Security and deployment
Built to be audited.
An internal control tool can't be set up more loosely than the things it controls.
The application and its SQL Server database run on your servers. No outbound connection is required.
Sign in with Microsoft Entra ID; no separate passwords to hand out. Break-glass access stays with the administrator.
Specialists propose, managers approve. Permissions are enforced per page and per action; a hidden button doesn't count as access control.
Who can access what is reviewed periodically, and every decision is recorded.
The log is append-only: who changed which field, when, from what to what.
Off by default. While off, no text leaves your network; when on, it works with your organisation's own AI tool.
Inside the product
Who can access what, who changed what. Both on screen.
| Kişi | Rol (başlangıçta) | Son giriş | Karar | Açıklama · uygulama |
|---|---|---|---|---|
| E. Aydın | İç kontrol uzmanı | 2 gün | Devam | — |
| K. Demir | Yönetici | 94 gün | Kaldır | Uygulandı — rol değişti ya da hesap pasif |
| S. Yıldız | Denetçi | bugün | Devam | — |
| T. Aydın | İç kontrol uzmanı | 31 gün | Karar yok | Her satıra Devam ya da Kaldır |
| Zaman | Kullanıcı | İşlem | Ayrıntı |
|---|---|---|---|
| 20.10 11:40 | M. Kaya | Aksiyon durumu | AKS-2026-014 · Doğrulama Bekliyor → Kapalı |
| 20.10 09:15 | E. Aydın | Aksiyon durumu | AKS-2026-014 · Açık → Doğrulama Bekliyor |
| 19.10 16:02 | E. Aydın | Kontrol güncellendi | BKM-PLB-015 · Ne Sıklıkla: Aylık → Sürekli |
| 19.10 10:21 | Yönetici | Hesap | K. Demir · pasife alındı |
| 18.10 14:48 | S. Yıldız | Rapor | 2026_DN_0003 · sürüm 2 onaylandı |
Shown with sample data. Interface language: Turkish.
For your IT team
What comes up in the setup meeting, in one table.
| Where it runs | Your own servers; application and database inside your organisation |
|---|---|
| Database | Microsoft SQL Server |
| Identity | Company account via Microsoft Entra ID; break-glass access with the administrator only |
| Outbound connection | Not required |
| Permission model | Permission-based; enforced on the server, per page and per action |
| Activity log | Append-only; old and new value per field |
| Email notifications | Through your organisation's internal mail relay |
| AI | Off by default; when on, with your organisation's own AI tool |
Deployment
First inventory ready in the first week.
- 01 · InfrastructureInstalled on your serverThe application and SQL Server database come up in your own environment.
- 02 · Sign-inCompany accountYour IT team registers the Entra ID application; the team signs in with company accounts.
- 03 · DataYour current listsYour columns are mapped at setup. The first output is a list of where your data is broken today.
- 04 · TeamRoles and permissionsWho proposes, who approves; access is on record from day one.
If you need a different screen or report layout, you tell us and the team that builds the product sets it up. No integrator in between.