Trust architecture
Infrastructure is trust.
We eliminate the single points of failure so your ledgers remain immutable and your compliance audits pass on the first try.
Military-grade hardware security
In shared public clouds, a malicious workload on a neighboring VM can potentially read your data through side-channel attacks. Nubis provides single-tenant bare-metal servers — physically isolated hardware that no other customer ever accesses.
Strict data sovereignty
Many African nations require citizens' financial data to physically reside within the country's borders. International clouds often replicate data globally. Nubis guarantees your data never leaves the local data center unless you explicitly configure it to.
Zero-latency trade routing
When trading, milliseconds equal millions. If your server is in London but the exchange is in Lagos, round-trip delay exceeds 100ms. By hosting directly within African internet exchange points, your algorithms execute trades in under 5ms.
Synchronous multi-zone ledgers
Losing a database transaction means losing real money. We use synchronous replication across multiple availability zones — a deposit isn't confirmed until it's saved in multiple separate physical locations simultaneously.
Compliance-ready architecture
Pre-built network isolation templates for PCI DSS, ISO 27001, and Central Bank of Nigeria frameworks. Our compliance team can expedite your audit process with pre-completed technical annexes.
Hardware Security Modules
Encryption keys never touch general-purpose RAM. Our HSM-backed key management service stores master keys in tamper-evident hardware. Compliant with FIPS 140-2 Level 3 requirements.
Architecture
Zero-trust network architecture
Physical isolation combined with strict subnet routing ensures your financial data is mathematically walled off from the public internet.
Public API Gateway
01The only public entry point. Enforces rate limits, TLS 1.3 mutual authentication, and DDoS mitigation at the edge.
Virtual Private Cloud (VPC)
02Logically and physically isolated network space for your organization. No shared routing tables with other tenants.
Isolated compute subnet
03App servers with no public IP addresses. Outbound connections limited by strict egress firewall rules.
Secure ledger subnet
04Encrypted at rest with Hardware Security Modules. No internet access — reachable only from the compute subnet.
Example
# Kubernetes Network Policy
# Strict isolation for payment ledgers
apiVersion: networking.k8s.io/v1
kind: NetworkPolicy
metadata:
name: isolate-ledger-db
namespace: finance-prod
spec:
podSelector:
matchLabels:
app: core-ledger
policyTypes:
- Ingress
- Egress
# Only allow traffic from the gateway
ingress:
- from:
- podSelector:
matchLabels:
app: payment-gateway
ports:
- protocol: TCP
port: 5432
# Block all outbound internet access
egress: []Use cases
Finance that moves at network speed.
Real-time fraud detection
Score payment transactions in under 5ms by running ML inference inside the same VPC as your transaction processor — no external API round-trips.
Instant settlement infrastructure
Build real-time gross settlement systems that operate at the speed of the local banking network, with sub-second finality and deterministic latency.
Central bank compliance
Meet CBN, Bank of Ghana, and Central Bank of Kenya data residency requirements out of the box — with audit artifacts generated automatically.
Deep dive
Data sovereignty and isolation.
The public cloud problem. Traditional cloud platforms group thousands of companies onto the same massive servers. While software barriers exist, attackers constantly look for ways to break through. Furthermore, these platforms automatically shift backups around the world, meaning an African citizen's financial data might end up on a server in North America — a direct violation of emerging Central Bank regulations.
The Nubis solution. We provide Infrastructure-as-a-Service that prioritizes physical boundaries. When you deploy a database with Nubis, it sits on a secure, single-tenant server — a whole server dedicated solely to your organization. No neighbors. No shared hypervisor.
Why it matters. For a fintech startup, this means passing ISO 27001 and local Central Bank compliance audits takes weeks instead of years, allowing you to launch products faster and win enterprise partnerships with major financial institutions.