Compliance Overview - FlexOrch

FlexOrch helps technical teams work with documents that contain personal data, with built-in tooling for KVKK (Turkey), GDPR (EU), NIS2 (EU), and eIDAS (EU) requirements.

What FlexOrch provides

Regulation	Support
KVKK	PII detection for Turkish personal data types; audit trail; masking before dataset export
GDPR	46 EU/US PII types; Article 30 ROPA record; data minimization via masking
NIS2	Audit log export (JSON + CSV) for incident documentation
eIDAS	Electronic signature format detection (XAdES, PAdES, CAdES) in documents

Important notes

FlexOrch is a technical tool, not a legal compliance service. The outputs assist compliance workflows but do not constitute legal advice. Consult your data protection officer (DPO) for regulatory obligations.

Data handling

Uploaded documents are stored only for the retention period defined by your plan
PII is masked before dataset export by default
All pipeline executions are logged and auditable
No document content is shared with third parties