Where the data sits: Türkiye
Your object storage buckets, the persistent disks behind your hosting and container apps, and your managed databases are stored on servers in data centres in Türkiye. Backups stay in the same place — storing data locally and shipping the backup abroad does not satisfy a local-storage obligation, and it is one of the first things an audit asks about.
This is not an option bolted on afterwards. Every data-bearing node of the storage cluster is in Türkiye, and so are the servers that run the platform.
Processing is local too
Where data is processed matters as much as where it rests. Your application — WordPress, PHP, Node.js or your own container — runs on servers in Türkiye. Every node in our cluster is labelled with its location, and customer workloads are scheduled only onto the ones marked Turkish.
So there is no "we spill abroad under load" case. Capacity grows in Türkiye.
Turkey-only delivery, if you want it
A CDN's job is to serve content close to the visitor, which is why we run servers both in Türkiye and abroad. But if your compliance posture calls for it, we configure your account to be served from Turkish PoPs only.
There is a cost and we would rather state it plainly: visitors outside Türkiye then fetch from Türkiye, so their latency goes up. For a platform whose audience is Turkish that difference is immaterial; with a global audience it is worth weighing together. Ask for it and we apply it to your account.
What it actually buys you legally
The honest version first: KVKK does not tell everyone to keep data in Türkiye. Since Law 7499 took effect on 12 March 2024, transfer abroad is permitted through an adequacy decision or, failing that, standard contractual clauses, undertakings or binding corporate rules.
The question is not whether it is possible but what it costs. Choose the standard-contract route and signing is not the end of it: the contract must be notified to the Board within five business days, and the administrative fine for failing that notification duty runs from ₺90,000 to ₺1.8 million. Add the per-country assessment, keeping the contracts current, and defending all of it in an audit.
If the data never leaves, none of that applies. There is no contract to draft, no notification to file, no transfer to defend.
In some sectors it is already mandatory
In banking and finance, the BDDK regulation on banks' information systems and electronic banking services requires sensitive customer data and primary systems — including the biometric data used in remote identity verification — to be held inside Türkiye, and that requirement extends to backups of those systems. The Central Bank has placed comparable obligations on payment and electronic money institutions.
If you are one of those institutions, or a platform serving them, where your infrastructure provider sits is not a preference but a condition of doing business.
*This page is not legal advice; confirm the scope of your own obligation with your counsel. Our commitment is on the infrastructure side: where your data rests, where it is processed and where it is served from.*
Frequently asked questions
Are backups in Türkiye as well?
Yes. Storage and backups live on the same Turkish infrastructure. Keeping the data local while sending the backup abroad does not satisfy the obligation, and the BDDK regulation covers backups of information systems explicitly.
If I use the CDN, is content still copied abroad?
In the default configuration content is cached at PoPs close to the visitor, and some of those are outside Türkiye. On request we configure your account to be served from Turkish PoPs only, which keeps the cache local too. The trade-off is higher latency for visitors abroad.
Does KVKK require data to stay in Türkiye?
Not as a general rule. After Law 7499, transfer abroad is possible via an adequacy decision, standard contractual clauses, undertakings or binding corporate rules. But the standard-contract route carries a five-business-day notification duty to the Board, with fines from ₺90,000 to ₺1.8 million for missing it — and sectors such as banking, payments and electronic money already require local storage outright.
How do I verify my data is in Türkiye?
On request we put in writing which servers your account runs on and which infrastructure holds your storage. The IP ranges of those servers are also registered to Türkiye and can be checked independently.
Do you have no servers abroad at all?
We do — CDN delivery runs from servers both in Türkiye and abroad, because that is what a CDN is for. The distinction is that customer data and application workloads sit on Turkish servers, and on request we confine delivery to Türkiye as well.