How Kolayla ensures all AI workloads — data, training, inference — remain within Turkish jurisdiction.
Primary database runs on Kolaybase (PostgreSQL) hosted in Vodafone Net's Istanbul DC (ISO 27001:2022 certified). Object storage (documents, model artefacts, kit files) is on a Turkish-region S3-compatible store. No data is replicated outside Turkey without explicit customer instruction.
Fine-tuning jobs run on GPU instances in AWS eu-south-1 (Milan) or our on-prem A100 cluster in Istanbul for air-gapped requirements. Model weights are encrypted at rest (AES-256) and in transit (TLS 1.3). Weight files are never sent to third-party LLM providers.
Hosted inference uses vLLM on our Turkish DC fleet for self-hosted models. Cloud API calls (OpenAI, Anthropic) are routed through a Turkish-jurisdiction proxy that strips PII before forwarding. All request/response logs are stored in Kolaybase, never in vendor systems.
Any transfer outside Turkey requires: (1) an explicit data processing agreement addendum, (2) adequacy decision or SCCs per KVKK Article 9, (3) VERBİS update. Our platform enforces these programmatically — cross-border transfers are blocked by default and require admin override with audit log.
Ready to build sovereign AI?
Get in touch