Category
Compliance & Regulation
23 articles
EAA accessibility: how to audit a client's website, step by step
Is a client's online shop covered by the EAA? Qualification, microenterprise exemption, audit standard and an eight-step audit method for agencies.
Agency client onboarding: DNS and hosting access checklist
Registrar, DNS, hosting, email: which access to request from a new client, in what order, with which rights, and how to log it before changing anything.
GDPR processor register for web agencies: a working model
A client asks for your processors and the data processing agreement? Register columns, services to list, agreement points to check. A practical guide.
Hosting contract and SLA: a clause checklist for agencies
Before promising a client an SLA, check your host's contract: availability, exclusions, cap, support, backups, exit. A checklist of questions, not legal advice.
Client domains: manage renewals so none expires
A client domain register, alerts at 90, 60, 30 and 7 days, transfer lock and an emergency procedure for expired names: an agency method, step by step.
ICANN 2026 new gTLDs: protect your brand, firm dates
ICANN published 1,615 new gTLD applications: firm dates, objections open until 16 March 2027, and what has no date yet. A practical path for trademark owners.
NIS2 compliance evidence to request from your VPS provider
Which documentary evidence to request from your VPS provider for a NIS2 audit? Access logs, patch management, security SLA, BCP, incident reports: practical guide.
NIS2 and hosting: technical obligations in 2026
Which Article 21 NIS2 obligations apply to your VPS infrastructure? A technical guide for essential and important entities in 2026.
Digital Omnibus: first-party analytics without a consent banner
Art. 88a of the Digital Omnibus exempts self-hosted first-party analytics from consent. What this means in practice for agencies.
n8n Sustainable Use License: What Agencies Must Know
The n8n SUL allows internal use but prohibits providing n8n as a service to clients without a commercial agreement. What this means for agencies.
Reading a .ma WHOIS: what the registry does and doesn't publish
Dates, nameservers, statuses, registrar: what a .ma domain's WHOIS reveals, what it leaves out, and why our tool does not show the registrant.
DORA: what the regulation requires of your ICT contracts
DORA (EU 2022/2554) mandates specific clauses in every ICT contract. Articles 28 and 30 explained: mandatory provisions, audit rights, TLPT and data location.
ANRT .ma domain: required documents by registrant type
Complete guide to documents required by ANRT to register a .ma domain: individual, company, association, OMPIC trademark — and real rejection causes.
Cost of a .ma Domain: Real Price Over 3 Years
Registration, annual renewal, incoming transfer and post-expiry restoration: calculate the true cost of owning a .ma domain over 3 to 5 years, using only price variables.
ANRT .ma Naming Policy: Rules Before Registering Your Domain
Allowed characters, length, second-level subdomains, registration period and reserved terms: all ANRT naming rules to avoid rejection of your .ma domain.
CMI Integration: dirham payments on your e-commerce site
Accepting Moroccan bank cards in dirhams via CMI: onboarding with an approved acquirer, technical prerequisites and the role of web hosting.
Hosting Outside Morocco: CNDP Prior Authorization
Law 09-08 governs every transfer of data out of Morocco, from the first email collected. Notification or authorization: it depends on the destination.
CRA 2027: What the Cyber Resilience Act Changes for Your Agency
The CRA already requires reporting of exploited flaws and fully applies on 11 December 2027: obligations, penalties and a plan for your agency.
VAT on digital services in Morocco: what changes in 2026
Morocco's 2024 Finance Law imposes 20% VAT on foreign digital services sold to Moroccan clients. Who owes it and how to register on tax.gov.ma.
The AI Act: what applies to you if you self-host AI
Since 2 August 2026 the rest of the AI Act applies. Who carries the obligation when you deploy an LLM on your own server.
NIS2: what the directive requires from your hosted clients
NIS2: who is in scope, the ten measures of Article 21, the 24-hour and 72-hour deadlines, and what your clients will require from their hosting.
Data Act: cloud exit fees banned from 2027
From January 12, 2027, the EU Data Act prohibits cloud exit fees. What this changes for your hosting strategy and contracts.
Cyber Resilience Act: what changes for your clients
The CRA requires vulnerability disclosure in 24 h from September 2026. What it means in practice for agencies and developers.