Our Commitment

Security, compliance, and customer success.

We monitor the reputations of Morocco's largest companies. That means we hold ourselves to the same standards our clients are held to. Here's our commitment to you — in writing.

The numbers

What we promise.

99.9%

uptime SLA

<5min

alert latency

24/7

incident response

72h

breach notification

Security

How we protect your data.

▣

Encryption everywhere

TLS 1.3 in transit, AES-256 at rest. Encrypted secrets via HashiCorp Vault. Customer data isolated per tenant.

◆

Access control

Role-based access control (RBAC). SSO via Google Workspace, Microsoft 365. MFA enforced. Just-in-time access for engineers.

⚙

Infrastructure

Hosted on Vercel (SOC 2 Type II). Database: Supabase (ISO 27001, SOC 2). Daily encrypted backups, 30-day retention.

▲

Audit & monitoring

All access logged and retained 1 year. Real-time anomaly detection. Quarterly access reviews. Annual penetration testing.

Compliance

Standards we adhere to.

◆Compliant

GDPR

EU General Data Protection Regulation

◆Compliant

Loi 09-08

Moroccan Data Protection Law (CNDP)

▲In progress (Q4 2026)

ISO 27001

Information Security Management

▲In progress (Q1 2027)

SOC 2 Type II

Service Organization Controls

◐Planned

ISO 9001

Quality Management System

Visit Trust Center →

Customer success

Your success is our success.

Onboarding in 7 days

From contract signature to first dashboard in 7 calendar days. Dedicated onboarding manager for Sovereign tier.

Response time SLAs

Corporate: 2 business hours. Sovereign: 30 minutes. Critical incidents: immediate, 24/7.

Quarterly business reviews

Every Sovereign customer gets a QBR with senior analysts. We review your metrics, adjust HarchIQ training, plan next quarter.

Customer success manager

Corporate and Sovereign get a dedicated CSM. They know your business, your team, and your goals.

Free HarchIQ retraining

Quarterly retraining session where we update your entity library, topics, and sentiment rules. Included in all tiers.

Money-back guarantee

If you're not satisfied in the first 60 days, we refund 100% of your subscription. No questions asked.

Product roadmap input

Sovereign customers get quarterly roadmap reviews and can request features. Top 5 requests ship within 90 days.

Training & certification

Free Harch Atelier Certified Analyst program for your team. 8-hour course, online or in-person at CFC.

Incident response

When things go wrong.

T+0

Incident detected

24/7 monitoring catches the issue. On-call engineer paged within 5 minutes.

T+15min

Triage & classify

Severity assigned (P0/P1/P2/P3). Incident commander designated.

T+30min

Customer notification (P0/P1)

Affected customers notified via email + WhatsApp. Status page updated.

T+1h

Mitigation deployed

Workaround or fix deployed. Status page updated every 30 minutes.

T+4h

Resolution

Root cause identified and fixed. Service restored.

T+72h

Post-incident review

Detailed written post-mortem published to affected customers. Action items tracked to completion.

T+14d

Process improvement

Lessons learned integrated into runbooks. Prevention measures deployed.

Trust is earned, not claimed.

Visit our Trust Center for full security documentation, or email security@harchcorp.com with any questions.

Visit Trust Center →

How we protect your data.

▣

Encryption everywhere

TLS 1.3 in transit, AES-256 at rest. Encrypted secrets via HashiCorp Vault. Customer data isolated per tenant.

◆

Access control

Role-based access control (RBAC). SSO via Google Workspace, Microsoft 365. MFA enforced. Just-in-time access for engineers.

⚙

Infrastructure

Hosted on Vercel (SOC 2 Type II). Database: Supabase (ISO 27001, SOC 2). Daily encrypted backups, 30-day retention.

▲

Audit & monitoring

All access logged and retained 1 year. Real-time anomaly detection. Quarterly access reviews. Annual penetration testing.

Standards we adhere to.

◆Compliant

GDPR

EU General Data Protection Regulation

◆Compliant

Loi 09-08

Moroccan Data Protection Law (CNDP)

▲In progress (Q4 2026)

ISO 27001

Information Security Management

▲In progress (Q1 2027)

SOC 2 Type II

Service Organization Controls

◐Planned

ISO 9001

Quality Management System

Your success is our success.

Onboarding in 7 days

From contract signature to first dashboard in 7 calendar days. Dedicated onboarding manager for Sovereign tier.

Response time SLAs

Corporate: 2 business hours. Sovereign: 30 minutes. Critical incidents: immediate, 24/7.

Quarterly business reviews

Every Sovereign customer gets a QBR with senior analysts. We review your metrics, adjust HarchIQ training, plan next quarter.

Customer success manager

Corporate and Sovereign get a dedicated CSM. They know your business, your team, and your goals.

Free HarchIQ retraining

Quarterly retraining session where we update your entity library, topics, and sentiment rules. Included in all tiers.

Money-back guarantee

If you're not satisfied in the first 60 days, we refund 100% of your subscription. No questions asked.

Product roadmap input

Sovereign customers get quarterly roadmap reviews and can request features. Top 5 requests ship within 90 days.

Training & certification

Free Harch Atelier Certified Analyst program for your team. 8-hour course, online or in-person at CFC.

When things go wrong.

T+0

Incident detected

24/7 monitoring catches the issue. On-call engineer paged within 5 minutes.

T+15min

Triage & classify

Severity assigned (P0/P1/P2/P3). Incident commander designated.

T+30min

Customer notification (P0/P1)

Affected customers notified via email + WhatsApp. Status page updated.

T+1h

Mitigation deployed

Workaround or fix deployed. Status page updated every 30 minutes.

T+4h

Resolution

Root cause identified and fixed. Service restored.

T+72h

Post-incident review

Detailed written post-mortem published to affected customers. Action items tracked to completion.

T+14d

Process improvement

Lessons learned integrated into runbooks. Prevention measures deployed.