Your firewall and e-mail logsSigned with HMAC-SHA256is stored. When the court requests, it can be downloaded with a single click, along with the chain of evidence. KVKK compliant, Turkish interface.
Law No. 5651 regulates the control of internet communication traffic in Turkey. In effect since 2007, it requires log retention.
"Regulation of Publications Made on the Internet No. 5651 and the Law on Combating Crimes Committed Through These Publications"
article 6/A:"Traffic information is stored for at least 6 months and at most 2 years. To ensure the accuracy and integrity of the content "It is recorded and necessary security measures are taken."
Institutions that do not comply with BTK inspections10,000 TL - 100,000 TLAn administrative fine is imposed between 2024 and 2024. Again, the punishment doubles. Also in court proceedings lack of logslack of evidencecan create.
No need to worry about manual CSV export, file copying or cron writing. The whole process is automated in the background.
Introduce a firewall (FortiGate/MikroTik/Sophos) or mail server (Plesk/Postfix).
On the devices page ⚖️ 5651 Click the button. So.
Background worker runs once an hour. It collects all logs for that hour and converts them to CSV format. Tab-separated, RFC compliant format — can be opened with Excel/Notepad.
Each bundle file is signed with the product key. If you change the file by 1 byte, the signature will be invalid — The court can check this.
Which bundle was produced when, who downloaded it when — all forensic_bundles
andaudit_log in his paintings. When the court asks "who accessed it?" Answer to the question.
Go to the 5651 Logs page from the panel, select a date range, click "Download". With printed signature ready in the same minute. Integrity check can be done with the "Verify" button.
OxiSec archives two main types of signed logs. A third one is nearby if you need it.
A record of every traffic request to/from the Internet. ISPs and Mandatory for bulk internet providers.
e-mail traffic on Plesk/Postfix servers. Also within the scope of KVKK important — considered personal data.
Apache/Nginx access logs for web hosting customers will also be archived with signatures. 5651 section 5 coverage for content providers.Q3 2026.
Tab-separated format, one record per line. It can be opened in Excel and Notepad.
It is generated with every bundle file. Keep the hash, then verify integrity.
{
"bundle_id": 12345,
"file": "2026-05-11_14-00_mail.txt",
"size_kb": 47,
"line_count": 1847,
"hash_sha256":
"a8f3c9d2e7b4f1a9...",
"hmac_signature":
"sha256=2c4d8e6f...",
"signed_at":
"2026-05-11T14:00:03Z",
"algorithm":
"HMAC-SHA256"
}
Court:"Has this file been modified?"
Reply:"Verify" → ✓ Integrity preserved