Product

Trust

Where the data comes from, how it is protected.

On one page: how the facts in Ulawk are produced, how your account and watchlist are protected and the rules we follow for personal data. Only what we do; no exaggeration.

  • Official sources only
  • Verification gate
  • Daily backups

Official sources only

Facts come only from official records.

We read company data from the record itself, not from third-party compilations.

Trade Registry Gazette

In Türkiye, the list of a company’s notices and the gazette issues; the basis of the profile.

KAP

Disclosures of listed companies and fund portfolio breakdowns.

Official registers abroad

The country’s official company register and official gazette; listed country by country in the coverage table.

Sanctions lists

UN, OFAC, EU, United Kingdom, Switzerland, Canada and MASAK lists; updated every day.

Coverage by country

From gazette to profile

A fact enters the profile in five steps.

Every step serves one aim: a fact in the profile can be traced back to the sentence in the notice.

A fact whose source cannot be shown does not enter the profile.

The full method and our limits are on the Methodology page.

  1. Notice list

    All notices of the company are found by registry office and number; old and new registry records merge.

  2. Gazette issue

    The issue carrying the notice is downloaded and archived.

  3. Notice block

    The page is converted to text; neighbouring notices are separated out.

  4. Reading

    AI extracts the facts and returns the exact sentence for each one.

  5. Verification gate

    Each record is checked against the notice and quote it relies on.

Methodology

Verification gate

What is dropped, what is shown with a warning?

The gate works two ways: it drops what has no source and marks what has a weak one.

Dropped

Does not enter the profile

  • A record whose notice cannot be shown
  • A record tied to an unknown notice
  • A person’s name that does not appear in the source notice

Shown with a warning

Not hidden, marked

  • A row whose quote is not found word for word in the gazette text: “check the gazette”
  • A sentence that cannot be located on the page: the page opens unmarked
  • Inferences such as “Active”: labelled “inferred”
  • Calculated facts: labelled “calculated”

Human review

Machines read, the team watches.

Not every profile is approved by a person one by one; review works through exceptions and reports. We say this openly.

Error reports

Every row has a flag. Reports are tracked as new, in review, corrected or rejected.

Quality queues

Notices with no officer found, inconsistent ratios, no full shareholder list or unreadable text land in front of our team.

Match corrections

Wrong registry matches and duplicate records are corrected by hand by our team.

Account and access security

Your watchlist is yours alone.

Who follows which companies is sensitive information; we treat it that way.

Encrypted connection

The site and API run over HTTPS only; browsers are told via HSTS to use encrypted connections only.

Passwords

Passwords are stored as irreversible hashes; repeated failed logins lock the account temporarily.

API key

The secret is shown only once and we store only its hash; webhook secrets are stored encrypted.

Your list only

Your watchlist, notes and reports are invisible to other customers; API and assistant connections see only your companies.

Roles

Owner, Editor and Viewer in projects; adding and removing companies for editors and owners, invitations for owners only.

Browser security

Session cookies are Secure and HttpOnly; pages are served with a content security policy.

Backups

Every day, somewhere else.

Backups go to a storage area separate from the server and are checked after upload.

Database

Accounts, lists, profiles

Frequency
Every day
Location
Storage separate from the server
Retention
Last 30 backups
Check
Verified after upload

Gazette archive

Notice and document files

Frequency
Every day, incremental
Retention
Never deleted from the backup
Restore
Rehearsed by hand on a separate database

Personal data

KVKK and GDPR: a short summary.

The detailed and binding text is our privacy notice; here is its summary.

TopicSummary
Data controllerThe company operating Ulawk; its name and contact details are in the privacy notice.
Customer dataFor entering into and performing the contract, invoicing, support and legal obligations; a newsletter if you opt in.
Legal basisKVKK art. 5: contract and legal obligation; consent where explicit consent is required.
People in registers (GDPR art. 14)Data of company officers in the EU, EEA and UK comes from public official registers; the basis is legitimate interest (art. 6(1)(f)).
Limits of useThis data is not used for marketing and no automated decisions are made; it is kept while published and needed, and removed when the register removes it.
Your rightsKVKK art. 11 rights (requests answered within 30 days at most); GDPR art. 15–21 rights and a complaint to a supervisory authority.
Retention and deletionData whose purpose has ended is deleted, destroyed or anonymised under KVKK art. 7.
RequestsThe ways to apply are in the privacy notice; GDPR requests to [email protected].

Privacy notice Cookie policy

Service status

If something breaks, you see it.

The service status page shows both our systems and the sources, day by day.

What it shows

Component by component, last 90 days

  • Panel, API, e-mail and job queue
  • Trade Registry Gazette and KAP
  • Each country abroad separately
  • Machine-readable: /durum.json

How it is made

Only from real traces

Status is computed from real traces the system leaves. A day without traces shows as “unknown”, not “working”.

Service status

Our limits

Limits we know about.

Sourced data is still data with limits; we write down where they are.

A.Ş. share transfers

Usually not published; current shareholders may not be visible in the gazette. Then we write “not in the notices”.

Matching people

The gazette carries no ID numbers; the relationship network and sanctions screening match by name.

Old scans

Recognition errors are possible in old scanned issues; reported errors are corrected.

Risk indicators

Not a credit score; no payment or debt data.

What we don’t claim

Things we do not say.

Trust starts with not claiming what is not there.

Certification

We make no claim of an independent security certification; we answer your security questions in writing.

Official document

Profiles and reports do not replace official documents; the archived gazette issue is the official one.

Legal advice

Alerts and flags are not a legal assessment.

Full coverage

Not every fact comes back in every country; what does not is written in the coverage table.

Keep reading

Read next

The other parts of the product, plus coverage, pricing and service status.

FAQ

Questions

If your question is not here, write to [email protected].

Can other customers see my watchlist?

No. Your watchlist, notes and reports are kept only in your account. People you invite to a project see them within their role.

How is your data backed up?

The database is backed up every day to storage separate from the server and checked after upload; the last 30 backups are kept. The gazette archive is backed up incrementally every day.

Do you hold a security certification?

We make no claim of an independent security certification. Send your security questionnaire or questions to [email protected]; we answer in writing.

How do I check the accuracy of a profile?

The source button next to each row opens the gazette page and shows the sentence behind the fact. If you see an error, report it with the row’s flag.

I am named in a register; how do I ask about my data?

Use the ways to apply in the privacy notice; for requests under GDPR write to [email protected].

Where do I see an outage?

The service status page shows the last 90 days of the panel, API, e-mail, job queue and sources, day by day.

Does your security team have questions?

Write to us; we will go through the data flow, the access model and backups together.

Enterprise quote

Get a quote for your portfolio.

Plans differ only in the number of companies you follow; every feature and every country is included. Fill in the form and we will prepare the right offer together.

  • Try it with your own companies in a demo
  • We upload your Excel list
  • Help setting up API and webhook
Write to us:[email protected]
Type of organisation
Number of companies to follow
We use your details only to prepare the quote. Details: privacy notice.