Default
Oracle Cloud, Casablanca region
Public cloud region opened in 2026, operated with a Moroccan data-centre partner. Our default option for clients already running Oracle.
Sovereignty & compliance
AI in production, without a single byte leaving Morocco.
Sovereignty is our default architecture, not a paid option. But every organisation has its constraints: existing infrastructure, regulator requirements, an international group. You choose where your data lives; we deploy accordingly.
Data residency
You choose where your data lives
By default, Atlas products are deployed in cloud regions physically located in Morocco: models run in the same region as your data and no calls to foreign APIs are required. Depending on your constraints, we also deploy on private cloud, on-premise, hybrid, or on international hyperscalers through their partners.
Default
OVHcloud, Rabat Local Zone
Local zone of a European cloud provider, hosted by a Moroccan data centre. Our default option for organisations attached to a GDPR-style framework.
Option
Private cloud / on-premise
In your own data centre or with a Moroccan host (N+ONE, Maroc Datacenter, Orange, Maroc Telecom). Models run on your infrastructure, including dedicated GPUs. For organisations under the strictest requirements.
Option
Hybrid
Sensitive data on-premise, compute capacity in a Moroccan cloud region. One product, two locations, a single audit trail.
On request
International hyperscalers via partners
Microsoft Azure, AWS or Google Cloud, for groups already committed to those platforms or for non-sensitive workloads. No Moroccan region to date: we document transfers and CNDP compliance with you.
Option
Guaranteed portability
Atlas products are built to move between environments. Start on a Moroccan cloud and bring it on-premise later, or the reverse, without a rewrite.
Regulatory framework
Law 09-08 and the CNDP
Law 09-08 on the protection of individuals with regard to the processing of personal data governs all processing in Morocco. The CNDP is the supervisory authority.
- CNDP declaration or authorisation prepared for every processing set up during a pilot
- Processing register and impact assessment delivered with every deployment
- Minimisation: only the fields needed for the use case are extracted and kept
- Configurable retention periods, deletion on request
Security practices
What we put in place on every deployment
Encryption
Data encrypted at rest (AES-256) and in transit (TLS 1.2+). Keys managed in the cloud region's key management service.
Access control
Role-based access, single sign-on through your corporate directory, least privilege for technical accounts.
Audit trail
Logging of every query, document consulted and generated answer. Immutable, exportable logs kept in Morocco.
Isolation
A dedicated environment per client. No client data is used to train shared models.
Backups
Encrypted backups in the same region, with regular restore tests.
Reversibility
Your data and indexes can be exported at any time in open formats.
Compliance dossier available on request
Detailed architecture, controls matrix, processing register template and standard contractual clauses. We share it under NDA with your security, legal and compliance teams.