Infrastructure designed with Nigerian data protection in mind.
ORUNVAULT provides Nigerian-hosted cloud infrastructure and technical controls designed to help organizations manage data residency, security, access, resilience, and governance requirements.
Compliance controls matrix
A high-level map of infrastructure control categories ORUNVAULT is designed around.
Data residency
Nigerian hosting options
Data security
Encryption and network controls
Access management
Identity and role-based permissions
Accountability
Administrative and system logs
Availability
Backup and redundancy
Recovery
Snapshots and managed backup
Data transfer management
Architecture supporting residency choices
Incident response
Monitoring and documented response procedures
Data lifecycle
Retention and deletion capabilities
Shared responsibility model
Compliance is a shared responsibility. ORUNVAULT provides infrastructure and technical controls that may support customer compliance programs. Use of ORUNVAULT alone does not make an organization compliant with applicable law.
ORUNVAULT responsibilities may include
- Underlying infrastructure
- Physical infrastructure controls
- Platform security within service scope
- Network controls
- Service availability within defined architecture
Customer responsibilities may include
- Application security
- Service configuration
- Identity management
- User permissions
- Data classification
- Data retention
- Lawful processing
- Privacy notices
- Organizational policies
- Endpoint security
- Customer-side encryption choices
This information is provided for general guidance and does not constitute legal advice. Organizations should consult qualified legal counsel regarding their specific compliance obligations.
Nigerian regulatory context
Nigeria’s data protection framework is anchored by the Nigeria Data Protection Act (NDPA) 2023 and administered by the Nigeria Data Protection Commission (NDPC). ORUNVAULT is designing its infrastructure and technical controls with this framework in mind. ORUNVAULT is not certified or approved by the NDPC, and use of ORUNVAULT infrastructure does not, by itself, make a customer organization compliant with the NDPA or any other law.
The items below are a hypothetical example of how a certification roadmap could be presented. No certification has been obtained, applied for, or audited. This is not a compliance claim.
Example certification roadmap
ISO/IEC 27001
Information security management system certification.
NDPA self-assessment
Internal self-assessment against Nigeria Data Protection Act (NDPA) 2023 obligations relevant to infrastructure providers.
Service Organization Control (SOC 2)
Third-party audit of security, availability, and confidentiality controls.
Discuss your compliance architecture
Talk to our team about the technical controls your compliance program needs from infrastructure.