From Nigeria to Kenya and South Africa, regulators are introducing rules requiring certain categories of sensitive information to remain within national borders or imposing stricter conditions on their transfer abroad. The push reflects a broader concern: as data becomes increasingly valuable to artificial intelligence, governments want greater control over the information generated by their citizens, businesses and public institutions.
For global cloud providers, that creates a difficult market to navigate. AI systems need access to large volumes of data to be useful, but the same data is increasingly subject to rules about where it can be stored, processed and accessed.
Amazon Web Services (AWS) is betting that it can resolve that tension, giving African organisations access to AI and global cloud infrastructure while allowing them to retain control over sensitive data.
The strategy is becoming central to AWS’s pitch to African enterprises. Rather than treating data sovereignty as a barrier to cloud adoption, the company is presenting it as something that can be built into cloud service architecture.
But localisation comes with costs. Keeping data in-country can reduce latency to below 15 milliseconds, which is valuable for real-time services such as banking and payments. Yet local hosting can also be more expensive, particularly in markets where unreliable power supplies force data centres to rely on costly backup generation. Companies facing strict localisation rules may also need hybrid setups that keep sensitive data locally while accessing AI tools and other services from infrastructure abroad, adding to their infrastructure and licensing costs.
The complexity increases for businesses operating across Africa’s 54 markets. Different rules under Nigeria’s NDPA, South Africa’s POPIA and Kenya’s Data Protection Act can require companies to manage separate compliance and risk requirements in each market. Using sovereign cloud products such as AWS Outposts or Azure Local can also increase reliance on the platforms and APIs of major cloud providers.
At the AWS Summit in Johannesburg on August 19, Jonathan Allen, AWS executive in residence, said the company is focused on complying with the laws of the more than 100 countries where it operates and adapting its infrastructure to meet local requirements.
“We’re always focused on complying with the laws of the countries in which we operate,” Allen said.