Nigeria’s New Digital Postcode System Sparks Fresh Questions Over Data Security and Foreign Cloud Infrastructure

For many Nigerians, giving directions has traditionally involved a familiar combination of landmarks, street descriptions and local knowledge: turn at a particular junction, pass a popular shop, look for a tree or stop near a distinctive building.

That could begin to change following the launch of Nigeria’s National Digital Alphanumeric Postcode System (NDAPS) on October 1.

The new system is designed to give individually addressable buildings across the country unique 11-character codes. By linking physical locations to precise digital identifiers, the government hopes to improve everything from parcel deliveries and emergency response to banking services and the delivery of public programmes.

The technology, however, also introduces a new question: how should Nigeria protect a database capable of identifying buildings across the country?

How the new postcode works

NDAPS uses an alphanumeric structure designed to progressively narrow down a location.

The first two letters identify the state, while two numbers represent the local government area. Three additional characters identify the district, which serves as the primary postal sorting unit.

The code then uses two letters to identify an area that can contain up to 99 buildings. The final two digits identify the individual building as a GIS-located delivery point.

In practical terms, the system is intended to take an address from a broad geographical description to a specific building.

That could make it easier for a courier to find a customer, for an ambulance to locate a patient or for a financial institution to verify where a customer or business is located.

The economic cost of poor addressing

At the launch, Minister of Communications, Innovation and Digital Economy Bosun Tijani said Nigeria loses an estimated ₦50 billion to ₦80 billion annually through missed and failed deliveries associated with inadequate addressing.

Tijani argued that the problem goes beyond the logistics industry, pointing to the wider difficulties caused when homes and businesses cannot be reliably located.

For emergency services, the consequences can be particularly important. An accurate digital address could reduce the time spent asking for directions or identifying nearby landmarks when responding to an incident.

Businesses that depend heavily on deliveries could also benefit.

Blessing John, an Abuja-based food business owner, sees potential value in the system because customers and delivery riders could have a more precise way of identifying destinations.

But she also raised a concern that is likely to become increasingly important as the system expands: what happens if the information attached to an address is compromised?

Precision creates a new security challenge

The usefulness of NDAPS depends on its ability to accurately identify physical locations. That same precision could make the information valuable if accessed by unauthorised parties.

A nationwide database capable of identifying buildings and linking them to geographical information could potentially contain sensitive information about homes, businesses and strategically important facilities.

That makes cybersecurity, access controls and data governance central to the success of the project.

The question is therefore not simply whether Nigeria can create a more accurate addressing system, but also how the resulting information will be stored, protected and accessed.

Nigeria’s wider push for digital sovereignty

The debate comes as the federal government places increasing emphasis on domestic control over critical digital infrastructure.

In August, the government unveiled its National Digital Cloud Policy, which includes provisions concerning the protection, residency and control of certain government and regulated data.

NITDA and the Budget Office also established a technical committee in August to advance the National Sovereign Cloud Initiative, including work on the financial, procurement and investment framework required to increase domestic control over cloud infrastructure.

The Central Bank of Nigeria has similarly introduced measures aimed at bringing certain financial data generated in Nigeria under domestic storage and management requirements. The relevant payment-data rules are scheduled to take effect on January 1, 2027.

Against that background, the infrastructure used to operate NDAPS has attracted attention.

Questions over the postcode website’s infrastructure

An analysis cited by TechCabal found that the public-facing infrastructure for postcode.gov.ng resolves to Amazon Web Services, a cloud provider headquartered outside Nigeria.

That finding does not establish that the NDAPS database itself is hosted outside Nigeria.

A public website can use cloud infrastructure in one location while its underlying databases, applications or sensitive information are hosted elsewhere. It also does not, on its own, demonstrate that postcode data falls under foreign jurisdiction.

Nevertheless, the infrastructure raises questions about where the core national postcode database is ultimately stored and what legal and regulatory arrangements govern access to it.

Those questions become particularly relevant as Nigeria develops policies intended to strengthen digital sovereignty.

Concerns over foreign jurisdiction

Smith Osemeke, founder and chief executive of Lagos-based Unitellas Edge Cloud, argued that the issue deserves closer scrutiny.

He told TechCabal that relying on a foreign-headquartered cloud provider could expose infrastructure to foreign legal requirements and create complications during disputes or sanctions-related events.

Osemeke also described building-level geographical information as potentially strategic because it could reveal the locations of citizens, important facilities and security-sensitive sites.

His position is that Nigeria has sufficient domestic data-centre capacity to host critical systems such as NDAPS, meaning the principal challenge should not necessarily be storage capacity but resilience, regulatory compliance and security.

Nigeria already has growing data-centre capacity

Nigeria’s data-centre industry has expanded significantly in recent years.

A June 2026 analysis by Arizton identified 21 operational data-centre facilities in the country, with another 16 under development. Lagos remains the country’s major hub for digital infrastructure.

Osemeke argued that this existing capacity could support the NDAPS database and the applications that will eventually connect to it.

He also suggested that the core registry itself would not require an exceptionally large amount of storage, meaning the more difficult issues are likely to involve reliability, security and the ability to handle traffic from services that depend on the system.

Security concerns extend beyond the database

The debate is not limited to where NDAPS information is hosted.

Chidi Omeje, editor-in-chief of Security Digest magazine, questioned how useful the system would be if its coverage remained concentrated in formally mapped or easily addressable locations.

Nigeria’s security challenges extend into rural communities, informal settlements and remote areas where formal addressing infrastructure can be limited.

Omeje argued that a digital postcode system would have greater practical value if it eventually covered those communities rather than primarily serving locations that already have relatively developed addressing systems.

That raises another challenge for the government: ensuring that digital mapping does not deepen the divide between communities that are formally documented and those that have historically remained outside detailed geographic databases.

The challenge ahead

NDAPS represents a significant shift in how Nigeria could identify and locate homes and businesses.

If implemented broadly, the system could reduce dependence on landmarks and informal directions while improving deliveries, emergency response, financial verification and access to government services.

But the same precision that makes the system useful also increases the importance of protecting the information behind it.

For Nigeria, the long-term test will therefore involve more than assigning codes to buildings. It will include determining who can access the information, where critical data is stored, how breaches are prevented and whether the system reaches communities that have traditionally been poorly represented on formal maps.

The government’s digital transformation agenda ultimately depends on both sides of that equation: creating infrastructure capable of locating the country more accurately while ensuring that the information generated by that infrastructure is protected with equal precision.