Skip to content
CBN data localisation deadline, 1 Jan 2027: 99d 00h 31m left.Talk to us
NuxFamily

The foundation every other layer stands on.

Virtualization and private cloud foundation for Nigerian financial institutions

VMware, Nutanix, Proxmox, OpenStack and KVM, designed, built and supported on Nigerian soil. This is the layer that decides your licence bill and your sovereignty posture for the next decade.

  • VMware vSphere / VCF
  • Nutanix AHV
  • Proxmox VE
  • OpenStack
  • KVM

The technologies we cover

Products in this family

  • VMware Cloud Foundation

    Integrated private cloud stack: vSphere, vSAN, NSX and SDDC Manager under one lifecycle.

    Bare metalPrivate cloudAir-gapped

    Official support

  • VMware vSphere

    The most widely deployed enterprise hypervisor and the usual starting point of a Nigerian bank.

    Bare metalPrivate cloudAir-gapped

    Official support

  • Nutanix AHV

    Hyperconverged compute and storage with a built-in KVM-based hypervisor and no separate hypervisor licence.

    Bare metalPrivate cloudAir-gapped

    Official support

  • Proxmox VE

    Open-source KVM and LXC platform with clustering, Ceph storage and a subscription-backed enterprise repository.

    Bare metalPrivate cloudAir-gapped

    Official support

  • OpenStack

    Open-source IaaS with multi-tenant projects, quotas and public-cloud-style APIs for large private estates.

    Bare metalPrivate cloudAir-gapped

    Official support

  • KVM on Linux

    The upstream Linux hypervisor behind Proxmox, OpenStack and AHV, supported directly for custom estates.

    Bare metalAir-gapped

    Official support

Why it matters for data localisation

Where this family meets the CBN directive

The CBN directive requires that payment transaction data is processed and stored in Nigeria by 1 January 2027. Its scope is not limited to the database: it covers the primary processing environment, backups, identity and access management, encryption keys and audit logs, and it expressly prohibits dependence on foreign cloud infrastructure and cross-border replication.

The journey with NuxFamily

  1. 01Assess
  2. 02Design
  3. 03Build
  4. 04Migrate
  5. 05Operate
  6. 06Evolve

Every family is delivered through the same six-stage journey, with official 24×7 support and knowledge transfer built in.

Our expertise

Credentials, not adjectives

This team has designed and operated virtualisation estates for European banks, insurers and retailers since the first vSphere clusters replaced physical servers. We have run VMware at four-figure host counts, migrated production estates from vSphere to Nutanix and to KVM-based platforms, and built OpenStack regions for institutions that needed cloud APIs without a public cloud. That experience is now applied in Nigeria, where the same patterns are being rebuilt under a regulatory deadline.

Sectors

  • Banking
  • Insurance
  • Retail
  • Industry

20+

Years with these technologies

60+

Production deployments

1,200+ hosts across two datacentres

Largest scale delivered

Official vendor support

Support tiers for this family

Essential

Coverage
8×5, Nigeria business hours
P1 response
4 h
  • Corrective support for vSphere, AHV, Proxmox VE, OpenStack and KVM hosts
  • Access to the NuxFamily knowledge base and hardening guides
  • Hypervisor and management-plane security patches

Business

Coverage
24×7
P1 response
1 h
  • Everything in Essential
  • Proactive monitoring of cluster health, capacity and storage latency
  • Quarterly health checks and capacity reviews
  • Managed version lifecycle for hypervisor, storage and network stacks

Mission Critical

Most chosen
Coverage
24×7 with a named engineer
P1 response
15 min
  • Everything in Business
  • Named platform engineer who knows your clusters and runbooks
  • Annual architecture review and DR test supervision
  • Major upgrade support (for example vSphere 7 to 8, AHV LTS to LTS, Proxmox major releases)
  • Support during CBN audits and regulator inspections

CVE commitment

Version policy

Response times and tier names are indicative and confirmed contractually.

Use cases

How it is used in a regulated bank

Use case 01

Repatriating payment workloads from a hyperscaler to a private cloud in Nigeria

A licensed payment service provider runs its switching, settlement and reporting workloads in a foreign hyperscaler region. Under the CBN directive that estate must be inside Nigeria by 1 January 2027, without a service interruption that the regulator or the card schemes would notice. The migration is organised in waves so that both environments coexist until each wave is proven.

Technologies

  • VMware vSphere
  • Nutanix AHV
  • VMware HCX
  • Nutanix Move
  • Veeam

Expected outcome

All in-scope workloads run inside Nigeria with no foreign dependency, and the migration is documented wave by wave. The institution can show the regulator where every payment record lives and when it left the hyperscaler.

Metric: Cutover window under 30 minutes per wave, zero data loss

Repatriating payment workloads from a hyperscaler to a private cloud in NigeriaA licensed payment service provider runs its switching, settlement and reporting workloads in a foreign hyperscaler region. Under the CBN directive that estate must be inside Nigeria by 1 January 2027, without a service interruption that the regulator or the card schemes would notice. The migration is organised in waves so that both environments coexist until each wave is proven. All in-scope workloads run inside Nigeria with no foreign dependency, and the migration is documented wave by wave. The institution can show the regulator where every payment record lives and when it left the hyperscaler.1Discover and mapData mapping2Group into wavesWave plan3Build the landing zonevSphere / AHV4Replicate continuouslyHCX / Move5Coexist and testShadow traffic6Cut over per waveCutover runbook7Decommission and evidenceAudit trail
  1. 1Discover and map. Inventory every VM, dependency and data flow; classify each system against the directive's scope.
  2. 2Group into waves. Bundle applications by dependency and risk so that each wave can be cut over and rolled back as a unit.
  3. 3Build the landing zone. Stand up the hypervisor clusters, storage, network segments and IAM in the Nigerian datacentre.
  4. 4Replicate continuously. Seed VM images and data, then keep them in sync so the cutover delta is minutes, not days.
  5. 5Coexist and test. Run the wave in Nigeria against synthetic and shadow traffic while the cloud copy stays live.
  6. 6Cut over per wave. Switch DNS and routing in a defined window with a tested rollback to the cloud copy.
  7. 7Decommission and evidence. Wipe the foreign copy, retain the deletion certificate and update the data map for the regulator.

Use case 02

Evolving or replacing an existing VMware platform

Use case 03

A 100% domestic disaster recovery site

Reference architecture

What a compliant deployment looks like

Two-site private cloud foundation for a regulated institutionSovereign core componentsPlatform servicesLegacy, being retired

Migration path

From where you are to a compliant platform

  1. 01

    2-3 weeks

    Assess

    Activities

    • Inventory of workloads, licences and hardware in the current estate
    • Data-mapping workshop against the CBN directive scope
    • Five-year TCO for VMware, Nutanix, Proxmox and OpenStack options
    • Datacentre selection criteria and site visits
  2. 02

    3-4 weeks

    Design

    Activities

    • Target architecture, cluster sizing and storage design
    • Network segmentation of the payment zone and integration with IAM and HSM
    • DR design with RPO/RTO per application tier
    • Migration wave plan with rollback criteria
  3. 03

    4-8 weeks

    Build

    Activities

    • Hardware installation, hypervisor deployment and hardening (CIS benchmarks)
    • Storage, network and backup vault configuration
    • Self-service portal, IaC pipelines and monitoring
    • Acceptance testing and platform documentation
  4. 04

    6-12 weeks

    Migrate

    Activities

    • Continuous replication of each wave and coexistence testing
    • Cutover windows with rollback drills
    • Decommissioning and deletion evidence for the foreign estate
  5. 05

    Ongoing

    Operate

    Activities

    • 24×7 support under the chosen tier, patching and version lifecycle
    • Quarterly DR tests and capacity reviews
    • Knowledge transfer so the bank's team runs the platform day to day

FAQ

Questions architects ask us

The directive covers the primary processing environment for payment transaction data, not only the database. If the virtual machines that process payments run in a foreign region, the processing takes place abroad. A private cloud in a Nigerian datacentre is the straightforward way to satisfy that requirement and to keep backups, keys and audit logs in the same perimeter. This is context, not legal advice; your compliance team should confirm the interpretation for your institution.

Over two decades

Built by the team behind the platforms of Santander, ING, Bankinter, Mapfre and Inditex

More than twenty years designing, building and operating private clouds for institutions that cannot afford to fail, and a delivery model where we stay with you from assessment to operation.

See our track record

20+

Years building private clouds

40+

Private clouds delivered

Talk to an architect about this family

Tell us where you are today and we will come back with a first view of the target architecture and the migration path.

No mailing lists, no automated follow-ups. We reply personally within one working day.