Skip to content
03 · 5651 LOGGING

Your records, signed and audit-ready.

Turkish Law No. 5651 obliges businesses offering internet access to keep access records. Controller takes that burden off you.

5651 LOGGING
What does Law No. 5651 require?

Mass-use internet providers must keep access records, preserve their accuracy and integrity, retain them for the statutory period and produce them on request. Records must be signed with a timestamp.

Compliance checklist
Collecting access records from the device
Sealing every record with a hash
Signing the daily archive with a qualified timestamp
Being able to verify archive integrity at any time
Producing reports on official request
01
Qualified timestamp

The daily archive is signed with an RFC 3161 timestamp obtained from the Kamu SM (TÜBİTAK BİLGEM) timestamp authority, proving the record existed on that date.

02
Hash chain

Every record line is sealed with an HMAC and daily archives are chained together. Changing a single line breaks the chain and shows up in verification.

03
Permanent archive

Signed daily archives are never deleted; they remain accessible and downloadable throughout the statutory retention period.

04
Audit-ready reports

When an official request arrives, records for the relevant period are searched and a compliance report is exported as PDF.

SIGNED ARCHIVE
Signed log archive screen: daily per-device archives with record counts and RFC 3161 timestamp status
Archives and timestamps · Customer data replaced with sample values.

How many devices do you have? Let us work out the rest.

Fill in the two-minute wizard; we will send a tailored quote within one business day.

Start the quote wizard