Information Security Policy

Last updated: 24 October 2026

[This text must be replaced with, or aligned to, the current information security policy approved by management.]

At TurnCloudON, we design, migrate and operate our customers' critical data infrastructures. Aware of this responsibility, we regard protecting the confidentiality, integrity and availability of information assets as a fundamental principle.

Our commitments

• To establish, operate and continually improve an Information Security Management System in accordance with ISO/IEC 27001,
• To regularly assess information security risks and manage them at an acceptable level,
• To restrict access to customer data in line with the "need-to-know" and least-privilege principles,
• To comply with legal, regulatory and contractual obligations, in particular the Turkish Personal Data Protection Law No. 6698 (KVKK),
• To record information security incidents through defined processes, respond to them and eliminate their root causes,
• To safeguard business continuity through plans aligned with ISO 22301 and regular drills,
• To raise the information security awareness of our employees and suppliers through training,
• To measure information security objectives and evaluate them through management reviews.

Contact

You can send any information security notifications to info@turncloudon.com.tr.