Publication principle: verify first
Information enters the trust center only after its source document has been verified. Topics awaiting a corporate decision or an ongoing verification process are not published as claims; once the process is complete, the item is added with its date and scope. The same principle governs removal: information that is no longer valid is updated or taken down.
- No unverified certificates, figures, or references
- Every item is added with source, date, and scope
- Pending topics never turn into claims
- Updates are tracked in a change log
Secure working practices
Security work is carried out only under explicit written authorization, a defined scope, a time window, and stop conditions. Access follows the principle of least privilege, and the duties of Sanal Çekirdek, the customer, and third parties are written into a RACI or equivalent responsibility matrix.
- Written authorization, defined scope, emergency stop
- Least privilege and controlled access
- RACI or equivalent responsibility matrix
- Change and incident records
- Findings reported with evidence and business impact
Data residency and privacy
Sanal Çekirdek does not claim to own a data center facility; for hosting and cloud services, enterprise-class third-party facility and platform capacity is selected according to workload requirements. Provider names and evidence are disclosed at the proposal stage, after verification and once they enter the contract scope. Documents concerning personal data are published on the dedicated privacy pages.
- Enterprise-class facility and platform capacity
- Provider evidence shared at the proposal stage
- Data residency terms written into the contract
- Privacy documents published on dedicated pages
Accessibility and content accuracy
The site is developed toward the WCAG 2.2 AA target, and accessibility findings are corrected under recorded changes. Turkish and English content carry the same claims, and parity between the two languages is audited separately. Every page passes a claim audit before publication: numbers, superlatives, and references that cannot be verified are removed from the text. The current status against that target, the known limits and how to report a problem are set out on the Accessibility Statement page.
- Development toward the WCAG 2.2 AA target
- Turkish-English claim parity audits
- Claim audit before publication
- Findings closed with recorded changes
