CVE commitment
The foundation every other layer stands on.
Virtualization and private cloud foundation for Nigerian financial institutions
VMware, Nutanix, Proxmox, OpenStack and KVM, designed, built and supported on Nigerian soil. This is the layer that decides your licence bill and your sovereignty posture for the next decade.
- VMware vSphere / VCF
- Nutanix AHV
- Proxmox VE
- OpenStack
- KVM
The technologies we cover
Products in this family

VMware Cloud Foundation
Integrated private cloud stack: vSphere, vSAN, NSX and SDDC Manager under one lifecycle.
Bare metalPrivate cloudAir-gappedOfficial support

VMware vSphere
The most widely deployed enterprise hypervisor and the usual starting point of a Nigerian bank.
Bare metalPrivate cloudAir-gappedOfficial support

Nutanix AHV
Hyperconverged compute and storage with a built-in KVM-based hypervisor and no separate hypervisor licence.
Bare metalPrivate cloudAir-gappedOfficial support
Proxmox VE
Open-source KVM and LXC platform with clustering, Ceph storage and a subscription-backed enterprise repository.
Bare metalPrivate cloudAir-gappedOfficial support
OpenStack
Open-source IaaS with multi-tenant projects, quotas and public-cloud-style APIs for large private estates.
Bare metalPrivate cloudAir-gappedOfficial support
KVM on Linux
The upstream Linux hypervisor behind Proxmox, OpenStack and AHV, supported directly for custom estates.
Bare metalAir-gappedOfficial support
Why it matters for data localisation
Where this family meets the CBN directive
The CBN directive requires that payment transaction data is processed and stored in Nigeria by 1 January 2027. Its scope is not limited to the database: it covers the primary processing environment, backups, identity and access management, encryption keys and audit logs, and it expressly prohibits dependence on foreign cloud infrastructure and cross-border replication. Every one of those elements ultimately runs on a hypervisor. If that hypervisor lives in a hyperscaler region abroad, nothing above it can be compliant. A private cloud foundation in a Nigerian datacentre is therefore the first decision, not the last. It fixes where compute, storage and the management plane physically sit, it keeps the key management service and the audit trail inside the same perimeter, and it gives the institution a documented, inspectable estate to show the regulator. It also removes the single largest cost variable: after the changes to VMware's commercial model, the choice between VMware, Nutanix, Proxmox and OpenStack shapes the licence bill for the next five to ten years. NuxFamily builds that foundation so that Kubernetes, PaaS and the data platform can be layered on top without revisiting the base.
The journey with NuxFamily
- 01Assess
- 02Design
- 03Build
- 04Migrate
- 05Operate
- 06Evolve
Every family is delivered through the same six-stage journey, with official 24×7 support and knowledge transfer built in.
Our expertise
Credentials, not adjectives
This team has designed and operated virtualisation estates for European banks, insurers and retailers since the first vSphere clusters replaced physical servers. We have run VMware at four-figure host counts, migrated production estates from vSphere to Nutanix and to KVM-based platforms, and built OpenStack regions for institutions that needed cloud APIs without a public cloud. That experience is now applied in Nigeria, where the same patterns are being rebuilt under a regulatory deadline.
Sectors
- Banking
- Insurance
- Retail
- Industry
20+
Years with these technologies
60+
Production deployments
1,200+ hosts across two datacentres
Largest scale delivered
Official vendor support
Support tiers for this family
Essential
- Coverage
- 8×5, Nigeria business hours
- P1 response
- 4 h
- Corrective support for vSphere, AHV, Proxmox VE, OpenStack and KVM hosts
- Access to the NuxFamily knowledge base and hardening guides
- Hypervisor and management-plane security patches
Business
- Coverage
- 24×7
- P1 response
- 1 h
- Everything in Essential
- Proactive monitoring of cluster health, capacity and storage latency
- Quarterly health checks and capacity reviews
- Managed version lifecycle for hypervisor, storage and network stacks
Mission Critical
Most chosen- Coverage
- 24×7 with a named engineer
- P1 response
- 15 min
- Everything in Business
- Named platform engineer who knows your clusters and runbooks
- Annual architecture review and DR test supervision
- Major upgrade support (for example vSphere 7 to 8, AHV LTS to LTS, Proxmox major releases)
- Support during CBN audits and regulator inspections
Version policy
Response times and tier names are indicative and confirmed contractually.
Use cases
How it is used in a regulated bank
Use case 01
Repatriating payment workloads from a hyperscaler to a private cloud in Nigeria
A licensed payment service provider runs its switching, settlement and reporting workloads in a foreign hyperscaler region. Under the CBN directive that estate must be inside Nigeria by 1 January 2027, without a service interruption that the regulator or the card schemes would notice. The migration is organised in waves so that both environments coexist until each wave is proven.
Technologies
- VMware vSphere
- Nutanix AHV
- VMware HCX
- Nutanix Move
- Veeam
Expected outcome
All in-scope workloads run inside Nigeria with no foreign dependency, and the migration is documented wave by wave. The institution can show the regulator where every payment record lives and when it left the hyperscaler.
Metric: Cutover window under 30 minutes per wave, zero data loss
- 1Discover and map. Inventory every VM, dependency and data flow; classify each system against the directive's scope.
- 2Group into waves. Bundle applications by dependency and risk so that each wave can be cut over and rolled back as a unit.
- 3Build the landing zone. Stand up the hypervisor clusters, storage, network segments and IAM in the Nigerian datacentre.
- 4Replicate continuously. Seed VM images and data, then keep them in sync so the cutover delta is minutes, not days.
- 5Coexist and test. Run the wave in Nigeria against synthetic and shadow traffic while the cloud copy stays live.
- 6Cut over per wave. Switch DNS and routing in a defined window with a tested rollback to the cloud copy.
- 7Decommission and evidence. Wipe the foreign copy, retain the deletion certificate and update the data map for the regulator.
Use case 02
Evolving or replacing an existing VMware platform
Use case 03
A 100% domestic disaster recovery site
Reference architecture
What a compliant deployment looks like
Access
Platform
Data
Sites
Migration path
From where you are to a compliant platform
01
2-3 weeksAssess
Activities
- Inventory of workloads, licences and hardware in the current estate
- Data-mapping workshop against the CBN directive scope
- Five-year TCO for VMware, Nutanix, Proxmox and OpenStack options
- Datacentre selection criteria and site visits
02
3-4 weeksDesign
Activities
- Target architecture, cluster sizing and storage design
- Network segmentation of the payment zone and integration with IAM and HSM
- DR design with RPO/RTO per application tier
- Migration wave plan with rollback criteria
03
4-8 weeksBuild
Activities
- Hardware installation, hypervisor deployment and hardening (CIS benchmarks)
- Storage, network and backup vault configuration
- Self-service portal, IaC pipelines and monitoring
- Acceptance testing and platform documentation
04
6-12 weeksMigrate
Activities
- Continuous replication of each wave and coexistence testing
- Cutover windows with rollback drills
- Decommissioning and deletion evidence for the foreign estate
05
OngoingOperate
Activities
- 24×7 support under the chosen tier, patching and version lifecycle
- Quarterly DR tests and capacity reviews
- Knowledge transfer so the bank's team runs the platform day to day
FAQ
Questions architects ask us
The directive covers the primary processing environment for payment transaction data, not only the database. If the virtual machines that process payments run in a foreign region, the processing takes place abroad. A private cloud in a Nigerian datacentre is the straightforward way to satisfy that requirement and to keep backups, keys and audit logs in the same perimeter. This is context, not legal advice; your compliance team should confirm the interpretation for your institution.
It depends on the features you actually use and what your renewal quote looks like. Institutions that rely heavily on NSX, SRM and a certified backup ecosystem often stay on VMware or VCF. Estates that mainly need compute, storage and HA find that Nutanix AHV or Proxmox VE cover the requirement at a lower cost. We run a structured decision process with a pilot before recommending either path.
Proxmox VE is a KVM-based platform with clustering, live migration, Ceph storage and an enterprise repository backed by a subscription. It is used in production by public bodies and financial institutions in Europe. Its gaps versus VMware are in the ecosystem, for example certified backup vendors and advanced network virtualisation, which is why we validate those integrations in the pilot.
Yes. All of the platforms we support can be installed and updated from an internal repository mirror. We deliver patches through a controlled transfer process and document each update for audit purposes. The management plane, monitoring and backup all operate without outbound connectivity.
NuxFamily provides corrective and proactive support on the platform as deployed, with the response times of the tier you choose. Where a vendor subscription exists, such as Proxmox Enterprise or a Nutanix support contract, we operate it on your behalf and escalate to the vendor when a fix requires upstream changes. The exact scope of L1-L3 responsibility is written into the support agreement.
The key management service is deployed in the Nigerian datacentre, backed by an HSM where the institution requires it, and storage-level encryption uses those keys. Identity is served by the bank's directory hosted on the same platform, with MFA in front of the management plane. Neither component depends on a foreign cloud service.
For a mid-size estate of a few hundred VMs, from assessment to the last cutover typically takes four to six months, with hardware lead times as the main variable. Institutions that start before the end of 2026 can meet the January 2027 deadline with contingency. Larger estates are phased so that in-scope payment systems move first.
Knowledge transfer is part of every project, and most clients end up running day-to-day operations with their own team. NuxFamily remains behind them with the support tier they select, from business-hours corrective support to a named engineer on 24×7 cover.
Over two decades
Built by the team behind the platforms of Santander, ING, Bankinter, Mapfre and Inditex
More than twenty years designing, building and operating private clouds for institutions that cannot afford to fail, and a delivery model where we stay with you from assessment to operation.
See our track record20+
Years building private clouds
40+
Private clouds delivered
Talk to an architect about this family
Tell us where you are today and we will come back with a first view of the target architecture and the migration path.