Information Security
The technical and organisational measures we apply to protect customer data.
Purpose
This document summarises the principles that Gökkuşağı Yazılım ve Danışmanlık ("JETCP") applies to protect the confidentiality, integrity and availability of the information it processes while delivering its services.
Access authorisation
- Access to systems is granted on a least-privilege basis, limited to the person's role.
- Every user works under their own account; account sharing is not permitted.
- Permissions are updated when roles change or employment ends.
- Critical operations are recorded in an audit log.
Data transmission and storage
- Communication through web interfaces is secured with an encrypted connection (HTTPS/TLS).
- Data is stored on [hosting provider and location].
- Backups are taken every [backup frequency] and retained for [retention period].
- Restore tests are performed every [test frequency].
Patch and vulnerability management
- The software components and infrastructure we use are kept on current versions.
- Reported vulnerabilities are prioritised by severity and remediated.
- You can report security issues to satis@jetcp.com.tr.
Incident management
When a security incident is detected, we determine its scope, isolate the affected systems, apply the necessary fixes and make any notifications required by law. In the event of a personal data breach, the notification obligations under Turkish Law No. 6698 are fulfilled.
Staff awareness
Our employees sign confidentiality undertakings and receive regular briefings on information security and the protection of personal data.
About this website
jetcp.com.tr consists of static files. It hosts no content management system, no database and no user login, and no server-side code processes form data. This is a deliberate choice to keep the attack surface to a minimum.
Related documents: KVKK, Privacy Notice, Privacy Policy.
Last updated: 02.09.2026