Insights and updates
From emerging regulation to deal mechanics, we write about the questions founders and investors actually ask: practical analysis you can put to work.
Türkiye has no TDM exception — scraping for AI training runs through FSEK database and work protections, TBK contract terms, TTK unfair competition, KVKK and even TCK computer-crime provisions. Here is the risk map and the hygiene that keeps you on the right side of it.
Five KVKK decisions on the 72-hour notification deadline, the official notification form, informing data subjects and contradictory statements.
Five KVKK decisions on breaches originating with software vendors, hosting services and shared group infrastructure: why supplier oversight is an operational duty.
Five KVKK decisions on multi-factor authentication, passwords saved in browsers, BEC attacks and physical server access.
AI Act roles, data rights, IP indemnities, model-change control, audit rights and incident handoffs — the twelve clauses that separate a defensible AI vendor contract from a template that collapses at the first incident.
Five KVKK decisions on ransomware and unauthorised access: how missing penetration tests, password hygiene and authorisation gaps become the basis of the fine.
