Türkçe
English
РусскийInformation Security Management System
Confidentiality, integrity and availability of information assets are managed to the international standard.
Certifications and Independent Testing
Certified to International Standards
From information security to liveness detection, every layer is audited and tested by independent organisations.
Privacy Information Management
Processing of personal and biometric data is governed by a privacy management system.
Quality Management System
Product development, deployment and support processes comply with the quality management standard.
Liveness (PAD) Certification
Presentation attack detection has been tested by the independent lab iBeta against ISO/IEC 30107-3.
Security Controls Audit
The operating effectiveness of security, availability and confidentiality controls over time is verified by an independent audit.
Independent Penetration Testing
Applications and infrastructure are regularly penetration-tested by independent security experts.
Independent Face Recognition Evaluation
Techsign is the only Turkish company with a score above 90% in the NIST FRTE evaluation.
View the NIST report cardPersonal Data Protection
Data is processed in compliance with Law No. 6698 and is not shared with third parties.
Regulatory Compliance
Point-by-Point Compliance with Remote Identification Rules
Whatever regulation your industry is subject to, Prove ID covers the steps it defines in a single flow.
MASAK
Communiqué No. 19
MASAK General Communiqué (No. 19)
- Legal basis
- Law No. 5549 on the Prevention of Laundering Proceeds of Crime
- Scope
- All obliged parties; real persons and trade-registered legal entities
In a flow aligned with the procedures for remote identification, NFC chip verification, face matching, liveness check and video call steps run in a single process.
MASAK
Communiqué No. 32
New
MASAK General Communiqué (No. 32)
- Legal basis
- Official Gazette of 27 June 2026; Article 4/C added to Communiqué No. 19
- Scope
- Non-Turkish real persons and foreign representatives of legal entities
Remote identification is performed with an ICAO 9303 NFC-enabled passport; chip data is matched with the printed passport data, and video call and AI-assisted liveness and photo comparison are applied.
BDDK
Banks
Regulation on Remote Identification Methods to be Used by Banks and Establishing Contractual Relationships Electronically
- Legal basis
- Banking Regulation and Supervision Agency
- Scope
- Banks and participation banks
The video call steps in the regulation are supported: screen recording of the session, hologram check by tilting the ID, placing a finger on random areas of the ID, variable security questions and verbal contract approval.
BDDK
6361 Financing
Regulation on Remote Identification Methods for Financial Leasing, Factoring, Financing and Savings Financing Companies
- Legal basis
- Transactions under Law No. 6361
- Scope
- Financial leasing, factoring, financing and savings financing companies
Loan and financing applicants are identified remotely, contracts are approved electronically and the process is recorded end to end for audits.
SPK
III-42.1
Communiqué on Remote Identification Methods and Establishing Contractual Relationships Electronically (III-42.1)
- Legal basis
- Capital Markets Board
- Scope
- Brokerages, portfolio management companies and crypto-asset service providers
ID, NFC, liveness and video call steps are run for remote opening of investment and crypto-asset accounts; NFC passports are supported for foreign nationals.
TCMB
Payments & E-money
Communiqué on Information Systems of Payment and Electronic Money Institutions and Data Sharing Services in Payment Services
- Legal basis
- Central Bank of the Republic of Türkiye
- Scope
- Payment institutions and electronic money institutions
Wallet and payment accounts get high-volume, instant remote identification, and the verification steps required for a continuous business relationship are met.
KVKK
Law No. 6698
Law No. 6698 on the Protection of Personal Data
- Legal basis
- Personal Data Protection Authority
- Scope
- All organisations processing personal data
Identity and biometric data are not shared with third parties; with on-premise deployment data stays in the institution’s own infrastructure, and access is role and permission based.
Security Practices
Your Data Stays Under Your Control
On-premise deployment and data residencyProve ID can be deployed in the institution’s own data centre, so identity and biometric data never leave its infrastructure. Private or public cloud options are also available.
Server-side re-verificationEvery on-device result is re-verified on the server, so client-side tampering cannot bypass approval.
Role-based access and four-eyes approvalIn the admin dashboard each user accesses only the data they are authorised for; critical actions require approval from a second authorised person.
Multi-factor authenticationAdmin dashboard access is protected by multi-factor authentication.
End-to-end recording and audit trailVideo calls, approvals and every transaction step are recorded and can be reported for audits and regulator requests.
BlacklistsWith face, national ID number and device blacklists, previously detected people and devices cannot transact again.
No data sharing with third partiesVerification data is processed solely to provide the service and is not shared with third parties.
Regular penetration testsApplications and infrastructure are regularly tested by independent security experts; findings are tracked and remediated.
Frequently Asked Questions
Your Questions, Answered
Which regulations does Prove ID comply with?
Prove ID complies with MASAK General Communiqué No. 19 and No. 32 (which introduced remote identification of foreign nationals with NFC passports), BDDK’s remote identification regulations for banks and for financial leasing, factoring and financing companies, SPK Communiqué III-42.1, the CBRT communiqué for payment and electronic money institutions, and KVKK (Law No. 6698).
What changed with MASAK Communiqué No. 32, and does Prove ID support it?
With MASAK Communiqué No. 32, non-Turkish individuals and foreign representatives of legal entities can become customers through remote identification with ICAO 9303 NFC passports. The passport chip data is read via NFC and matched with the printed data; liveness and photo comparison during the video call can be AI-assisted. Prove ID supports every step of this flow.
Which certifications does Prove ID hold?
Prove ID holds ISO/IEC 27001 information security, ISO/IEC 27701 privacy and ISO 9001 quality management certifications, a liveness (PAD) certification tested by iBeta against ISO/IEC 30107-3 and a SOC 2 Type II audit report, and undergoes regular independent penetration testing. Techsign’s face recognition model is also listed in the NIST FRTE evaluation.
Where are identity and biometric data stored?
With on-premise deployment all data is stored in the institution’s own infrastructure and never leaves it. With cloud deployment data is kept in an environment agreed with the institution. In both models data is not shared with third parties.
How are the BDDK video call requirements for banks met?
Prove ID supports the steps defined in the regulation during the video call: recording the session, hologram check by tilting the ID, placing a finger on randomly chosen areas of the ID, variable security questions and asking for the ID serial number, and verbal contract approval.
Let’s review it with your compliance team
Contact our team for certificate documents, audit reports and regulatory mapping documents.