Compliance Test

KVKK compliance test

Measure your compliance in minutes; get a tailored gap list and the right product recommendation.

This test is rule-based and for information only; it does not constitute legal advice.

Administrative MeasuresStep 1/3

Process, documentation, inventory and VERBİS.

Is your personal data processing inventory current and complete?

Is your VERBİS registration done and kept up to date as things change?

Do you fulfil the duty to inform at every collection point (website, forms, contracts, call center)?

For operations requiring explicit consent, do you keep provable records of it (who, which text, when)?

If you transfer personal data abroad, is it based on an appropriate legal ground (adequacy decision, standard contractual clauses or binding corporate rules)?

Do you process special-category data (health, biometric, religion, criminal record, etc.) under a separate policy and extra safeguards, with explicit consent where required?

Do you have a retention & destruction policy, and is expired data destroyed periodically (at most every 6 months)?

Do you have a defined process and records to answer data-subject requests within 30 days?

Do you provide regular KVKK awareness training to staff and record attendance?

Have you signed KVKK-compliant data processing / confidentiality agreements with your processors (vendors, cloud, agencies)?

This test is rule-based and for information only; it does not constitute legal advice.