An ERP holds a business’s most sensitive data: customer balances, payroll, price lists. Düzlem protects this data with a multi-layer security architecture.
Infrastructure
- Data is stored in an ISO 27001 certified data centre in Türkiye, across two separate locations.
- Logically separate database per customer; encryption: AES-256 at rest and TLS 1.3 in transit.
- Daily backup kept for 30 days; point-in-time recovery with 15-minute transaction logs.
Access control
- Role- and field-based permission matrix, two-factor authentication, SSO (SAML/OIDC)
- Audit trail for all critical actions (who changed which value and when)
- IP restriction and session duration policies
Compliance
Under KVKK, Düzlem is the data processor; the data processing addendum and sub-processor list are published in the documentation section. The software tracks regulatory changes such as e-invoice, e-ledger and SGK through version updates at no extra charge.