Privacy Policy & CNDP Law 09-08 Compliance
Last updated: October 2026 · Vext Technologies SARL (Casablanca, Morocco)
1. Legal Basis & Scope
Vext Technologies SARL (« Vext ») complies strictly with Moroccan Law No. 09-08 relating to the protection of individuals with regard to the processing of personal data, supervised by the National Commission for Data Protection (CNDP).
2. Data Sovereignty & Hosting
All customer database records, real-time voice transcripts, and telemetry logs processed by Vext systems are hosted on sovereign infrastructure within the Kingdom of Morocco or authorized ISO 27001 data centers. No data is transferred to unapproved foreign jurisdictions without prior CNDP declaration.
3. Telephony Voice AI Data Processing
Audio recordings and transcripts generated via the Vext Voice platform belong exclusively to the client. Vext does not utilize client phone recordings to train public third-party foundational models.
4. Encryption & Retention
Data at rest is secured via AES-256-GCM encryption with tenant-isolated customer managed keys (CMK). Real-time media streams are encrypted via TLS 1.3 and SRTP. Logs are purged according to contractual retention schedules.
5. Exercise of Rights
In accordance with Law 09-08, you hold the right to access, rectify, and object to the processing of your personal data by contacting our Data Protection Officer at: [email protected].