with a first view of the target architecture and the migration path.