Built around Turkish personal data
Compliance Manager for Microsoft 365 is a clean-up tool built around Turkish personal data. It comes with ready-made rules for the Turkish national ID (TCKN) and Turkish IBAN, validated by checksum, alongside card numbers, Turkish phone numbers, email addresses and passport numbers.
It finds them in mailboxes, OneDrive files and Teams one-to-one chats, for employees who have opted in. It is switched on rule by rule, with no regex skills needed, and it lets your team review and delete within limits you set, with each step recorded in a tamper-evident audit log.
Unlike writing and maintaining your own patterns or scripts, you switch rules on and test them on sample text before you scan.
| Rule | How it matches |
|---|---|
| Turkish national ID (TCKN) | Checksum validated, so a random 11-digit number is not flagged |
| Turkish IBAN | Checksum validated |
| IBAN from any country | Checksum validated |
| Payment card number | Checksum validated |
| Turkish phone number | Pattern only |
| Email address | Pattern only |
| Passport number | Pattern only, marked “approximate” in the product |
All rules are off until someone switches them on, and they are set per agent. You can add your own keywords and patterns next to them.
Keep only what you need
The legal framing is short, and it is a list of headings, not advice:
- Law 6698, Art. 4: how long data is kept.
- Law 6698, Art. 7: deleting, destroying or anonymising it.
- The Regulation on deletion, destruction and anonymisation: the retention and destruction policy, periodic destruction, and records.
The question is not whether you have a policy. It is whether you can apply it to the mail, files and chats where the data actually sits.
In 2026 the KVKK Board published a principle decision on how employers may access corporate email and other work communication channels. Before scanning employee mailboxes, check with your legal advisers how this fits your employee notices and policies. Our before-you-scan checklist sets out what your organisation should have in place.
Four reasons it works
- Find it. Ready-made rules for TCKN, IBAN and card numbers, checked by checksum. No regex skills needed.
- Clean up under control. Safe Scan deletes nothing, deletion stays off until an administrator enables it, and a hard limit stops oversized runs.
- Show what you did. Every administrative action goes into a tamper-evident audit log.
- Your data stays in your Azure. Scan results, logs and configuration stay in your own Azure storage.
Key capabilities
- Seven ready-made detection rules, switched on rule by rule
- Test the rules on sample text before you scan
- Externally shared OneDrive files flagged next to the findings
- Review before you delete, within a limit that has no override button
- OneDrive files backed up to your own Azure storage before deletion
- Verify integrity, CSV export, and Admin, Security Manager and Reporter roles
See how it works for the three scan modes, or the FAQ for the questions compliance teams ask first.
Built for
Banking · Insurance · Holding groups · Healthcare · Retail
How to buy
On Azure Marketplace, as either Compliance Manager Suite or Pay-per-Agent. Per seat, billed by Microsoft through your Azure billing account; Azure resources are billed separately by Microsoft. It deploys in about 10 minutes, followed by a one-time Global Administrator setup step. How the model works.