Your data, your rules.
Where your customers' data is hosted, how we comply with Moroccan Law 09-08, and who stays in control of the agents.
Where the data lives
Iram services run on Google Cloud in Belgium (European Union), which Morocco's CNDP lists among adequate destinations (deliberation 236-2015). AI models are Google's paid offerings, with no training on your data. Hosting in Morocco is under study for data that requires it.
Compliance in Morocco
For each client we prepare the CNDP file required by Law 09-08: declaration or authorisation, transfers, processor agreement, information notices. No real data is processed before these steps.
What we never do
Request an ID document on WhatsApp; keep a passport photo (only the masked number is stored); confirm a booking or purchase without the customer's explicit consent; sell or share data.
Human control
Every agent knows when to hand over: team alert, call transfer, follow-up in a console where every action is signed by name.
Technical security
Per-user accounts and roles, secrets kept out of the code, verified signatures on incoming messages (WhatsApp, phone), logs without sensitive data, automated tests on every change.