Platform governance
Settings & security
External services remain disconnected until staging credentials and policies are validated.
Integration readiness
No secret values are displayed
Supabase stagingDatabase, Auth, RLS and private StorageNot configured
Email providerTransactional delivery and signed event webhooksNot configured
Sensitive data encryptionEnvelope key for optional travel documentsNot configured
Roles
Server-enforced authorization
Full operational access
Programme operations
Read-only reports
Own company only
Privacy controls
KVKK/GDPR foundations
Consent & notice versioning
Capture timestamp, locale, document version and lawful context.
Communication preferences
Essential and marketing purposes are separated.
Subject request workflow
Export, correction and deletion requests have states and audit events.
Retention policies
Travel documents and message events can have distinct retention rules.
Languages
Static interface catalogs
English · Türkçe · العربية · Русский
Passport and travel information is disabled by default and requires a separate retention purpose and encryption key.
Auditable operations
Audit log
Server-paginated staff-only events. Tokens and sensitive values are excluded.
Event ledger
0 authorized events
No connected audit events
Development mode does not fabricate operational audit evidence.