In accordance with Article 4 of Decree No. 2-24-921 of 18 Rabii II 1446 (22 October 2024) concerning the use of Cloud service providers by entities and critical infrastructures managing information systems or sensitive data, the qualification regime for Cloud service providers is based on a framework of requirements established by Order of the Head of Government No. 3-17-25 of 7 Safar 1447 (1 August 2025). This reference framework sets out the organizational, technical, legal, and governance criteria that providers must meet in order to obtain the qualification granted by the national authority.