Free tool

How ready are you for the audit?

Choose a framework and answer 9 questions. The tool shows each gap with its law or standard reference and tells you what to do.

Turkish Personal Data Protection Law No. 6698. Every company and public body that processes personal data in Türkiye. Official text (mevzuat.gov.tr)
  1. 1. KVKK Art. 16 · VERBISIs your personal data inventory current and in line with your VERBIS record?
  2. 2. KVKK Art. 5 and Art. 10Are your privacy notices ready, and do you keep records of explicit consent?
  3. 3. KVKK Art. 12 · access rightsDo you have an authorization matrix and access logs that show who can reach personal data?
  4. 4. KVKK Art. 12 · data securityDo you block personal data from leaving through USB, email, cloud uploads and AI tools?
  5. 5. KVKK Art. 12(5) · Board Decision 2019/10Can you detect a data breach and notify the Board within 72 hours?
  6. 6. KVKK Art. 9 · cross-border transferDo you know and control which tools send personal data outside Türkiye?
  7. 7. KVKK Art. 7 · Deletion RegulationDo you have a retention and destruction policy, and do you actually delete data when its period ends?
  8. 8. KVKK Art. 12 · technical measuresAre operating system and application patches installed on time on every computer and server?
  9. 9. KVKK Art. 12 · logging and auditDo you keep tamper-proof logs and evidence you can show in an audit?
Important: This test is a first assessment. It does not replace legal advice or an audit. The questions are based on the articles in the official texts and were last reviewed in November 2026. For a final answer, work with an independent auditor or legal adviser.
ENTERPRISE SECURITY & BUSINESS RESILIENCE

Close the gaps with one agent

Moftgate combines DLP, DSPM and endpoint management. With on-premises deployment your data stays on your servers, and audit evidence is produced automatically.