We use encrypted connections, a certified payment infrastructure, access rules and regular backups to protect your data. This page explains clearly what is protected and how.
Encrypted Connection (HTTPS)
TLS, auto-renewed certificates
PCI-DSS Certified Payments
Powered by iyzico
KVKK Processes
Privacy notices and explicit consent
Daily Backups
Automatic database backup
ajandam.app and panel.ajandam.app are served only over HTTPS, through the Cloudflare network. TLS certificates are issued for short periods and renewed automatically.
The mobile app and the web panel talk to our servers only over encrypted connections. The padlock in your browser's address bar shows that the connection is encrypted.
Your login details, personal data and business data are encrypted in transit.
Payments on the web are taken through iyzico, one of Turkey's leading payment providers; purchases in the iPhone app go through the App Store. iyzico holds PCI-DSS certification, the international standard for payment security.
Your credit and debit card details are never stored on Ajandam servers. Card data is processed only within iyzico's secure environment; we have no access to it.
Your customer records, reservations and financial data are protected by multiple layers of security.
The database and files are encrypted at rest by the cloud provider. Each business can access only its own data, enforced by row-level access rules in the database.
Site traffic passes through Cloudflare, where attacks and malicious bot traffic are filtered at the network layer. Only the necessary ports are open on our servers.
The database is backed up automatically every day.
Application errors, scheduled jobs and service outages are tracked by automated monitoring and alerting.
Only the authorised team can access the admin panel. In your business, you decide who can see and change what with 48 separate staff permissions.
System components are updated regularly. Known vulnerabilities are patched as quickly as possible.
The database and files are hosted in enterprise cloud data centres outside Turkey (Supabase/AWS and Amazon S3); site traffic passes through Cloudflare.
Ajandam takes technical and administrative measures for its obligations under the Turkish Personal Data Protection Law (KVKK) and helps you manage privacy notices and explicit consent when processing your customers' data.
If you discover a security vulnerability on the Ajandam platform, please let us know. We are committed to responsible disclosure; we take every report seriously and will respond as quickly as possible.
Please use only the email address below for security reports. Report the issue to us before disclosing it publicly, so that we have the chance to protect our users.