Compliance

We fulfill data controller obligations under KVKK for customers in Türkiye and GDPR for customers in Europe. Disclosures and retention policies are prepared accordingly.

The information security management system covers risk assessment, access control and incident management. Audits are reviewed annually with independent teams.

Catalog provider terms (e.g. the cryptomining ban) are surfaced in the product; violations may lead to sanctions by the provider.

Compliance controls are re-evaluated every quarter; findings are reported to management and tracked through an action plan.