Security &SLA

Protecting customer and end-user data is our top priority.

• TLS 1.2+ encryption in transit
• Access control and role-based authorization for sensitive data
• Environment separation: development, staging, production
• GDPR/KVKK-compliant data processing processes

Production environments are managed on reliable cloud providers.

• Scalable architecture based on AWS and GCP
• Container orchestration (Kubernetes / managed services)
• Auto-scaling and load balancing
• Regular security patches and dependency updates

Backup and recovery procedures that minimize data loss risk.

• Daily automated database backups
• Geographically separated backup copies
• Disaster recovery plan and RTO/RPO targets
• Pre-release smoke test and rollback procedure

Transparent service level commitments for enterprise clients.

• Target uptime: 99.9% monthly (customizable per project)
• Critical incident response: first response within 4 hours
• High-priority request response: within 8 hours
• Planned maintenance windows announced in advance

Documentation and processes aligned with corporate requirements.

• GDPR/KVKK disclosure and data processing processes
• OWASP-based security controls
• Mandatory code review and CI/CD pipeline
• Optional security audit reports

Security-focused practices in development and operations processes.

• Two-factor authentication (critical systems)
• Secrets management — no credentials stored in code
• Logging and monitoring (monitoring, alerting)
• Human-in-the-loop AI escalation mechanisms