{"id":1396,"date":"2026-10-31T12:33:24","date_gmt":"2026-10-31T12:33:24","guid":{"rendered":"https:\/\/www.promail.com.tr\/bilgi-bankasi\/?p=1396"},"modified":"2026-10-31T12:33:24","modified_gmt":"2026-10-31T12:33:24","slug":"sirket-epostalari-yurt-disi-sunucularda-mi-kvkk-denetimi-ve-veri-guvenligi","status":"publish","type":"post","link":"https:\/\/www.promail.com.tr\/bilgi-bankasi\/sirket-epostalari-yurt-disi-sunucularda-mi-kvkk-denetimi-ve-veri-guvenligi\/","title":{"rendered":"\u015eirket E-postalar\u0131n\u0131z Yurt D\u0131\u015f\u0131 Sunucularda m\u0131 Bar\u0131n\u0131yor? KVKK Denetimlerinde E-posta G\u00fcvenli\u011fi"},"content":{"rendered":"

\u015eirketinizin \u00e7al\u0131\u015fanlar\u0131 her g\u00fcn m\u00fc\u015fterilerinizin kimlik numaralar\u0131n\u0131, s\u00f6zle\u015fmelerini, sa\u011fl\u0131k beyanlar\u0131n\u0131, banka hesap bilgilerini veya CV’lerini e-posta ile payla\u015f\u0131yor. Peki bu e-postalar\u0131n fiziksel olarak hangi \u00fclkedeki sunucularda depoland\u0131\u011f\u0131n\u0131<\/strong> ve hukuki sorumluluklar\u0131n\u0131z\u0131 hi\u00e7 d\u00fc\u015f\u00fcnd\u00fcn\u00fcz m\u00fc?<\/p>\n

Pek \u00e7ok i\u015fletme; Microsoft 365, Google Workspace veya Yandex Mail gibi global bulut servislerini kullan\u0131rken fark\u0131nda olmadan Ki\u015fisel Verilerin Korunmas\u0131 Kanunu (KVKK) Madde 9<\/strong> kapsam\u0131nda ciddi bir yasal risk alt\u0131na girmektedir.<\/p>\n

Ki\u015fisel Verileri Koruma Kurulu (KVKK), yay\u0131mlad\u0131\u011f\u0131 ilke kararlar\u0131nda ve uygulad\u0131\u011f\u0131 y\u00fcksek idari para cezalar\u0131nda a\u00e7\u0131k\u00e7a belirtmektedir:<\/p>\n

> “Veri taban\u0131 veya sunucular\u0131 yurt d\u0131\u015f\u0131nda bulunan e-posta hizmet sa\u011flay\u0131c\u0131lar\u0131 \u00fczerinden ki\u015fisel veri i\u015flenmesi ve saklanmas\u0131, yurt d\u0131\u015f\u0131na ki\u015fisel veri aktar\u0131m\u0131<\/strong> niteli\u011findedir.”<\/em><\/p>\n

Bu rehberde; \u015firket e-postalar\u0131n\u0131n yurt d\u0131\u015f\u0131nda bar\u0131nd\u0131r\u0131lmas\u0131n\u0131n yasal ve finansal risklerini, 5651 say\u0131l\u0131 kanun gereksinimlerini, veri egemenli\u011fini ve T\u00fcrkiye lokasyonlu kurumsal e-posta altyap\u0131s\u0131na ge\u00e7erek denetimlerden nas\u0131l tam not alaca\u011f\u0131n\u0131z\u0131<\/strong> inceliyoruz.<\/p>\n

\n

⚡ H\u0131zl\u0131 Bak\u0131\u015f: Yurt D\u0131\u015f\u0131 Bulut Sa\u011flay\u0131c\u0131lar vs ProMail T\u00fcrkiye<\/h2>\n
\n\n\n\n\n\n\n\n\n\n
Hukuki & Teknik Kriter<\/th>\nGlobal Servisler (Google \/ MS \/ Yandex)<\/th>\nProMail Yerli E-Posta Altyap\u0131s\u0131<\/th>\n<\/tr>\n<\/thead>\n
Fiziksel Sunucu Lokasyonu<\/strong><\/td>\n\u0130rlanda, Hollanda, ABD, Rusya vb.<\/td>\n%100 T\u00fcrkiye (\u0130stanbul Veri Merkezi)<\/strong><\/td>\n<\/tr>\n
KVKK Madde 9 Yurt D\u0131\u015f\u0131na Aktar\u0131m<\/strong><\/td>\nEvet<\/strong> (A\u00e7\u0131k r\u0131za veya Kurul taahh\u00fctnamesi gerektirir).<\/td>\nHay\u0131r<\/strong> (T\u00fcm veriler T\u00fcrkiye s\u0131n\u0131rlar\u0131 i\u00e7inde kal\u0131r).<\/td>\n<\/tr>\n
\u0130dari Para Cezas\u0131 Riski<\/strong><\/td>\nY\u00fcksek (Eksik a\u00e7\u0131k r\u0131zalarda milyonlarca liral\u0131k Kurul cezalar\u0131).<\/td>\nS\u0131f\u0131r \u0130hlal Riski<\/strong> (Tam yerli mevzuat uyumu).<\/td>\n<\/tr>\n
5651 Say\u0131l\u0131 Kanun Loglama<\/strong><\/td>\nGlobal log mekanizmalar\u0131 T\u00fcrk yarg\u0131 format\u0131yla tam uyu\u015fmaz.<\/td>\nYasal Zaman Damgal\u0131 ve Mahkeme Ge\u00e7erli Loglama.<\/strong><\/td>\n<\/tr>\n
Veri Egemenli\u011fi (Data Sovereignty)<\/strong><\/td>\nYabanc\u0131 devletlerin yasal mercileri (Cloud Act) eri\u015febilir.<\/td>\nYaln\u0131zca T.C. Mahkemeleri ve Kanunlar\u0131 Yetkilidir.<\/strong><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n
\n

1. KVKK Madde 9: Yurt D\u0131\u015f\u0131na Veri Aktar\u0131m\u0131 Neden Bu Kadar Kritik?<\/h2>\n

6698 say\u0131l\u0131 KVKK’n\u0131n 9. maddesine g\u00f6re ki\u015fisel verilerin yurt d\u0131\u015f\u0131na aktar\u0131labilmesi son derece s\u0131k\u0131 kurallara ba\u011flanm\u0131\u015ft\u0131r:<\/p>\n

    \n
  1. A\u00e7\u0131k R\u0131za Zorunlulu\u011fu:<\/strong> M\u00fc\u015fterinizin veya \u00e7al\u0131\u015fan\u0131n\u0131z\u0131n verisini yurt d\u0131\u015f\u0131ndaki bir sunucuya (\u00f6rne\u011fin Google veya Microsoft’un Frankfurt ya da Dublin veri merkezine) g\u00f6ndermek i\u00e7in her bir ki\u015fiden a\u00e7\u0131k ve \u00f6zg\u00fcr iradeli onay alman\u0131z gerekir.<\/li>\n
  2. Hizmet \u015eart\u0131na Ba\u011flama Yasa\u011f\u0131:<\/strong> Kurul kararlar\u0131na g\u00f6re, m\u00fc\u015fteriye bir hizmet verirken e-posta sunucunuz yurt d\u0131\u015f\u0131nda diye “A\u00e7\u0131k r\u0131za vermezsen sana hizmet vermem”<\/em> diyemezsiniz. Bu durum r\u0131zay\u0131 sakatlar ve ge\u00e7ersiz k\u0131lar.<\/li>\n
  3. Y\u00fcksek \u0130dari Para Cezalar\u0131:<\/strong> Kurul denetimlerinde yetkisiz yurt d\u0131\u015f\u0131 veri aktar\u0131m\u0131 tespit edildi\u011finde veri sorumlusu \u015firketlere milyonlarca liraya varan idari para cezalar\u0131<\/strong> uygulanmaktad\u0131r.<\/li>\n<\/ol>\n
    \n

    2. \u015eirket E-postalar\u0131nda Hangi Veriler KVKK Riskine Girer?<\/h2>\n

    Bir \u015firketin e-posta kutusu basit bir yaz\u0131\u015fma arac\u0131 de\u011fildir; \u015firketin en mahrem veri ambar\u0131d\u0131r:<\/p>\n