Frequently asked questions

Any legal entity that provides internet access — cafés, hotels, hospitals, universities, offices, factories. If you offer Wi-Fi or wired internet to guests or employees, you are an 'access provider' under 5651 and must keep logs.

BTK can issue administrative fines of ₺10,000–₺100,000 per violation. In serious cases, the legal representative may face criminal liability. Logs may also be requested by courts in civil and criminal proceedings.

Access records are made tamper-evident with a SHA-256 hash chain, the daily root is signed with an RFC 3161 TSA, and an audit produces a signed, independently verifiable evidence pack.

Native adds TSA timestamping and 730-day retention. Premium adds inline capture (HTTP Host, TLS SNI, DNS without MitM) and up to 3,650-day retention.

Encrypted storage (LUKS + TLS 1.3), configurable retention with automated deletion (Art. 7), role-based access control, tamper-evident audit trails, data residency in Türkiye, and export/deletion APIs for data-subject requests (Art. 11).

Yes. Anchor products map to key Annex A controls: A.8.5 (authentication), A.8.22 (network segmentation), A.8.15 (logging), A.8.8 (vulnerability management), A.5.15 (access control) and A.8.10 (data deletion).

SMS OTP, WhatsApp, social login (Google / Microsoft via OIDC), e-mail verification, voucher/ticket codes, sponsor approval and SAML 2.0 SSO. You can assign different methods per SSID or venue.

An optional feature that ties each guest session to a Turkish national ID number, meeting the identity-verification requirements of Law 5651.

Yes. Cisco Catalyst, Aruba CX, FortiGate, MikroTik and Huawei VRP are certified; you can start without replacing your hardware.

No. Cloud-managed, edge appliance, or fully on-premises (air-gapped) options are available. Sovereign and AnchorLog run entirely on-premises.

The AnchorNAC edge keeps RADIUS authentication running locally for up to 4 hours; on-premises deployments provide full continuity.

The posture module checks disk encryption (BitLocker, LUKS, FileVault) and patch state on Windows, Linux and macOS. Non-compliant devices can be quarantined and auto-remediated via signed scripts.

In the cloud option, in the Türkiye/EU region; with on-prem and Sovereign, entirely on your own infrastructure. KVKK-compliant deletion and audit trail are supported.

In Türkiye, the SiperOne team provides deployment, integration and technical support.

AnchorLog goes beyond log collection: it includes a built-in captive portal for guest Wi‑Fi, plus hash chaining and RFC 3161 TSA for legally defensible, independently verifiable evidence.

AnchorSpot can be up and running in as little as 5 minutes using your existing MikroTik device. AnchorNAC basic deployment — including Edge appliance setup, first policy and test authentication — typically takes 1–2 hours. A full enterprise rollout across multiple sites and VLANs usually takes 1–2 weeks depending on network size and the number of switch vendors involved.

No. Anchor products are designed to work with your current network infrastructure. Cisco Catalyst, Aruba CX, FortiGate, MikroTik and Huawei VRP are all certified and managed from one console. You can start immediately without purchasing new switches or access points.

The Edge appliance is a fanless Intel N100-based mini-PC with 16 GB RAM, 1 TB NVMe SSD and two Gigabit Ethernet ports. It runs a hardened Linux image and provides local RADIUS authentication, captive portal hosting and log collection. If the internet connection drops, the Edge continues to authenticate devices locally for up to 4 hours.

Yes. The SiperOne console supports multi-site management out of the box. Each site can have its own policies, captive-portal branding and VLAN configuration, while you maintain a single overview dashboard. Per-site policies allow you to tailor access rules to each branch without duplicating effort.

AnchorNAC supports EAP-TLS for certificate-only authentication, EAP-TEAP for combined certificate-and-password scenarios, and PEAP for password-based enterprise Wi-Fi. For headless devices such as printers, IP phones and IoT sensors, MAC Authentication Bypass (MAB) is available to allow network access without a supplicant.

AnchorNAC includes a built-in PKI with SCEP enrolment. iOS devices receive certificates via an MDM profile, Android devices can onboard using DPP QR codes, and macOS devices are provisioned through configuration profiles. Once enrolled, the device authenticates automatically via 802.1X EAP-TLS without the user needing to enter credentials again.

AnchorLog adds several capabilities that FortiLogger does not provide: a SHA-256 hash chain that makes every log batch tamper-evident, RFC 3161 TSA timestamps from a qualified trust-service provider for legal proof of integrity, and a built-in captive portal for guest Wi-Fi with session analytics. Together, these features turn simple log collection into legally defensible evidence.

Yes. AnchorLog supports syslog forwarding in RFC 5424 format over UDP, TCP and TLS, so you can stream logs to any SIEM that accepts standard syslog input. A REST API is also available for programmatic log queries and exports, allowing integration with platforms like Elasticsearch, Splunk or Grafana.

The cloud-managed SiperOne console offers a 99.9% uptime SLA. If the cloud connection is lost, the Edge appliance continues to provide local RADIUS authentication, captive portal and log collection for up to 4 hours using cached policies. On-premises Sovereign deployments have no cloud dependency and run with full continuity at all times.

We accept credit card payments processed securely through iyzico and PayTR, as well as bank transfer and EFT. All packages are billed annually. Invoicing for customers in Türkiye is issued in TRY with VAT added at the applicable legal rate.