Frequently asked questions

With a free twenty-minute call during which we answer one question: is your need within our scope. If yes, we propose a paid framing phase that produces a specification and a firm price. If no, we say so during the call.

A French-law master services agreement, with purchase orders per assignment. The competent jurisdiction is French. A written contract with a non-resident client is in any case mandatory for us under Moroccan exchange regulations.

You do, entirely, from payment of each milestone. The assignment covers source code, documentation and intermediate deliverables. We retain no usage, reuse or demonstration rights without your written agreement.

Exit conditions are written into the master agreement from signature: notice period, contents of the handover pack, duration of takeover assistance. On embedded work, one month's notice. On maintenance, two months. On fixed price, you can stop at any milestone by settling the milestones reached.

Invoiced in euros from our Moroccan entity. No Moroccan VAT on exported services. If you are VAT-registered in the European Union, the reverse charge applies: you declare and deduct the VAT in the same operation, with no cash outlay.

Because free framing is rushed framing, done fast and designed to win the signature. By charging for it we put an architect on it for one to three weeks and commit a firm price to what comes out. Framing is deducted from the project price if you award us the delivery within three months, and it is yours if you choose someone else.

Through a priced change order signed before the work starts. We never invoice a scope change after the fact. The exclusion list produced at framing exists precisely to make these situations rare and non-debatable.

In French: meetings, minutes, specifications, and code comments if you want them. Fluent French is a hiring requirement on all our technical roles, not an option. English is available on request for international teams.

Yes, for framing workshops and major milestones. Costs are invoiced at cost against receipts, after prior written agreement. On a long assignment we usually plan one visit at kick-off and one per quarter.

You flag it and we replace within ten business days. Days worked by a profile replaced for mismatch are not billed beyond the tenth business day. This clause is in the contract; it is not a commercial gesture.

Yes: outside our technical scope, insufficient return on an automation, or a scope impossible to hold in the requested timeline. A provider who has never said no to a client is a provider who has already shipped something they knew was bad.

Yes, and that is our default configuration. Storage and processing stay in your cloud provider's EU region. Our teams connect through your bastion with no local copy, with multi-factor authentication and access logging. No data at rest outside the European Union.

No, Morocco is not covered by a European Commission adequacy decision. The transfer therefore relies on the standard contractual clauses of decision 2021/914, together with a transfer impact assessment and supplementary measures: bastion access with no extraction, encryption, logging, and pseudonymised data in development. These documents are handed to you before signature.

Yes, GDPR Article 28-compliant, signed before any access to personal data. It sets out data categories, purposes, duration, sub-processors and the technical and organisational measures. We provide it spontaneously, without waiting to be asked.

Yes, and we send you our pre-filled questionnaire before even receiving yours. It covers access management, multi-factor authentication, encryption in transit and at rest, logging, incident management, subcontracting and business continuity.

No, and we prefer to say so clearly rather than maintain ambiguity. We apply measures aligned with Annex A, documented and auditable, and we give you a written description of each one. Certification is a medium-term objective; we will not claim to hold it before we do.

We are registered with the CNDP, the Moroccan data protection authority, under law 09-08. That registration is in addition to the GDPR framework, not a substitute: as a processor for a European controller, it is the GDPR that structures our obligations towards you.