Industries
Real Estate Valuation
We know the IT, information security and compliance needs of valuation companies from the inside, and build infrastructure that is audit-ready and fast in the field.
We know the valuation industry from the inside
Valuation companies in Turkey operate under a licence from the Capital Markets Board (CMB, known locally as SPK) and have to meet regulatory expectations on the information systems side. At the same time, a network of appraisers spread across the country produces reports from the field, the archive grows every day, and the same details are keyed into more than one portal by hand.
We know the IT side of this structure closely: which questions come up in an audit, what the appraiser needs in the field and where the reporting process gets stuck. We shape our solutions with that experience.
We provide IT management, information security and compliance consultancy on the Capital Markets Board (CMB) information systems communiqué for real estate valuation companies and CMB-licensed appraisal firms in Turkey.
Scope
Solutions built for valuation companies
RPA and process automation
We hand portal entry, report numbering and repeating checks to software robots, so appraisers and specialists spend their time on the report itself.
Regulatory and data protection compliance
Together with the law firm, we reflect regulatory expectations and the requirements of Turkish data protection law (KVKK) in your IT processes.
Secure working for field appraisers
Across a dispersed appraiser network we provide multi-factor authentication, device security and secure access to files.
Report and document archive
We store hundreds of thousands of reports, photographs and attachments in a permissioned, backed-up and searchable way.
Valuation software and integrations
We keep the server, email and e-signature integrations of report production software running without interruption.
Process automation
We use RPA to automate repetitive work such as request entry, report distribution and data entry into bank portals.
Regulation
Compliance with the CMB Information Systems Communiqué (VII-128.10)
The Capital Markets Board’s Communiqué on the Principles and Procedures for Information Systems Management (VII-128.10), published in the Official Gazette on 13 March 2025, replaced the earlier Communiqué VII-128.9. It expects the institutions in its scope to manage their information systems in a controlled and demonstrable way, from governance to daily operations. We map its headings to our services as follows:
Senior management oversight and policies
We establish the information security policy, roles and responsibilities, and regular reporting to management.
Asset inventory and risk management
We prepare the asset inventory, the risk assessment and the risk treatment plan, and keep them up to date.
Identity, permissions and audit trails
We provide the permission matrix, multi-factor authentication, privileged account control and the logging of critical operations.
Outsourcing and supplier management
For cloud, software and support suppliers, we put the risk assessment, contract clauses and access controls in order.
Incident management and business continuity
We set up the incident response process, backup and restore tests and the business continuity plan, and keep the test records.
Penetration testing and readiness for independent audit
We coordinate penetration tests with independent teams and prepare the evidence file for audits under the Communiqué on Independent Audit of Information Systems (III-62.2).
Which provisions of the Communiqué apply to your institution, and to what extent, depends on the type of institution, the exemption and transitional provisions and current CMB resolutions. We carry out the scope analysis together as the first step. This section is for information only and does not constitute legal advice; the CMB’s official legislation system should be taken as the authoritative text.
Artificial intelligence
Using AI the right way in this industry
In a valuation report, the signature and the responsibility belong to the appraiser. We use AI where it adds speed and quality, without changing that fact.
Where AI helps
- Checking language, format and internal consistency in draft reports
- Summarising comparable, zoning and market data, provided the source is verified
- Classifying bank requests and speeding up job assignment
- Closed assistants that search quickly through in-house procedures and past reports
Legal responsibility and risks
- The appraised value and responsibility for the report stay with the responsible appraiser who signs and with the company; AI output does not replace expert opinion.
- Uploading client, title deed and bank data to non-enterprise tools can breach both KVKK and the confidentiality agreements signed with banks.
- If a comparable or a piece of legislation invented by AI finds its way into a report, the error becomes the company’s liability in an audit and in any dispute.
- Under the CMB information systems regulations, an AI service is also an outsourced service: risk assessment, a contract and access logs are required for these tools too.
Using AI does not remove legal responsibility: Turkish data protection law (KVKK), confidentiality duties, intellectual property and sector regulations all still apply. These points are for information only; we carry out the legal assessment together with our partner law firm. See AI Integrations for details.
How we work
A predictable process in four steps
We follow the same method on every project, so you know from the start what is being done, when and why.
01
Discovery
We review your current setup, needs and risks, on site or remotely.
02
Planning
We present a clear roadmap covering priorities, scope and timeline.
03
Implementation
We complete the transition without disrupting your work, documenting every step.
04
Ongoing management
We keep improving through monitoring, reporting and regular reviews.
Frequently asked questions
Real Estate Valuation: frequently asked questions
How do you support us in bank audits?
Before the audit we answer the question set together, close any missing controls and prepare the evidence file. During the audit we answer the technical questions.
Our appraisers use their own devices. Is that a problem?
If unmanaged, yes. On personal devices we keep corporate data in a separate, protected area, and if a device is lost we remotely wipe only the corporate data.
Can you work with our existing valuation software?
Yes. We work independently of the software vendor; we manage the server, database backup, email sending and user access.
Do you also work with small valuation firms?
Yes. We scale the scope to the number of users and to the expectations of the banks you serve.
Get a free IT and security assessment
We review your current setup and send you a short report showing the risks and priorities. We work on site and remotely, across Turkey and abroad; we respond to your request within one business day.