Management System
Law No. 6698
Message Management System
End-to-End Encryption
| Data Encryption | Server-side encrypted storage with AES-256; transit encryption with TLS 1.3. Encryption keys are stored in an HSM module. |
|---|---|
| Data Sovereignty | All data is processed and stored in Tier-3+ data centers in Turkey. No cross-border transfer takes place. |
| Authorization | Granular role and permission structure; access control at module, field and record level. SSO and 2FA support. |
| Audit Logs | All user actions are logged; an immutable log infrastructure prevents tampering. We retain logs for at least 24 months. |
| Backups | Daily full backup + hourly incremental backup. Geo-redundant disaster recovery; RPO ≤ 1 hour, RTO ≤ 4 hours. |
| Penetration Tests | Independent third-party penetration testing twice a year; all findings are closed within SLA. |
| İYS Compliance | Marketing messages pass live consent verification via the İYS API before sending. Unapproved sending is blocked. |
| KVKK Processes | Built-in workflow for data-subject requests; the breach-notification process runs within 72 hours. |
Active-active infrastructure; uninterrupted access outside planned maintenance.
24/7 SOC monitoring and anomaly detection; rapid response in case of an incident.
With geo-redundant backups, full access within 4 hours in a disaster scenario.
Contact us for the DPIA, ISO 27001 certificate and penetration-test summary report.
