At Codemarkt Yazılım Sanayi Ticaret Anonim Şirketi ("CODEMARKT"), we regard the security of the systems we build and the data we process as a core part of our work. This policy describes the information security principles covering our own systems, our website and the solutions we deliver to our customers.
Core principles
Confidentiality: We ensure information is accessible only to authorised people.
Integrity: We protect the accuracy and completeness of information and prevent unauthorised changes.
Availability: We keep information accessible when it is needed.
Measures we apply
Access control
Access to systems is granted on the principle of least privilege. Access to administration panels requires multi-factor authentication. Access rights are reviewed regularly, and access is revoked when a role ends.
Encryption and communication security
All traffic on our website is encrypted with TLS (HTTPS). Sensitive configuration values and authentication secrets are kept separate from source code and backups.
Secure software development
In the systems we build, we apply input validation, authorisation layers, session security and content security policies. We keep dependencies up to date and track known vulnerabilities. Changes are verified with automated tests before release.
Data protection
We follow data minimisation when processing personal data: we do not collect data we do not need, and we do not keep the data we need for longer than its purpose requires. Details are set out in our Data Protection Notice.
Monitoring and logging
Security-relevant events in our systems are logged and reviewed regularly. Logs are structured to enable the detection of misuse without accumulating unnecessary personal data.
Backup and continuity
Data is backed up regularly, and restore processes are planned to minimise data loss and downtime.
Incident management
When a security incident is detected, we respond to contain its impact, remove its root cause and prevent recurrence. If a breach affecting personal data occurs, the Turkish Personal Data Protection Board is notified within 72 hours of the breach becoming known, in line with the Board's decision No. 2019/10, and the affected individuals are notified as soon as reasonably possible.
Suppliers
We select suppliers of services such as hosting and communication infrastructure with their security practices in mind, and we limit their access to the scope the service requires.
Continuous improvement
Information security is not a one-off task but an ongoing process. This policy and our practices are reviewed regularly in light of technological developments and emerging threats.
For security-related questions and reports, you can reach us at info@codemarkt.com. If you notice a vulnerability on our site, we welcome responsible disclosure.
Last updated: 7 August 2026.