On 22 July 2026 the consultancy Ataraxis published the first edition of its Global Outsourcing AI Readiness Index 2026, ranking outsourcing destinations by their capacity to adapt to the changes agentic and generative AI are pushing through the services industry. The index scores each country on a composite of infrastructure, talent, AI adoption and governance sub-scores rather than the classical cost-and-talent variables. Morocco ranks 19th globally with a score of 43.35 out of 100, 2nd in the MENA region behind Egypt and 5th in Africa. The African contingent in the global top 20 is dense: Egypt at 16th, Nigeria at 17th, Kenya at 18th, Morocco at 19th and Ghana at 20th.

An AI-readiness index answers whether a country's operator base has the infrastructure, skills, adoption record and governance to survive the shift from seats-and-licences to workflows executed by agents. Kearney GSLI answers whether a country delivers classical outsourced work at cost X and quality Y, weighting financial attractiveness, business environment and skills-and-availability. The two questions are complementary. Morocco ranks around 28th on Kearney GSLI and 19th on the Ataraxis AI-readiness composite, so the gap signals a specific bet that AI-enablement is offsetting relative cost or business-environment gaps. Using either index alone under-specifies the choice; using three data points — one AI-readiness, one cost-and-talent, one governance — and reading the spread is the correct procurement discipline.

One, read the sub-scores (infrastructure, talent, AI adoption, governance) and re-weight them against the buyer's actual workload profile — software development weighs talent and AI adoption, regulated data processing weighs infrastructure and governance. Two, triangulate across at least one AI-readiness index, one cost-and-talent index and one governance / regulatory index, and read the spread. Three, require partner-level evidence of AI-enablement per team member — tooling in daily use, certifications with expiry dates, assisted-output measurement, sample artefacts. Four, verify data compliance concretely with a signed DPA, sub-processor register, data-subject request procedure and named DPO, not with a slide asserting compliance. Five, read the country's structural trajectory — Digital Morocco 2030 targets 40 billion MAD in offshoring revenue and about 270,000 offshoring jobs by 2030, with more than 40,000 IT and engineering students entering the pipeline in 2025. Six, contract an 8-to-12-week pilot with a written value hypothesis, data-readiness gate, evals plan and exit criteria.

A national AI-readiness score is a floor, not a ceiling, and no floor is uniform. Once a country is on the shortlist, diligence moves to partner level with concrete evidence: which coding assistants, agent frameworks, retrieval-augmented generation stacks and observability tools are in daily use, and what proportion of the delivery team uses them at what frequency; named certifications on the AI stack the buyer will use, with expiry dates and internal training cadence on new model releases and safety updates; concrete measurement of assisted output — pull-request throughput with and without assistants, defect rates on AI-generated code, containment rates on AI-assisted customer interactions — reported on a defined cadence; anonymised code, prompt libraries, agent policies and evals from comparable engagements. A partner that produces this pack without prompting is operating an AI-enabled delivery model.

Morocco data-processing partners operate under CNDP Law 09-08, the country's data-protection statute, and — where the engagement handles EU personal data — under GDPR obligations flowing through standard contractual clauses and the buyer's own accountability. Concrete diligence covers named data controller and processor roles, the cross-border transfer mechanism, the sub-processor register, the data-subject request handling procedure, the breach-notification SLA, retention and deletion policies, and the last dated audit or certification. A partner that responds with a slide asserting GDPR compliance is not ready for a regulated workload. A partner that responds with a data-protection impact assessment template, a signed data-processing agreement draft and a named DPO is.

Digital Morocco 2030 targets 40 billion Moroccan dirhams in offshoring revenue and approximately 270,000 offshoring jobs by 2030, alongside expanded technical education — public reporting has cited more than 40,000 IT and engineering students entering the pipeline in 2025. The infrastructure and skills investment is priced in for the next three to five years, not the last three to five, which is why an AI-readiness index picks up movement that a cost-and-talent index still under-weights. The procurement implication is that a partner selected on a five-year TCO horizon inherits the trajectory of the destination as well as its current state, and the trajectory materially reduces the risk of talent shortfalls and infrastructure ceilings across the engagement's life.

Call IT Dev operates BPO, software development and AI-automation engagements from Morocco with nearshore EU-time-zone delivery, multilingual coverage in French, Arabic, English and Spanish, and a posture aligned with CNDP Law 09-08 and GDPR obligations. The engagement stands on four operational properties that the buyer can verify against the framework: infrastructure (Casablanca and Rabat Tier III data-centre and connectivity backbone), talent (annual IT and engineering graduate throughput expanded under Digital Morocco 2030), AI adoption (assistants and agent frameworks in daily use with measurement of assisted output as an internal discipline), and governance (CNDP Law 09-08 and GDPR alignment as the default posture, with the data-protection artefacts shipped as part of the standard commercial pack). Diligence artefacts and an 8-to-12-week pilot can be scoped in a single call.