Two Sovereign Clouds: Rabat Budgets, Abuja Certifies
Morocco's 2027 finance bill writes a 50 MW state data centre, a Cloud First circular and a national AI roadmap into the budget. Nigeria is starting with its banks: a 1 January 2027 localisation deadline and a certification gate for the clouds that host them.

Within five days, two African governments set out how they will decide where public and regulated data live. On 23 October 2026 Morocco’s Minister of Economy, Finance and Public Performance, Fouzi Lekjaa, presented the Projet de Loi de Finances 2027 to both chambers of Parliament, the ministry said; its presentation note gives digital sovereignty its own chapter. On 28 October Nigeria’s central bank (CBN) and IT regulator, the National Information Technology Development Agency (NITDA), told banks and fintechs in Lagos that payment data must sit in Nigeria from 1 January 2027 and that the clouds hosting it will be checked against a national assurance framework. One state is building; the other is certifying.
What Morocco’s finance bill promises, and what it prices
The note de présentation lists digital sovereignty fourth among the strategic sovereignties, after water, energy and food. Its infrastructure axis opens with “La souveraineté numérique commence par les infrastructures” and commits the government to a Cloud First circular making cloud the default for new public-administration projects, with procurement favouring energy-efficient data centres; to the Jazari-Root sovereign data centre in Rabat, 50 MW over 2027–2029, root of the JAZARI network, hosting the state’s strategic data; and to a sovereign national cloud for Moroccans’ data. Its AI axis promises a trust and responsible-AI framework drawn up with the data-protection authority (CNDP) and the security directorates; Darija, Amazigh and Arabic models, GemMaroc and IsMa, with a joint Mistral AI laboratory; and an “IA Maroc” programme with 5,000 AI trainers. It also records the 500 MW Igoudar campus at Dakhla, agreed in April. Le360 set out the chapter on 26 October.
No 2027 project carries a dirham figure; the chapter’s only money is for 2026, led by about MAD 1.2bn mobilised for start-ups. The annex tables give the new Ministry of Artificial Intelligence, Digital Transformation and Administrative Reform MAD 1,338,725,000 for 2027, of which MAD 1,079,225,000 is investment, plus a MAD 1.02bn modernisation and digital-transition fund; whether Jazari-Root sits inside those lines is not stated. The House Finance Committee’s markup will set the real numbers for a ministry this desk has compared with Nairobi’s bill and Pretoria’s framework.
Why Nigeria is starting with the banks
CBN circular PSS/DIR/PUB/CIR/001/004 of 15 June 2026, addressed to banks and every other licensed payment operator, requires that “payments transaction data generated within Nigeria are stored and managed in Nigeria”, “effective January 1, 2027”, on pain of “supervisory sanctions”.
At the Lagos dialogue on 28 October, BusinessDay reported, CBN deputy governor Lamido Abubakar Yuguda warned that “Localisation alone does not guarantee security”, and NITDA’s director-general, Kashifu Inuwa Abdullahi, said banks would be the first sector brought under the National Sovereign Cloud Initiative, with an assurance framework leaning on international certifications while Nigeria considers its own. Arise News quoted Mr Abdullahi: “Based on our survey, 57 per cent of them are ready to comply and meet the deadline of 1st January 2027.” Rakiya Yusuf, director of the CBN’s Payments System Supervision Department, put it at more than half, and said sanctions “will come” for “a deliberate attempt to scuttle it”. Tribune Online’s account of the same survey has 26 of 44 respondents (59 per cent) finished or on time and 22 not started. According to Daily Trust, Mr Abdullahi put more than 85 per cent of Nigeria’s IT workload on public cloud abroad and said the rule works by data class, not a blanket ban.
Who certifies a sovereign cloud in Abuja
NITDA’s National Cloud Investment Strategy, dated August 2026, lists the Initiative’s instruments: the National Cloud Computing Guideline 2026, a Technical Guideline and a National Digital Infrastructure Assurance Framework (NDIAF), with an advisory committee called SovGov and a Digital Regulatory Platform for “Certification · listing · public-sector procurement”. Its 2026–2027 roadmap opens that platform for certification and starts Cloud First monitoring in pilot federal institutions. CIO Africa reported that Mr Abdullahi signed the instruments on 4 August with the platform planned for October; none of the 28 October reports says it is live. Mr Abdullahi also said 326 federal bodies had spent over N3.8 trillion on technology since June 2023, much of it suited to central cloud provision, an argument close to Ghana’s bid for central review of ministry AI purchases.
Side by side: what binds, and when
| Morocco | Nigeria | |
|---|---|---|
| Instrument | PLF 2027 note de présentation, 23 October 2026 (budget bill; needs a vote) | CBN circular PSS/DIR/PUB/CIR/001/004, 15 June 2026 (binding on licensees) |
| Scope | Public administrations: Cloud First default; state strategic data in Jazari-Root | Payment transaction data generated in Nigeria; all licensed payment participants |
| Deadline | Cloud First circular in 2027; Jazari-Root 2027–2029 | 1 January 2027 (localisation); 31 December 2026 (market-structure caps) |
| Gatekeeper | Ministry of AI, Digital Transformation and Administrative Reform; procurement rules | CBN supervision; NITDA certification via the Digital Regulatory Platform under NCG 2026 and NDIAF |
| Money stated | Ministry line MAD 1.34bn plus MAD 1.02bn fund; no project figure | None in the circular |
What to watch
In Rabat: the Finance Committee’s amendments, and whether the Cloud First circular’s “infrastructure nationale sécurisée” means state-owned, Moroccan-operated or merely Moroccan-located. In Abuja: whether a certified-provider list appears before 1 January, how the CBN treats the institutions not yet ready, and whether hyperscalers obtain certification or Nigerian data centres become the only route. Both want national-language models and sovereign compute, as Pakistan announced a week earlier; Morocco has named its models, Nigeria its certifier. Read the Nigerian circular as law and the Moroccan note as intent.
Sources
- Note de présentation du projet de la Loi de Finances 2027 — Ministère de l’Économie, des Finances et de la Performance publique, 23 October 2026 (PDF; in French)
- Projet de Loi de Finances 2027 — Ministère de l’Économie, des Finances et de la Performance publique, 23 October 2026 (in French)
- PLF 2027: le gouvernement détaille sa feuille de route pour la souveraineté numérique — Le360, 26 October 2026 (in French)
- Circular on Introduction of Market Structure Requirements, Data Localisation, Ultimate Beneficial Ownership Disclosure, and Systemic Oversight Measures in the Nigeria Payments System (PSS/DIR/PUB/CIR/001/004) — Central Bank of Nigeria, 15 June 2026 (PDF)
- CBN warns banks on cybersecurity risks as cloud dependence grows — BusinessDay, 28 October 2026
- CBN Says 57% Of Financial Institutions Ready For January 2027 Data Localisation Deadline — Arise News, 29 October 2026
- Half of surveyed financial firms yet to start CBN data localisation —NITDA — Tribune Online, 2 November 2026
- Ahead January deadline, Nigeria eyes $50m savings from data localization — Daily Trust, 29 October 2026
- National Cloud Investment Strategy — National Information Technology Development Agency, August 2026 (PDF)
- Nigeria Begins Sovereign Cloud Certification In October — CIO Africa, 19 August 2026
Discussion
No comments yet. Start the conversation.


