A red flag, in the context of hiring an AI agency in Morocco, is any behavior, sales pitch, or missing process that signals a high risk of project failure, before you ever sign a contract. Unlike a positive scoring grid, this checklist works in reverse: it helps you eliminate risky vendors fast instead of ranking good candidates against each other.
Morocco's AI market has attracted a growing number of players since the launch of Maroc Digital 2030, but the quality of providers varies wildly. Some firms claim AI expertise they don't have; others simply ignore local regulatory constraints. This guide lists 10 concrete red flags to check before signing, along with the exact questions to ask for each one. Our AI transformation practice applies this same vigilance checklist to every new engagement.
Red flag 1: no verifiable legal footprint
A legitimate Moroccan company holds a verifiable ICE (Identifiant Commun de l'Entreprise) and Registre de Commerce number. If an agency refuses to share these, or its ICE never appears on any official document (quote, invoice, contract), that's an immediate red flag. This isn't paperwork for its own sake: without a clear legal structure, you have no recourse if a dispute arises over the ownership of the code or models delivered.
Red flag 2: guaranteed results before any audit
An agency that announces a guaranteed success rate or a specific ROI figure before ever looking at your data or processes is selling a promise, not a diagnosis. According to McKinsey Global Institute (2024), 74% of AI projects fail to move beyond the pilot stage, often because of rushed scoping. No serious provider can guarantee an outcome without first auditing the quality of your underlying data.
Red flag 3: total silence on CNDP compliance
Any agency processing Moroccan personal data on your behalf should know, and ideally have already filed, a declaration or authorization request with the CNDP (Commission Nationale de contrôle de la protection des Données à caractère Personnel), as required under Law 09-08. If this topic never comes up in sales conversations, or the agency can't explain the difference between a simple declaration and a prior authorization request, it isn't ready to handle your customer, HR, or financial data in compliance with Moroccan law.
Red flag 4: an entirely technology-first pitch
An agency that opens every conversation with "we use GPT-4" or "we work with Claude and Llama" without ever asking "what business problem are you trying to solve?" is putting the technology ahead of your need. To weigh this red flag alongside the 9 positive criteria that matter most, see our complete guide to choosing an AI agency in Morocco.
Red flag 5: nothing in production for more than 6 months
A demo chatbot proves nothing: anyone can wire up an API in a few hours. Ask to see a system that has been live in production for at least six months, with real metrics (resolution rate, volume handled, error rate). An agency that can only show mockups or projects "almost finished" for months on end has likely never shipped anything under real conditions.
Red flag 6: opaque or suspiciously low pricing
Three pricing models dominate the market: fixed-scope project fees (MAD 80,000 to 300,000 depending on complexity), time-and-materials (MAD 800 to 2,500 per day depending on seniority), and hybrid arrangements. A MAD 25,000 quote for a "complete AI system with automation" is structurally impossible at that price: either the agency is subcontracting offshore without disclosing it, or hidden add-ons (hosting, OpenAI or Anthropic API licenses, maintenance) will appear after you sign. Always require a written 12-month TCO (total cost of ownership), never a verbal estimate.
Red flag 7: no plan for Arabic-Darija-French trilingual support
A simple test reveals a lot: ask how the agency handles customer interactions in Darija, not just standard French or Arabic. General-purpose language models perform poorly in Darija without specific adaptation. An agency that has never thought through this question has likely never deployed a customer-facing AI solution in Morocco.
Red flag 8: no documented scoping process
A serious AI project starts with a requirements document, a technical architecture, and a written timeline, not a quote sent after a single 30-minute call. If the agency jumps straight from first contact to a commercial proposal without a structured discovery phase, scoping will be improvised mid-development, with budget and timeline slippage as a result.
Red flag 9: zero verifiable references in Morocco
An agency whose every project is "abroad" or "under NDA," without a single exception, deserves healthy skepticism. According to Harvard Business Review (2023), companies that verify vendor references before signing reduce project failure risk by 45%. Ask for at least one reachable Moroccan client contact, even for a 15-minute conversation.
Red flag 10: no plan for post-deployment support
According to Deloitte (2024), 60% of an AI project's value materializes in the 12 months after deployment, during the continuous optimization phase. An agency whose contract ends at go-live, with no maintenance clause, performance monitoring, or internal team upskilling, leaves you alone right when most of the value is still up for grabs. To structure that phase properly, our digital consulting service supports Moroccan companies over the long run, not just at initial delivery.
What contract clauses should protect you?
Spotting red flags before you sign is your first line of defense. The second plays out inside the contract itself, and three clauses deserve close attention. First, the intellectual property clause: the code, custom prompts, training data, and fine-tuned models should explicitly belong to you upon final delivery, not remain the agency's property under the guise of "reusable know-how." An agency that resists this clause likely plans to resell your work to other clients.
Second, the data portability clause: you need to be able to retrieve all of your data, configurations, and technical documentation if you ever switch providers, without being locked into a proprietary format. Third, the operational reversibility clause: if the contract ends, the agency should commit to a transition window (typically 30 to 60 days) during which it keeps providing minimal support while you find a replacement or bring the capability in-house. An agency that refuses to include these three clauses in the contract, even after negotiation, stacks one more red flag on top of the ones already listed above.
What to do if you spot one of these flags
A single isolated flag doesn't automatically disqualify an agency, a young provider can lack references without being incompetent. But two or more red flags stacking up should trigger a pause. Ask for clarification in writing, not verbally: an honest provider answers precisely by email, while one that downplays or dodges the question confirms the doubt. Keep a written record of every clarification you request and every answer you receive, it becomes useful leverage later if the relationship sours and you need to demonstrate that concerns were raised early and repeatedly ignored.
Quick checklist before signing
Run through these 10 points before any contractual commitment:
- ICE and Registre de Commerce verifiable on official documents
- No guaranteed results without a prior data audit
- CNDP compliance raised proactively, Law 09-08
- Questions about your business before any technical proposal
- A production project live for more than 6 months, with metrics
- Written 12-month TCO, no suspiciously low pricing
- Arabic-Darija-French trilingual support tested, not assumed
- Requirements document and architecture in place before a quote
- At least one reachable Moroccan reference
- Post-deployment support clause written into the contract
Related resources
To go further in your vendor selection process:
- Complete guide to choosing an AI agency in Morocco
- Our AI transformation practice
- Our digital consulting service
FAQ
Is a suspiciously low quote always a red flag? Not always, but a quote well below market range (MAD 80,000 to 300,000 for a structured AI project) deserves detailed questioning: reduced scope, undisclosed subcontracting, or hidden costs that will surface after signing.
How do you verify a Moroccan agency's ICE? The ICE should appear on every commercial document (quote, invoice, contract). You can also request the Registre de Commerce extract, a public document any legitimate company can provide without hesitation.
What if the agency avoids questions about CNDP? Push for a written answer. If the agency still can't explain its compliance approach under Law 09-08 after a follow-up, treat that as disqualifying, especially if the project touches customer or HR data.
How many red flags does it take to walk away? A single flag warrants clarification; two or more stacking up justify walking away or demanding stronger contractual guarantees before signing anything.
Is an international agency with no Morocco office automatically disqualified? Not automatically, but it needs to demonstrate a solid grasp of the local regulatory (CNDP) and linguistic context, otherwise these same red flags apply with even more weight.
Spotting these red flags before signing can save you months of delays and tens of thousands of MAD in hidden costs. Want a second opinion on a proposal you've already received? Request a free audit, delivered within 48 hours.