A Turkish SaaS Provider Locks Your Company Out: Restoring Access and Recovering Data

Quick summary
| Question | Assessment |
|---|---|
| Focus | A Turkish SaaS Provider Locks Your Company Out: Restoring Access and Recovering Data |
| Legal starting point | TCO Articles 97–98, 112 and 117–125 |
| Key record | Subscription terms in force at suspension |
| First action | Send a reasoned access and preservation request, propose a secure export channel and assess urgent relief against the correct provider. |
The issue and the legal distinction
A subscription may permit suspension for overdue invoices, security threats or prohibited use, but the precise trigger matters. A disputed ancillary charge is different from a genuine threat to the service.
Have a general question about this article? Ask anonymously
Identify which legal entity contracted, who owns the data, and whether access is required to meet statutory record duties. Service credits do not necessarily answer a separate refusal to export customer records.
What changes the assessment
Ask for a read-only export, preservation confirmation and identification of the alleged breach. A court request to restore service should explain urgency, contractual entitlement and practical feasibility.
It cannot require unlawful processing or ignore legitimate security restrictions. Keep copies of support tickets, login errors and billing history before a provider overwrites its retention logs.
Legal framework
Provisions to examine: TCO Articles 97–98, 112 and 117–125.
Separate the right to access a service, the right to receive data and intellectual-property rights in the underlying system. They can belong to different entities and be governed by different documents. TCO Article 112 supplies a general contractual breach framework where applicable, while the particular service and mandatory rules may alter the analysis.
Preserve native logs and the contract version rather than relying only on a current website. Technical intervention should protect continuity and evidence together. A payment disagreement does not itself answer the scope of a suspension, deletion or retention power.
Evidence to preserve
- Subscription terms in force at suspension.
- Billing and dispute history.
- Access-error timestamps.
- Data export and retention commitments.
Keep the original documents, identify their source and record when they were received. Preserve the version effective when the promise was made. Where a document is held by the opponent, request lawful preservation and consider the appropriate procedural route rather than trying to obtain it through unauthorised access.
A hypothetical example
Suppose a provider suspends a CRM over an invoice already disputed in writing. The customer can request the clause relied on and a secure data export while payment entitlement is assessed.
If the suspension instead follows a documented compromise threatening other users, immediate restoration may not be appropriate. The distinction changes both the requested interim measure and what interruption losses can fairly be attributed to the provider.
This illustration explains the distinction; it is not a reported case or a prediction of an outcome.
Practical next steps
Send a reasoned access and preservation request, propose a secure export channel and assess urgent relief against the correct provider.
Build the first notice around the particular evidence: subscription terms in force at suspension, the relevant date, the alleged failure and the requested response. Keep proof of delivery. A preservation request, a demand for performance and a final election of remedies can have different consequences; choose them with the contract and deadlines in view.
Remedies and financial loss
Separate prepaid unused service, emergency migration costs and proven interruption loss. Account for alternative causes and avoid claiming the same downtime twice.
Procedure for a client outside Turkey
Nationality alone does not decide governing law or forum. Review the parties, place of performance, contractual choice, any arbitration provision and applicable mandatory rules. Consumer and employment matters can require protected-forum analysis. Turkish proceedings may also require a mediation step or security analysis depending on the dispute; neither should be assumed applicable to every case.
For a Turkish civil case, counsel can consider whether evidence preservation under HMK Articles 400 onward or interim relief under Articles 389 onward is justified. These are different measures with specific conditions, possible security and follow-up duties. A general fear of nonpayment does not establish entitlement to every injunction. Calculate the actual notice and filing calendar before waiting for a voluntary reply.
Primary legislation and official sources
- Turkish Code of Obligations No. 6098
- Code of Civil Procedure No. 6100
- International Private and Procedural Law No. 5718
Apply the wording and amendments effective for the relevant transaction and procedural step. A historical enactment text does not by itself establish the current rule.
Frequently asked questions
Does a subscription dispute allow the provider to delete all data?
Deletion authority, notice and retention obligations need separate review. A power to suspend access is not automatically a power to erase every record.
What is the main legal distinction?
A subscription may permit suspension for overdue invoices, security threats or prohibited use, but the precise trigger matters. A disputed ancillary charge is different from a genuine threat to the service.
Which fact can change the legal assessment?
Ask for a read-only export, preservation confirmation and identification of the alleged breach. A court request to restore service should explain urgency, contractual entitlement and practical feasibility.
Which documents should I preserve?
subscription terms in force at suspension, billing and dispute history, access-error timestamps, data export and retention commitments. Preserve the original versions and the dates on which they were received.
What should I do first?
Send a reasoned access and preservation request, propose a secure export channel and assess urgent relief against the correct provider.
How should the claimed loss be calculated?
Separate prepaid unused service, emergency migration costs and proven interruption loss. Account for alternative causes and avoid claiming the same downtime twice.
Which legal provisions should be examined?
TCO Articles 97–98, 112 and 117–125. Governing law, transaction classification and mandatory rules determine their application.
How could this issue arise in practice?
Suppose a provider suspends a CRM over an invoice already disputed in writing. The customer can request the clause relied on and a secure data export while payment entitlement is assessed. This is a hypothetical illustration, not a reported case.
Does sending a complaint stop every deadline?
No. Contract notice, limitation, appeal and procedural periods can differ. A lawyer should calculate the dates from the actual contract and service records; informal negotiation does not automatically preserve every right.
When should a technical or accounting expert be involved?
Use an appropriately qualified expert where the disputed fact requires specialist analysis. Define the question using billing and dispute history and access-error timestamps; preserve the original material before corrective work.
Can this matter be assessed while I am abroad?
An initial assessment can start with the contract, chronology and the records listed above. Formal representation, any personal attendance and inspection requirements depend on the case.
What should a settlement specify?
Identify the parties, covered claims, payment, remaining performance and any release. Account for third-party recoveries and do not assume a partial payment settles every related obligation.
Istanbul Office – Polaris Plaza, Maslak / Sarıyer
Bakırcı & Keskin Hukuk Bürosu
Maslak Ahi Evran Caddesi, Polaris Plaza No:21, Kat:9, 34475 Sarıyer/İstanbul
Our physical offices in Istanbul and Mersin coordinate matters throughout Turkey, subject to jurisdiction and the local steps required for each case. Please specify your preferred office when arranging an in-person appointment.
Open the Istanbul office on Google Maps · Contact and appointments
Contact regarding a legal matter
In your first message, you may briefly state the subject, your country or city, and any relevant notification or recent procedural date. Please do not send identity numbers, medical data, or personal documents. Messaging alone does not constitute legal advice or create a lawyer–client relationship.
Discover more from Bakırcı & Keskin Hukuk Bürosu
Subscribe to get the latest posts sent to your email.
