Principles
Data minimization, purpose limitation, confidentiality, integrity, traceability and retention periods proportionate to each service.
SNIPKM · Data protection
Data protection and privacy
Data protection is part of the SNIPKM platform architecture. Only data required for a stated purpose should be collected, and access is limited according to need and authorization.
Membership and supporting documents
Professional information and supporting documents remain private. Downloads and review operations use protected server routes rather than direct public links.
Professional directory
Being present in the membership database will not automatically make a member public. A future public directory will use a minimum data set, an explicit publication scope and an appropriate legal basis or consent.
Security
The platform uses HTTPS, secure session handling, MFA for sensitive accounts, audit logs and security events, while keeping secrets and private files outside public paths.
Hosting and transfers
Hosting location, data flows and processors must be documented before real processing is opened. Selecting a technical provider does not replace the formalities applicable to international data transfers.
Rights
Procedures are planned for access, rectification, objection and other applicable rights under Moroccan Law No. 09-08 and the formalities adopted by the data controller.
Data-rights contact channel
A dedicated contact channel will be published before services collecting real member data are opened.
This page describes platform design and operating principles. It does not claim that a CNDP authorization or declaration exists unless its official reference is explicitly published.