Alvan Ikoku, director of NIMC's Strategic Programme Office, made it plain at a press briefing on Wednesday: Nigeria's national identity database is hosted entirely within the country, managed not by outside vendors but by NIMC's own employees. "It is being managed by Nigerians, not Nigerian vendors, by NIMC employees," Ikoku said. He added that the commission does not use cloud hosting for its core database and has disaster recovery systems in place to keep services running when things go wrong.
The timing matters. As of September 2026, 142 million Nigerians have registered for National Identification Numbers, making the database one of the largest stores of personal information on the continent. Data localisation has become a live conversation in Nigeria, with citizens and policymakers both asking who truly controls that information and what happens when something goes wrong.
Ikoku acknowledged the weight of that responsibility. He said staff with access to the database, especially those handling database management, are subject to ongoing scrutiny by security agencies and can face legal consequences for misconduct. It is a meaningful commitment, even if it still needs to prove itself over time.
Local hosting, though, only covers part of the picture. NIMC works with licenced partners and connected government agencies to deliver verification services, and each of those connections is another point where personal data must be carefully managed. Past concerns have not centred on a breach of the central database itself, but on access through verification channels, including questions raised in March 2024 about a website called XpressVerify and how it obtained access to Nigerians' identity information.
For 142 million people, what NIMC does next with those access controls matters far more than where the servers sit.
Originally published by TechCabal.