Blog

Practical writing

We write about the problems we meet in the field across compliance, software and data protection, and how we solve them. Every claim about legislation rests on an official source.

4 posts in total

2026-09-083 min read

Where KVKK compliance starts: from inventory to disposal

Most compliance projects start by writing policy and get stuck there. The right order starts with the inventory; policy is built on top of it.

KVKKCompliance

2026-08-212 min read

ISO 27001: getting certified and running the system are different jobs

Passing the certification audit is a project; operating an information security management system is a habit. Confusing the two produces a bill at the first surveillance audit.

ISO 27001Compliance

2026-07-302 min read

A banner is not enough: making cookie consent provable

A click on the banner does not show that consent was obtained. What has to be shown is who consented to what, under which version.

CookiesKVKK

2026-06-172 min read

Five questions before putting AI into an enterprise system

Calling a model is easy. The hard part is deciding upfront which data goes, who approves, and what you will show in an audit.

AIISO 42001

See where you stand in 20 minutes

The free initial assessment maps your current state and tells you which step should come first. You are not committed to anything afterwards.

Look at it yourself first

A twenty-five question KVKK compliance test with per-area scores and a priority recommendation. No sign-up.

Start the compliance test

Let's look together

We discuss your current state and work out which step comes first and how long it takes.

Request a conversation