Turkey's First Home-Grown AI Governance Platform

Your AI,
under audit.

AuditBase records your enterprise AI systems, detects risks and automatically documents your compliance with KVKK (Turkey's data protection law) and the EU AI Act. Your data never leaves your servers.

// AuditCore — Live
Customer Service AI
94/100 ✓ Compliant
This Week
24,871
↑ 18% calls
Risk Flags
3
2 awaiting review
gpt-4o · Customer query
14:32 · 842ms
claude-3.5 · Credit assessment
14:29 · 1.2s
gpt-4o · HR assistant
14:28 · 612ms

Standards we meet

KVKKEU AI ActISO/IEC 42001BDDK

// Why AuditBase

AI is spreading fast.
Oversight is falling behind.

67% of companies don't inventory their AI systems. When the EU AI Act takes full effect in 2026, latecomers will face fines of up to €35M.

67%
Undocumented AI

Two thirds of enterprises have no formal inventory of their active AI systems. Which system made which decision, when, and with what data: there is no record.

€35M
Maximum Penalty

The maximum administrative fine for high-risk AI systems under the EU AI Act. Or 7% of global turnover, whichever is higher.

2026
Full Enforcement

In August 2026, the EU AI Act audit trail requirement for high-risk AI systems begins. Retroactive compliance is far more expensive.

// Three modules, one platform

Everything you need
for AI governance.

Modules work independently and get stronger together. Activated according to your license.

// Module 01

AuditCore

Traces every AI decision.

Automatically logs all your AI API calls, flags risks and produces KVKK compliance reports. Requires no changes to your existing code.

OpenAI, Anthropic, Google integration
Automatic PII masking (KVKK)
Immutable audit log (SHA-256)
Weekly compliance report in Turkish
11 built-in risk rules
10K events/sec throughput
On-Premise
# Your existing code stays the same
from openai import OpenAI
from auditbase import AuditCore

audit = AuditCore(
  url="ai.yourcompany.com",
  tenant="your-id"
)

# One line — the rest is automatic
client = audit.wrap(OpenAI())

response = client.chat.completions.create(
  model="gpt-4o",
  messages=[...]
)

# ✓ Logged · Hashed · Compliant
// Risk Matrix · 28 Active Models
Low RiskHigh Risk
EU AI Act
8 high
risk category
ISO 42001
87%
control coverage
// Module 02

ModelRegistry

Your AI models, visible.

Inventories all the AI models in your company, performs EU AI Act risk classification and generates a control matrix to prepare for ISO/IEC 42001 certification.

EU AI Act Annex III mapping
ISO 42001 38 control coverage
Shadow AI detection
Model risk score (0-100)
BDDK model risk templates
Lifecycle management
On-Premise
// Module 03

VendorGuard

The legal guardian of vendor contracts.

Analyzes AI vendor contracts for KVKK and GDPR compliance in minutes; reports the risk score and findings for your legal team.

Automatic PDF contract analysis
KVKK 8 articles + GDPR 12 articles
Cross-border transfer detection
Version tracking & diff
PDF report for the legal team
Analysis in 60 seconds
On-Premise
// Analysis Complete
OpenAI · Terms of Service
58
RISK / 100
Art.9Cross-border data transfer (US)HIGH
Art.7Retention period unspecifiedMEDIUM
Art.5Processing purpose is explicitCOMPLIANT
Art.12Breach notification within 72 hoursCOMPLIANT

// Process

Ready in 5 days.

Not a complex enterprise integration. A standard Docker deployment, open documentation, and a team you know.

01
// Day 1

Onboarding & Setup

Docker Compose installation on your servers. License activation. Registering your AI systems on the platform. 4-hour online training.

02
// Days 2-3

Integration

Integrate with your existing applications via the SDK. With a single line of code, every AI call is logged automatically. No business logic changes.

03
// Days 4-5

First Report

The first data is collected. Your weekly compliance report in Turkish is ready. When the auditor arrives, you generate the KVKK and EU AI Act compliance document with one click.

// Regulatory Framework

All regulations,
on one platform.

Global competitors meet EU regulations. On top of that, we cover every Turkey-specific requirement.

KVKK
Law No. 6698

Data minimization, cross-border transfer control, data subject rights workflow. Full coverage specific to Turkey.

EU AI Act
Regulation 2024/1689

4 risk categories, audit trail for high-risk systems, transparency and explainability requirements.

ISO 42001
AI Management System

38-control framework, gap analysis, audit evidence generation. Speeds up certification readiness.

BDDK
Banking Communiqué

Banking-specific risk categories, BDDK Information Systems compliance templates, model risk management.

// Pricing

Flexible pricing
for your needs.

All modules run on your own infrastructure, on-premise. Let us put together an enterprise quote tailored to your company's size and needs.

// Module 01
AuditCore
Traces every AI decision.
Enterprise quote
// Pricing based on company size
  • On-premise installation (Docker)
  • Unlimited AI systems
  • Compliance report in Turkish
  • BDDK + ISO 42001 templates
  • Training and onboarding included
  • 2 hours of consulting per year
// Module 03
VendorGuard
Analyzes contracts in 60 seconds.
Enterprise quote
// Pricing based on company size
  • On-premise installation (Docker)
  • Automatic PDF contract analysis
  • KVKK + GDPR compliance report
  • Cross-border transfer detection
  • Version tracking & diff
  • PDF report for the legal team
// Module 02
ModelRegistry
Your AI models, visible.
Enterprise quote
// Pricing based on company size
  • On-premise installation (Docker)
  • EU AI Act + ISO 42001 mapping
  • Unlimited model inventory
  • Shadow AI detection
  • BDDK model risk templates
  • Certification readiness support

Considering all 3 modules together?
We offer a 25% discount on the full platform package. Let us prepare a custom quote in our meeting.

// Frequently Asked Questions

What you might be wondering.

What is AuditBase?

AuditBase is Turkey's first home-grown AI governance platform. It enables enterprises to audit, document and report on their AI systems in line with KVKK (Turkey's data protection law), the EU AI Act and ISO/IEC 42001.

What should I do for KVKK compliance of my AI systems?

Under KVKK, you need to determine whether your AI systems process personal data, protect that data through masking or encryption, keep a record of processing activities and inform the data subjects. The AuditBase AuditCore module automates this entire process.

What is the EU AI Act and how does it affect my company?

The EU AI Act is the European Union's legal framework for artificial intelligence systems. Companies in Turkey that serve the EU market may be subject to it. High-risk AI systems require comprehensive documentation, risk management and human oversight.

Can AuditBase be installed on-premise?

Yes. AuditCore, ModelRegistry and VendorGuard are all delivered as a fully on-premise Docker installation; your data never leaves your own servers.

What is required for ISO/IEC 42001 certification?

The ISO/IEC 42001 AI Management System standard covers 38 controls. AuditBase ModelRegistry automatically satisfies 87% of them and produces the audit evidence package. Consulting support is available for the remaining 13%.

Which contracts does VendorGuard analyze?

VendorGuard analyzes AI vendor contracts against 8 KVKK articles and 12 GDPR articles. By uploading a PDF, you get a risk score in 60 seconds, along with findings such as detection of cross-border data transfers, missing disclosure obligations and unclear retention periods.

Pilot · First 5 Customers

50% off setup,
first 3 months free.

For the first 5 companies in the reference customer program. In return, we only ask for a reference letter.

info@auditbase.ai