Voice traffic and call recordings are commercially sensitive data. The Ahize Telekom infrastructure is designed in layers to protect it.
Infrastructure security
- All SIP signalling is encrypted with TLS 1.3 and media traffic with SRTP.
- A session border controller (SBC), IP allow-listing and country-based dialling restrictions are applied at the network edge.
- Toll fraud detection: abnormal call patterns are blocked within minutes and the customer is notified.
- Network and application penetration tests are carried out twice a year by independent firms.
Data and compliance
- Call recordings are stored encrypted with AES-256 in our data centres in Türkiye.
- The retention period is set by the customer and recordings are deleted automatically afterwards.
- Under KVKK we act as data processor; a data processing agreement is provided as standard.
- Our ISO 27001-certified information security management system is audited annually.
Access control
The management console is protected by two-factor authentication, role-based permissions and an audit log. Single sign-on (SAML) is available on enterprise plans.