B&KBakırcı & Keskin
EN
TürkçeEnglishDeutschРусскийالعربية中文Français
Menu

A Turkish SaaS Provider Locks Your Company Out: Restoring Access and Recovering Data

Illustrative lawyer’s desk with a plain law book, contract papers and balance
AI-generated editorial illustration; not a photograph of a client matter or the firm’s offices.

Quick summary

QuestionAssessment
FocusA Turkish SaaS Provider Locks Your Company Out: Restoring Access and Recovering Data
Legal starting pointTCO Articles 97–98, 112 and 117–125
Key recordSubscription terms in force at suspension
First actionSend a reasoned access and preservation request, propose a secure export channel and assess urgent relief against the correct provider.

A subscription may permit suspension for overdue invoices, security threats or prohibited use, but the precise trigger matters. A disputed ancillary charge is different from a genuine threat to the service.

Identify which legal entity contracted, who owns the data, and whether access is required to meet statutory record duties. Service credits do not necessarily answer a separate refusal to export customer records.

What changes the assessment

Ask for a read-only export, preservation confirmation and identification of the alleged breach. A court request to restore service should explain urgency, contractual entitlement and practical feasibility.

It cannot require unlawful processing or ignore legitimate security restrictions. Keep copies of support tickets, login errors and billing history before a provider overwrites its retention logs.

Provisions to examine: TCO Articles 97–98, 112 and 117–125.

Separate the right to access a service, the right to receive data and intellectual-property rights in the underlying system. They can belong to different entities and be governed by different documents. TCO Article 112 supplies a general contractual breach framework where applicable, while the particular service and mandatory rules may alter the analysis.

Preserve native logs and the contract version rather than relying only on a current website. Technical intervention should protect continuity and evidence together. A payment disagreement does not itself answer the scope of a suspension, deletion or retention power.

Evidence to preserve

  1. Subscription terms in force at suspension.
  2. Billing and dispute history.
  3. Access-error timestamps.
  4. Data export and retention commitments.

Keep the original documents, identify their source and record when they were received. Preserve the version effective when the promise was made. Where a document is held by the opponent, request lawful preservation and consider the appropriate procedural route rather than trying to obtain it through unauthorised access.

A hypothetical example

Suppose a provider suspends a CRM over an invoice already disputed in writing. The customer can request the clause relied on and a secure data export while payment entitlement is assessed.

If the suspension instead follows a documented compromise threatening other users, immediate restoration may not be appropriate. The distinction changes both the requested interim measure and what interruption losses can fairly be attributed to the provider.

This illustration explains the distinction; it is not a reported case or a prediction of an outcome.

Practical next steps

Send a reasoned access and preservation request, propose a secure export channel and assess urgent relief against the correct provider.

Build the first notice around the particular evidence: subscription terms in force at suspension, the relevant date, the alleged failure and the requested response. Keep proof of delivery. A preservation request, a demand for performance and a final election of remedies can have different consequences; choose them with the contract and deadlines in view.

Remedies and financial loss

Separate prepaid unused service, emergency migration costs and proven interruption loss. Account for alternative causes and avoid claiming the same downtime twice.

Procedure for a client outside Turkey

Nationality alone does not decide governing law or forum. Review the parties, place of performance, contractual choice, any arbitration provision and applicable mandatory rules. Consumer and employment matters can require protected-forum analysis. Turkish proceedings may also require a mediation step or security analysis depending on the dispute; neither should be assumed applicable to every case.

For a Turkish civil case, counsel can consider whether evidence preservation under HMK Articles 400 onward or interim relief under Articles 389 onward is justified. These are different measures with specific conditions, possible security and follow-up duties. A general fear of nonpayment does not establish entitlement to every injunction. Calculate the actual notice and filing calendar before waiting for a voluntary reply.

Primary legislation and official sources

Apply the wording and amendments effective for the relevant transaction and procedural step. A historical enactment text does not by itself establish the current rule.

Frequently asked questions

Does a subscription dispute allow the provider to delete all data?

Deletion authority, notice and retention obligations need separate review. A power to suspend access is not automatically a power to erase every record.

A subscription may permit suspension for overdue invoices, security threats or prohibited use, but the precise trigger matters. A disputed ancillary charge is different from a genuine threat to the service.

Ask for a read-only export, preservation confirmation and identification of the alleged breach. A court request to restore service should explain urgency, contractual entitlement and practical feasibility.

Which documents should I preserve?

subscription terms in force at suspension, billing and dispute history, access-error timestamps, data export and retention commitments. Preserve the original versions and the dates on which they were received.

What should I do first?

Send a reasoned access and preservation request, propose a secure export channel and assess urgent relief against the correct provider.

How should the claimed loss be calculated?

Separate prepaid unused service, emergency migration costs and proven interruption loss. Account for alternative causes and avoid claiming the same downtime twice.

TCO Articles 97–98, 112 and 117–125. Governing law, transaction classification and mandatory rules determine their application.

How could this issue arise in practice?

Suppose a provider suspends a CRM over an invoice already disputed in writing. The customer can request the clause relied on and a secure data export while payment entitlement is assessed. This is a hypothetical illustration, not a reported case.

Does sending a complaint stop every deadline?

No. Contract notice, limitation, appeal and procedural periods can differ. A lawyer should calculate the dates from the actual contract and service records; informal negotiation does not automatically preserve every right.

When should a technical or accounting expert be involved?

Use an appropriately qualified expert where the disputed fact requires specialist analysis. Define the question using billing and dispute history and access-error timestamps; preserve the original material before corrective work.

Can this matter be assessed while I am abroad?

An initial assessment can start with the contract, chronology and the records listed above. Formal representation, any personal attendance and inspection requirements depend on the case.

What should a settlement specify?

Identify the parties, covered claims, payment, remaining performance and any release. Account for third-party recoveries and do not assume a partial payment settles every related obligation.

Istanbul Office – Polaris Plaza, Maslak / Sarıyer

Bakırcı & Keskin Hukuk Bürosu

Maslak Ahi Evran Caddesi, Polaris Plaza No:21, Kat:9, 34475 Sarıyer/İstanbul

Our physical offices in Istanbul and Mersin coordinate matters throughout Turkey, subject to jurisdiction and the local steps required for each case. Please specify your preferred office when arranging an in-person appointment.

Open the Istanbul office on Google Maps · Contact and appointments

Contact regarding a legal matter

In your first message, you may briefly state the subject, your country or city, and any relevant notification or recent procedural date. Please do not send identity numbers, medical data, or personal documents. Messaging alone does not constitute legal advice or create a lawyer–client relationship.

CallContact information

Discover more from Bakırcı & Keskin Hukuk Bürosu

Subscribe to get the latest posts sent to your email.

tarafından hazırlanmış, Av. Emirhan Keskin tarafından incelenmiştir.

About the Author

is registered with the Mersin Bar Association (No. 3472). He provides legal advice and representation in criminal, family, employment, property and commercial matters at Bakırcı & Keskin Law Office.

Reviewed by: Av. Emirhan Keskin · Mersin Bar Association No: 5507

    ISTANBUL · MERSIN · ONLINE

    Request a legal consultation

    Briefly describe your matter and choose an office or an online meeting, if you have a preference.

    Fields marked * are required.




    Message length0 / 1000

    Characters remaining: 1000Spaces are included.You’re approaching the limit.You’ve reached the 1,000-character limit.

    Please do not include identity numbers, banking details or sensitive documents. Privacy notice (Turkish)

    An initial enquiry does not establish an attorney–client relationship or suspend legal deadlines. Please call us for urgent matters.

    Ask a Question About This Article

    Real questions may be published anonymously after review. Do not share names, contact details, ID or case numbers, or personal information. This is not legal advice.

    Privacy policy

    Telefon WhatsApp