of Morocco's goods trade conducted with the EU
2025European Commission, EU–Morocco tradeCountry file
Morocco
The EU–Morocco relationship is dense, and exporting digital services occupies a measurable place within it. The file distinguishes this economic context from the requirements specific to each client.
Relationship with the European Union
EU–Morocco Association Agreement in force
It structures the business relationship, but reduces neither the contractual audit rights nor the security evidence expected.
Sources reviewed on 15 August 2026
of EU–Morocco goods trade
2025European Commission, EU–Morocco tradeof EU–Morocco services trade
2024European Commission, EU–Morocco tradeEconomy and sectors
of digital export and outsourcing revenue
2024, preliminary dataDigital economy and outsourcing
Office des Changes, digital exports and outsourcingof sector revenue attributed to ITO services
2024IT and technology services
Office des Changes, digital exports and outsourcingof revenue attributed to customer relations services
2024CRM and contact centres
Office des Changes, digital exports and outsourcingIncidents, fraud and impersonation
of internet users report having encountered an online risk or threat
2023 surveyIndividuals aged 5 and over
ANRT, 2023–2024 ICT usage surveyreport exposure to phishing
2023 surveyInternet users, not audited companies
ANRT, 2023–2024 ICT usage surveyreport an account intrusion or the sending of fraudulent messages from their account
2023 surveyDigital identity signal
ANRT, 2023–2024 ICT usage surveyPoints to check within your organisation
Technology delivery
Link the people, execution sites, subcontractors, privileged access and controls actually applied to the service sold.
European data and access
The commercial agreement does not replace the transfer mechanism, the access mapping or the expected technical measures.
Identity of the contacts
Provide for an out-of-channel check for any new contact, change of details, sensitive sharing or payment instruction.
Developments to be aware of
The topics that may change your answers
EU–Morocco agreement and trade
Volumes indicate the intensity of the relationship; no cyber allowance is inferred from this.
Export-oriented digital economy
The breakdown by ITO, CRM and other ecosystems helps place the supplier's activity in context.
Incidents, phishing and impersonation
The DGSSI explicitly addresses phishing, spear-phishing and email impersonation in its framework.
Data transfers
No general EU adequacy decision is assumed for Morocco.
The weight of digital operations and commercial proximity to the EU make client assurance particularly relevant. Threat figures justify identity and evidence checks, not an alarmist conclusion about any given company.
Official sources
Confidential exchange
