Form F118 — international transfer
F118 is used to authorise a transfer of personal data outside Morocco to a country without an adequate level of protection (US SaaS, hosting outside the EU, foreign processors). The official PDF has 9 pages and many annex tables; the assistant covers the essential sections.
The most common breach in Morocco.
Nearly 90% of Moroccan SMEs use Google Workspace, Microsoft 365, Salesforce, HubSpot, Notion or AWS hosting outside the EU — without filing F118. The transfer is technically unlawful until the authorisation is obtained. Regularisation takes about twenty minutes with this assistant.
Your data never leaves your browser.
Everything is filled in and generated locally, on your device. No request is sent to our servers while you type; the PDF is composed in JavaScript inside your browser and downloaded directly. If you close the tab without downloading, everything is lost — this is intentional.
Data controller (exporter)
The entity transferring data from Morocco. Typically the company using Google Workspace, Salesforce, AWS outside the EU, etc. Reminder: F118 must be filed jointly with F112 (authorisation) or F211 (declaration) for the underlying processing.
If "No", you must appoint a representative established in Morocco (dedicated section below). Without a local representative, the CNDP will not process the file.
As registered in the commercial register.
After generation
- In your PDF reader, complete the tables of data subject categories and data transferred (sections III to VI).
- Attach supporting documents: signed SCCs, approved BCRs, consent attestations or the adequacy decision relied on.
- Print and have the legal representative sign.
- File according to the current CNDP procedures — see cndp.ma.
- Keep the acknowledgement of receipt — it serves as proof of diligence during the review.
- Useful reading: F118 guide — international transfers.