FIXED-SCOPE PROJECTS · MONTHLY SUPPORT · EUR & MAD
START WITHOUT A SUBSCRIPTION

GDPR pricing.
A fixed scope, a known price.

Not sure which service fits? Book a free meeting →

Buy a defined outcome first. Monthly support is offered only when you subsequently need ongoing privacy governance.

Get compliant→Stay compliant
STARTING POINT

Assessment & scope

€290 excl. VATMAD 3,200 excl. VAT

Turn an unclear request into a service that is easy to approve and purchase.

60 minNote within 48 hFixed price
  • Conversation with a DPO
  • Initial qualification under the GDPR, Morocco Law 09-08 and CNDP procedures
  • Processing activities, risks and priorities requiring closer review
  • A dated execution plan and the sequence of actions to take

Limit: no compliance document is delivered, drafted or reviewed in this assessment.

Book the assessment →
6-WEEK PROJECT

Compliance foundation

€2,400 excl. VATMAD 26,000 excl. VAT

Build the core documentation and operating controls for a straightforward organisation.

1 entity15 activities6 weeks
  • Initial record of processing activities
  • Priority privacy notices
  • Retention rules and rights procedure
  • Incident and vendor registers
  • Resources needed for the compliance work included in the agreed scope
  • Action plan and handover session

Limit: DPIAs, CNDP filings, technical testing and complex negotiations are excluded.

Scope the project →
GDPR AUDIT + COMPLIANCE PACKS

One project.
From gap analysis to compliance.

The audit, the gap analysis and GDPR implementation in a single scope, at a better price than buying the missions separately.

3 MONTHS OF DPO INCLUDED
GDPR COMPLIANCE PACK

Complete

From €4,500 excl. VAT49,500 MAD excl. VAT

For organisations working with European clients that want compliance actively managed from day one.

1 entity25 processing activities10 to 12 weeks
  • Everything in the Essential pack
  • Review of key vendor contracts (Article 28 DPAs, up to 5)
  • DPIA screening of high-risk processing
  • One GDPR training session for your teams
  • 3 months of DPO Monitoring after delivery

After 3 months: continue with a monthly DPO only if you wish.

Request the Complete pack →
DIRECT ANSWER · COMMERCIAL MODEL

Should GDPR support start with a subscription?

Not necessarily. RCM starts with a fixed-scope, fixed-price engagement such as an assessment, audit or compliance project. Monthly support follows when the organisation needs ongoing record maintenance, regular advice or managed privacy operations. Every monthly plan states the included volumes, response times, exclusions and overage prices.

Fixed-scope projectPublished priceDefined deliverablesCapped retainer
Official sourcesGDPR · DPO tasks ↗
WEBSITES, PLATFORMS & APPLICATIONS

Three digital packs.
A scope matched to your product.

Each pack covers the journeys your users actually follow. The proposal confirms the included pages, forms, trackers, accounts, vendors and data flows before work begins.

SHOWCASE WEBSITE

Presence Pack

Quoted after scoping

For a company website with contact forms, audience measurement and limited marketing tools.

  • Legal notice and privacy notice
  • Cookie policy and tracker assessment
  • Consent wording and forms
  • Cookie-banner configuration recommendations
Scope my website →
E-COMMERCE · MARKETPLACE · APP

Transactions Pack

Quoted after scoping

For journeys involving orders, payments, sellers, reviews, delivery or mobile functionality.

  • Relevant Services Pack elements
  • Commercial terms matched to the model
  • Checkout, payments and marketing journeys
  • Vendors, SDKs and application access
  • Transaction-flow mapping
Scope my commerce or app →

RCM covers data protection and the documentation included in the proposal. Development, penetration testing and reserved legal advice are priced separately or coordinated with an appropriately qualified partner.

SPECIALIST ENGAGEMENTS

One specific need. A quote after scoping.

The quote reflects the processing activities, flows, entities, documents and level of risk involved.

CNDP · STANDARD

Standard declaration

Quoted after scoping

One processing activity, checklist, form preparation and supporting-document review.

Request a quote →
CNDP · ENHANCED

Authorisation or F-118

Quoted after scoping

One file, assessment, supporting documents, form and tracking table before client submission.

Request a quote →
VENDOR

Vendor review

Quoted after scoping

One vendor: DPA, Article 28, hosting, subprocessors, transfers and corrective actions.

Request a quote →
HIGH RISK

Complete DPIA

Quoted after scoping

One project, workshop, risk analysis, safeguards and DPIA report with final review.

Request a quote →
STAY COMPLIANT

Subscribe only when
the need is recurring.

Every plan states its included volumes. We obtain approval before billing work outside the plan.

Initial setup and any exceptional work are priced in the proposal.
DPO MONITORING

Essential oversight

From 4,900 MAD excl. VAT / monthScope and monthly fee agreed before engagement
  • Named DPO contact
  • One 45-minute monthly meeting
  • 2 advisory requests per month
  • Quarterly record review
  • Annual control plan
  • Standard response within 3 business days

Excluded: DPIAs, CNDP filings, urgent incidents and complex contract drafting.

Request a quote →
MANAGED PRIVACY OFFICE

Delegated privacy operations

From 14,500 MAD excl. VAT / monthScope and monthly fee agreed before engagement
  • Up to 10 advisory requests per month
  • 2 vendor reviews per month
  • 2 coordinated rights requests per month
  • Internal intake for new projects
  • Incident and decision registers
  • DPIA screening for new projects
  • Quarterly management reporting
  • Standard response within 1 business day

Excluded: complex multi-entity DPO appointments, major crises, complete DPIAs and legal representation.

Request a quote →
TRANSPARENT OVERAGES

No “unlimited”.
No surprise.

We request approval before billing work outside the included volume.

Additional advisory timeQuoted after scopingApproved before work starts
Additional vendor reviewQuoted after scopingBased on the document scope
Additional rights requestQuoted after scopingBased on complexity and deadline
Urgent incident coordinationQuoted after scopingAfter assessing the urgency
Additional legal entityQuoted after scopingContract amendment or separate engagement
COMMERCIAL RULES

What every proposal
confirms in writing.

Scope

Entities, processing activities, stakeholders, deliverables and included volumes.

Timeline

Start date, client dependencies, milestones and delivery date.

Exclusions

Technical work, legal representation, external fees and additional engagements.

Responsibilities

RCM advises and assists. The client approves decisions, provides information and remains accountable for its processing.

COMMERCIAL QUESTIONS

Know exactly
what you are buying.

Why start with a one-off engagement? −

A reliable monthly fee requires an understanding of your processing activities, risks, projects and likely workload. The assessment or audit creates that scope without requiring an immediate subscription.

Is the assessment fee credited against the project? +

Yes, when you approve the recommended project within thirty days. The corresponding proposal confirms the credit.

Are MAD prices automatic currency conversions? +

No. Euro and dirham amounts are separate commercial price points based on the invoiced entity. They are not live exchange-rate conversions.

Does the subscription guarantee compliance? +

No. RCM provides advice, controls, deliverables and monitoring within the agreed scope. The organisation remains responsible for its decisions, resources and operational implementation.

Can we exceed the monthly volumes? +

Yes. RCM identifies the overage, confirms the applicable price and waits for your approval before performing the additional work, unless an agreed emergency procedure applies.

Can RCM be formally appointed as DPO? +

Yes, when the regulatory conditions are met, the scope allows the duties to be performed effectively and no conflict of interest is identified. Appointment does not transfer accountability for processing to RCM.

THE RIGHT FIRST STEP

Not sure which engagement you need?

Start with the fixed-price assessment. You receive a scope, timeline and clear proposal before making any longer commitment.

Start with €290 excl. VAT →
KEEP READING

Related pages

Talk to a DPO