4 SIMPLE
TR / EN Request a Demo
Services Products Our Approach Blog Request a Demo

Home Data Security

Data Security

Where your data sits when you use our products, who is responsible, and how we work. Not sales language — how it actually runs.

Last updated: 1 November 2026

Who is responsible for which data

The data entered into our products when you use them is your data. Under KVKK you are the data controller for it; 4SIMPLE acts as a data processor, processing the data only on your instructions and in order to provide the service. That distinction means it is you, not us, who decides what the data is used for.

The rights and obligations between the parties are set out in writing in a data processing agreement (DPA). We share our data processing agreement at the contracting stage: info@4simple.com.tr

Where OneGate runs

You can run OneGate in one of three deployment models, and that choice determines where your data sits:

  • On your own server (on-premise): the application and the database run on your infrastructure. Data does not leave your organisation; backups, access management and physical security are under your control. 4SIMPLE connects only through support access that you open and whose scope you define.
  • In our cloud: we host the application on infrastructure we operate. In this model the data location, backup frequency and retention period are written explicitly into the contract.
  • In your own cloud account: the application runs in your cloud account (AWS, Azure and so on) and we operate it. The infrastructure contract and the data location stay with you; we provide the operations service only.

We decide together which model suits you, and moving between models is possible.

Isolation of company data

In a cloud deployment each customer's data is kept isolated from every other. Permissions are defined separately at company, warehouse and user-role level, and every query is scoped to the company identity. Our support team's access is likewise limited to your request and is logged.

Lumen AI and your data

Lumen AI works on your operational data, so we answer the most common question directly: Lumen AI does not send your data to third-party artificial intelligence services. Your data is not used for model training and does not affect other customers' results.

Backup and continuity

In a cloud deployment, regular backups are taken; their frequency, how far back they are kept and the restore targets are written as an annex to the contract. In an on-premise deployment backup is your responsibility; if you ask, we will help you set the backup routine up.

When the contract ends

When the service relationship ends we hand your data back to you in a machine-readable format, then delete it from our own systems within the period set in the contract. We confirm in writing that the deletion is complete.

Plainly put

This page presents no certificate and no audit result; we would rather not display a document we do not hold. What we describe here is how we deploy our products and how we work with your data. If you want to see which of these are contractually committed, ask for our data processing agreement and technical annexes — our technical team answers questions directly.

Request a demo or write to info@4simple.com.tr.