Government · Public institutions · Morocco
Sovereign IT for the public service.
The constraints of Morocco's public sector are real: data sovereignty, national cybersecurity, public procurement, service continuity. We treat them as architecture requirements, not obstacles.
Our domains
Compliant. Sovereign. Available.
Data sovereignty
Hosting in Morocco, private cloud or on-premise infrastructure. No public data leaves the defined perimeter.
Cybersecurity & law 05-20
Architectures compliant with law 05-20 and the DNSSI, risk analysis, preparation for DGSSI reviews. We know the process.
Citizen digital services
Accessible e-services, agent and citizen interfaces, paperless procedures in the spirit of law 55-19 and Morocco Digital 2030.
Interoperability
Secure API exchanges between administrations, shared reference data, integration with existing national platforms.
National-scale availability
Multi-site active-active architectures, tested disaster recovery. Services millions of citizens depend on.
Process transformation
Case-handling workflows, operational dashboards, deadline tracking. Digital processes end to end.
Regulatory framework
The framework we design in from day one
A public system in Morocco has to be secure, available and auditable, and follow public procurement rules. We build these requirements into the architecture.
- Law 05-20 & DGSSI
- The cybersecurity law and its implementing texts: administrations, public institutions and critical infrastructure.
- DNSSI
- National information security directive: the reference organisational and technical measures.
- Law 09-08 & CNDP
- Protection of citizens' and staff personal data, declarations and authorisations with the CNDP.
- Law 55-19
- Simplification of administrative procedures: paperless processes and controlled processing times.
Related case studies
Deployment for a national strategic authority
End-to-end engagement for an infrastructure serving millions of users. Failure was not an option. Contractual availability: five nines.
Read the case studyLarge enterpriseLegacy-to-cloud transformation for a large enterprise group
Brownfield migration to a cloud-native Kubernetes multi-cluster platform — no service interruption, rollback plan at every milestone.
Read the case studyServices involved
- Cloud & DataCloud-native infrastructure, IaC, Kubernetes, and real-time data platforms — the foundation everything else runs on.Discover
- DevSecOpsSecure CI/CD, SAST/DAST, and DORA / SOC 2 readiness — so you ship faster and still pass the audit.Discover
- Enterprise ArchitectureReference architectures, microservices migration, and event-driven design for systems that have to keep running.Discover
FAQ
Frequently asked questions
Can public data be hosted in the cloud?
It depends on their sensitivity. Sensitive data generally stays on infrastructure in Morocco — private cloud, national data centre or the administration's own site. We classify the data with you, then choose hosting per class, rather than one rule for the whole system.
What does law 05-20 change for a public IT project?
It requires security from the design stage: risk analysis, approval, incident management and reporting to the DGSSI. The simplest approach is to build them into the specification and the architecture from the start, rather than adding them before go-live.
Do you respond to public tenders?
Yes, alone or as part of a consortium. We can also help upstream, with an architecture study or project-owner support, so the specification describes a realistic, verifiable system.
How does an engagement with Coda Solutions start?
With a 30-minute first conversation with a senior engineer. If the need is confirmed, we scope it, then propose an engagement model that fits public procurement rules.