Skip to content
Free email security check: see your domain's SPF, DKIM and DMARC score in 10 seconds
Xen Bilişim
TR

Türkiye and KVKK

Google Cloud Türkiye region and KVKK

A Google Cloud region is planned for Türkiye but is not yet in service. As a result, a company using Google Cloud today processes personal data abroad. We summarize below what to watch for under KVKK.

Request a compliance assessment

Last updated:

Does Google Cloud have a data center in Türkiye?

As of 18 September 2026, there is no Google Cloud region operating in Türkiye. On 11 November 2025, Turkcell announced a strategic partnership with Google Cloud and said a Google Cloud region is planned for Türkiye. Google has not officially announced an opening date for the region.

What to do under KVKK

Storing or processing personal data in a cloud region outside Türkiye is treated under KVKK as a transfer of data abroad. Under amendments that took effect in 2024, a tiered structure was introduced for transfers abroad, covering an adequacy decision, appropriate safeguards (such as standard contracts), and exceptional cases. When a standard contract is used, it must be notified to the Personal Data Protection Authority within five business days of signing.

In practice, we recommend the following steps:

  • Document which personal data will be processed in the cloud and in which region it will be kept.
  • Assess Google's data processing terms and transfer mechanism together with your legal counsel.
  • Update your privacy notices to cover the transfer abroad.
  • Apply technical measures such as encryption, access logs, and limiting authority. Keep key management under your own control where possible.
  • Build an architecture that is not tied to a specific region, so it can migrate once the Türkiye region opens.

This page is not legal advice. We handle the technical side. For a legal assessment, we recommend working with legal counsel experienced in KVKK.

Banking and regulated sectors

Banks and institutions subject to BRSA oversight are subject to separate regulations on information systems and requirements to keep data within Türkiye. For these institutions, a cloud project starts with a sector-regulation compliance assessment.

SSS

Frequently asked questions

Can I migrate my data once the Türkiye region opens?

Yes, but how easily depends on your current architecture. A setup with infrastructure defined as code and reduced dependency on region-specific services makes migration much easier.

Does the same apply to Google Workspace?

Yes. Workspace data is also kept on Google's global infrastructure. The data regions feature in Enterprise plans lets data be kept in a specific geography, such as Europe.

Which European region should I choose?

Latency, service variety, and cost are considered together. Frankfurt, Milan, and Warsaw are the regions most often chosen from Türkiye. We make the choice together based on your workload.

Sources

The information on this page is based on the sources below. Products and regulations change, so check them too.

Related pages

Google CloudServer, database, data analytics, AI, and security services.Security and backupTwo-step verification, DLP, device management, and real backup.Security consultingSecurity assessment and hardening for Workspace and Google Cloud.Backup and disaster recoveryCentral backup and a tested disaster recovery plan.EnterpriseIdentity, compliance, data platform, and AI at enterprise scale.Google Cloud pricingPay-as-you-go, committed-use discounts, free tier, and trial credit.
Contact

Let's build your cloud project with KVKK in mind

Let's plan from day one which data will be kept where and which technical measures will be taken.

Get a quoteFree cost assessment