https://seratus.me/blog/Entries on data discovery, KVKK and GDPR practice, anonymization, access risk and competition-law compliance, written from what Seratus sees in the field. Each entry names the gap it closes and ends with questions people actually ask.en https://seratus.me/blog/being-audit-ready-the-evidence-chain/https://seratus.me/blog/being-audit-ready-the-evidence-chain/Mon, 19 Oct 2026 00:00:00 GMTAudit readiness through an audit log with who, when and why, an approval chain, the KVKK readiness summary and audit report, and evidence produced on-premises. https://seratus.me/blog/trade-secrets-and-company-secrets-a-dspm-view/https://seratus.me/blog/trade-secrets-and-company-secrets-a-dspm-view/Sun, 18 Oct 2026 00:00:00 GMTTrade secrets fall outside KVKK yet are an organization's most critical data: confidentiality taxonomy, classification, access narrowing, departing employees. https://seratus.me/blog/competition-authority-2026-agenda-what-it-means-for-data/https://seratus.me/blog/competition-authority-2026-agenda-what-it-means-for-data/Sat, 17 Oct 2026 00:00:00 GMTThe Turkish Competition Authority's 2026 announcements on tenders, sector investigations, a sector inquiry and AI services, and what they mean for your data. https://seratus.me/blog/competition-law-compliance-competitively-sensitive-information/https://seratus.me/blog/competition-law-compliance-competitively-sensitive-information/Fri, 16 Oct 2026 00:00:00 GMTA concrete definition of competitively sensitive information, where prices, bids, costs and customer terms pile up, and how data controls reduce exchange risk. https://seratus.me/blog/file-servers-and-mail-archives/https://seratus.me/blog/file-servers-and-mail-archives/Thu, 15 Oct 2026 00:00:00 GMTHow old payroll, HR and customer data piles up on SMB/NFS shares, local disks and PST/OST/MSG archives, and how to handle unreadable permissions and quarantine. https://seratus.me/blog/personal-data-in-databases-oracle-sql-server-postgresql/https://seratus.me/blog/personal-data-in-databases-oracle-sql-server-postgresql/Wed, 14 Oct 2026 00:00:00 GMTColumn-level sampling, unmasked TCKN and IBAN columns, the role-to-table permission graph, and why not found in the sample is never a risk decision. https://seratus.me/blog/oversharing-in-microsoft-365/https://seratus.me/blog/oversharing-in-microsoft-365/Tue, 13 Oct 2026 00:00:00 GMTHow anonymous and organization-wide links accumulate in SharePoint, OneDrive and Teams, and how read-only Graph access and delta scanning measure oversharing. https://seratus.me/blog/who-can-reach-what-access-and-exposure/https://seratus.me/blog/who-can-reach-what-access-and-exposure/Mon, 12 Oct 2026 00:00:00 GMTHow to read ACLs, sharing links and database roles, and how departed users, unresolvable SIDs and cyclic groups quietly break least privilege. https://seratus.me/blog/special-category-data-and-biometrics-where-it-piles-up/https://seratus.me/blog/special-category-data-and-biometrics-where-it-piles-up/Sun, 11 Oct 2026 00:00:00 GMTWhere health reports, ICD codes and biometric records pile up, and how to find the special category data overshared gap after the 2026/921 decision. https://seratus.me/blog/anonymization-vs-masking-vs-pseudonymization/https://seratus.me/blog/anonymization-vs-masking-vs-pseudonymization/Sat, 10 Oct 2026 00:00:00 GMTWhen to use each method, which one takes data out of scope as personal data, how to measure quality, and the mistakes that recur in organizations; with a table. https://seratus.me/blog/why-anonymization-matters/https://seratus.me/blog/why-anonymization-matters/Fri, 09 Oct 2026 00:00:00 GMTWhy personal data past its retention period should be anonymized, how irreversibility is measured with uniqueness checks and why the original must be destroyed. https://seratus.me/blog/data-subject-requests-the-clock-and-the-evidence/https://seratus.me/blog/data-subject-requests-the-clock-and-the-evidence/Thu, 08 Oct 2026 00:00:00 GMTHow data subject requests (DSAR) run under KVKK, why the statutory deadline is missed, how to find a person's data across sources and how to evidence the reply. https://seratus.me/blog/building-the-verbis-inventory-from-real-discovery/https://seratus.me/blog/building-the-verbis-inventory-from-real-discovery/Wed, 07 Oct 2026 00:00:00 GMTWhy questionnaire-based VERBİS inventories decay, how a discovery-based inventory is built, and how to map findings to category, purpose and retention. https://seratus.me/blog/corporate-email-monitoring-what-the-2026-decision-changes/https://seratus.me/blog/corporate-email-monitoring-what-the-2026-decision-changes/Tue, 06 Oct 2026 00:00:00 GMTPrinciple Decision 2026/2035 of 16 September 2026: technical versus legal access, proportionality, limits on content review and what it means for mail archives. https://seratus.me/blog/kvkk-2026-recent-developments/https://seratus.me/blog/kvkk-2026-recent-developments/Mon, 05 Oct 2026 00:00:00 GMTTürkiye's 2026 KVKK principle decisions, announcements, webinar and guides, and their concrete effect on data discovery, access control and retention work. https://seratus.me/blog/kvkk-operational-duties-of-a-data-controller/https://seratus.me/blog/kvkk-operational-duties-of-a-data-controller/Sun, 04 Oct 2026 00:00:00 GMTInventory, privacy notices, retention and disposal, data subject requests, breach notification and VERBİS: KVKK duties in plain operational language. https://seratus.me/blog/what-agentless-scanning-means/https://seratus.me/blog/what-agentless-scanning-means/Sat, 03 Oct 2026 00:00:00 GMTHow agentless data scanning works, how it connects to each source type, how an interrupted scan resumes, how it compares with agents, and where its limits are. https://seratus.me/blog/why-data-discovery-comes-first/https://seratus.me/blog/why-data-discovery-comes-first/Fri, 02 Oct 2026 00:00:00 GMTWhy a survey-based inventory decays, why DLP, policy and disposal fail without discovery, and what outputs a sound data discovery exercise must produce. https://seratus.me/blog/why-data-is-your-most-valuable-and-riskiest-asset/https://seratus.me/blog/why-data-is-your-most-valuable-and-riskiest-asset/Thu, 01 Oct 2026 00:00:00 GMTPersonal data, special-category data, trade secrets and competitively sensitive information belong under one roof: where they pile up and why they go invisible. https://seratus.me/blog/what-is-seratus/https://seratus.me/blog/what-is-seratus/Wed, 30 Sep 2026 00:00:00 GMTA product walkthrough of Seratus: the Define, Scan, Review, Remediate, Prove flow, who it is built for, and why it runs on-premises without agents.