The verdict in three sentences
For a health insurer or mutual with 80,000 members, a redesign limited to visuals will not reduce calls: the self-service member portal (claim tracking, certificates, pre-authorisations) is what drives the return on investment. The 2026 budget is 250,000 to 600,000 MAD excl. VAT (about 23,000 to 55,000 EUR) for the public website and 300,000 to 800,000 MAD excl. VAT for the member portal, plus Law 09-08 and CNDP compliance and a penetration test. A target of 25% fewer calls within 12 months is achievable if the five main call reasons become online journeys.
Website only or website with member portal: what you are buying
The digital director of a mutual in Rabat usually starts from a simple fact: the contact centre handles 15,000 to 20,000 calls a month, more than half about the status of a claim or a certificate. A brochure website, however good, does not answer these requests.
| Criterion | Public website redesign only | Public website + member portal |
|---|---|---|
| 2026 budget excl. VAT | 250,000 to 600,000 MAD | 550,000 to 1,400,000 MAD |
| Timeline | 10 to 16 weeks | 5 to 8 months |
| Key features | Plans, care network, FAQ, contact, news | + claim tracking, PDF certificates, document upload, pre-authorisation |
| IT integration | None or form to CRM | Connection to the claims management system (API or data feeds) |
| Personal data | Contact forms | Health data: CNDP declaration and authorisation |
| Effect on calls | 3 to 7% | 20 to 30% |
| Monthly maintenance | 4,000 to 10,000 MAD | 12,000 to 35,000 MAD |
The most uncertain item is integration with the claims system. If it already exposes an API, aim for the low end of the range. If nightly synchronisation feeds must be built, add 100,000 to 200,000 MAD.
Security and compliance: lines you must not under-budget
Health data is sensitive data under Law 09-08. Processing it online requires an authorisation request to the CNDP, a precise privacy policy and documented technical measures. Law 05-20 on cybersecurity and DGSSI recommendations apply on top for organisations deemed sensitive, and ACAPS expects supervised insurers to manage IT risk.
| Security and compliance item | 2026 range excl. VAT | Frequency |
|---|---|---|
| CNDP file (register, authorisation, notices) | 25,000 to 60,000 MAD | At launch |
| Member portal penetration test | 40,000 to 90,000 MAD | Before go-live then yearly |
| Strong authentication (SMS OTP or app) | 30,000 to 70,000 MAD + 0.30 to 0.50 MAD per SMS | At launch |
| Web application firewall (WAF) and anti-DDoS | 2,000 to 6,000 MAD per month | Monthly |
| Hosting in Morocco or certified cloud | 3,000 to 12,000 MAD per month | Monthly |
| Logging and monitoring | 15,000 to 40,000 MAD | At launch |
A penetration test that uncovers a flaw after go-live costs twice as much to fix as during acceptance testing. Schedule it 3 weeks before launch.
The five journeys that reduce calls
Analyse call reasons over three months before designing the site. In a typical mutual, five journeys account for most of the volume: tracking a claim, downloading a membership certificate, requesting hospital pre-authorisation, updating beneficiaries and finding an approved provider. Each must take fewer than three taps on mobile, since more than 75% of logins will come from smartphones (2026 order of magnitude). Add SMS or WhatsApp notifications at every status change: that is what prevents the where is my claim call-back.
Mini case study
Need a professional website?
Kolonell builds websites that attract clients, optimized for the Sénégalese market. Free quote in 2 minutes.
Youssef, digital director of an 80,000-member mutual in Rabat, receives 18,000 calls a month. The fully loaded cost of a handled call is estimated at 22 MAD. He invests 1,050,000 MAD excl. VAT: 380,000 MAD for the website, 560,000 MAD for the member portal, 65,000 MAD for the penetration test and 45,000 MAD for CNDP compliance. With 25% fewer calls, or 4,500 calls a month, the saving reaches 99,000 MAD a month, or 1,188,000 MAD a year. After maintenance and hosting (about 30,000 MAD a month), the net gain is 69,000 MAD a month and the investment pays back in just over 15 months, before counting higher member satisfaction.
FAQ
Must health data be hosted in Morocco?
The CNDP strictly regulates data transfers outside Morocco, especially for health data. Local hosting or a cloud with a compliant region is the simplest route, for 3,000 to 12,000 MAD a month depending on volume.
How long does CNDP authorisation take?
Typically 1 to 3 months after filing a complete application. Start the process during scoping so it does not block go-live.
Can we start with the public website and add the member portal later?
Yes, provided the architecture and authentication are designed from the start. Splitting into two phases spreads the investment but often adds 10 to 15% to the total cost.
Do we need a mobile app?
Not at first: a responsive member portal or a PWA covers 90% of needs for 30 to 50% of the price of two native iOS and Android apps.
How do we measure the 25% call reduction?
Set a three-month baseline before launch, by call reason, then track monthly volume and the usage rate of each online journey.
Let's scope your project. Share your call volumes and claims system: we price the redesign and member portal in dirhams, with a 3 to 8 month plan and a detailed security budget. Detailed quote within 48 h. WhatsApp +221 77 596 93 33.
Mohamed Bah
Fondateur, Kolonell
Passionate about digital and entrepreneurship in Africa, Mohamed has been helping Sénégalese businesses with their digital transformation since 2020. Founder of Kolonell, he believes every SME deserves a professional and accessible online présence.
