Turkish employment rules, namely the Labour Law and the Remote Working Regulation, say that anyone regularly working outside the office must have a written remote work contract. It should cover the job itself, working hours, who provides equipment, how costs are met and how data is kept safe. Most employers have dealt with the paperwork by now. The plumbing is another story: in plenty of firms, what was improvised in spring 2020 is still live, usually a forwarded RDP port on the edge router plus a single login that three people know. It holds until some bot sweeping IP ranges finds that port. Apply rebuilds remote access from scratch. No service listens openly on the internet, documents are kept in Microsoft 365 or on the firm's own hardware, and the day someone leaves, their access dies with a single click.
The design depends on which applications each team cannot live without. A sales force living in Outlook and quotations has very different needs from a finance team chained to Logo on a server in the back office.
You can choose a classic encrypted VPN to the LAN, or a zero-trust gateway that publishes one application at a time. Both ways, only a managed, fully updated device used by an active employee gets through; a leaked password by itself opens nothing.
With Azure Virtual Desktop or an RDS farm, Windows actually runs on remote servers; the computer at home only paints pixels. Leave the device on a seat of the high-speed train between Ankara and Istanbul and not a single file goes with it.
Logo, Mikro, Netsis, quantity surveying and progress billing tools, or a hefty Autodesk package behave smoothly over a hosted session, since only screen changes travel down the line while the data stays put. Finishing month-end from the sofa no longer means carrying the books around on a flash drive.
Microsoft Authenticator as the extra step, combined with Entra ID rules blocking logins from unexpected countries or unknown hardware. Phished credentials get an attacker nowhere without the phone in your employee's pocket.
Every laptop and handset is registered in Intune, disks are BitLocker-encrypted and a missing device can be wiped from our console. Intune also records who has been issued which piece of kit, a handy source for the equipment clause of the remote work contract. On a leaver's last day, their login, tunnel and inbox are revoked in one go.
The employer writes the rules; Apply wires them into the software. Teams notifications fall silent after hours, Outlook keeps an email written at 23:00 in the outbox until 09:00, and the PDKS attendance or shift-planning app opens with the same corporate login instead of a separate password.
Three patterns cover most firms. What matters is how confidential your information is and where your software is hosted, not how many days a week anyone spends at home.
Option 1
Corporate notebook with VPN
Employees get a company-owned device that tunnels into the LAN.
Option 2
Virtual desktop or terminal server
Software and documents never leave the server room; home users see a stream of the screen.
Option 3
Fully in Microsoft 365
Email, files and teamwork live online, and the office network plays no part.
The weakness we still meet most often is RDP published straight onto the web. Port 3389 left open is catalogued by internet-wide scanners almost immediately; brute-force login attempts follow, and ransomware operators are rarely far behind. Turkey's national cyber incident response centre, USOM, regularly warns about management services left reachable from outside. If that is how your staff reach the office today, closing it comes first, ahead of any talk about virtual desktops or contract clauses. With the licences you already own, it is often a matter of days.
Technically it can work, via a hosted desktop or browser-only access to Office apps, where a policy prevents saving files locally, so the personal disk stays clean of company data. Admitting a family computer to the corporate LAN through VPN is risky, because nobody knows what is running on it. On the employment side, the remote work contract should state in writing who supplies the equipment and how any expense is compensated when people rely on private hardware. Please agree the specifics with a labour law specialist or your accountant.
The IT section. We list the devices and software the company provides, set out approved connection methods and storage locations, and describe the steps and contacts after a device goes missing. Costs, the scope of remote work, working-time rules and occupational health and safety duties belong to HR and your legal adviser. What we deliver attaches to your document as an appendix; your wording stays untouched.
If people hit the office database through a plain VPN, probably so. Client-server programs cope badly with latency, and a connection that drops mid-transaction can corrupt data. Keep it running centrally and stream just the display. Then even a modest ADSL line in someone's flat feels close to sitting at the office desk.
We retain access logs (user, system, timestamp) because every sound security setup does. We do not install screen recorders or keyloggers. Monitoring employees counts as processing personal data under KVKK, which brings in the duty to inform, proportionality and purpose limitation, and employment law can add further limits. Talk this through with your legal adviser. Besides, spyware on work laptops usually damages morale far more than it helps management.
Tracking hours is a legal obligation of the company; selecting the tool is a decision for management and payroll. Our part is technical: a single corporate login, automatic roll-out of the app to all devices, and role settings that limit each supervisor to their own department. A clock-in routine full of hurdles gets skipped.
Moving around inside Turkey makes no technical difference: with a company laptop and MFA, an employee connects the same way from a flat in Kadıköy or a holiday home on the Aegean. Going abroad is different, because the country rules in conditional access will block the login. When such a request comes in, we add a time-limited exception for that person and that country once their manager approves, and it switches itself off on the end date. Tax, social security and what it means for the remote work contract are questions for HR and your accountant.
Effort grows with users, endpoints and software. Once we have examined your environment remotely, you receive an honest schedule. Billing is €55 an hour plus VAT, unless you prefer to cover it through a monthly subscription. Virtual desktops are priced separately, since the biggest cost driver is the capacity reserved for people signed in at the same time.
Tell us how many people work outside the office and which applications they cannot do without. We will recommend the model that suits your data and circumstances.
We have your enquiry
A reply will reach you by the next working day at the latest. If your message says work has come to a halt, it goes to the top of the pile.
No such city in our list. Try another spelling, or just pick the closest big city: we work entirely over remote connections, so nothing about the service changes from one province to the next.
The only cookies here are the essential ones: they keep the site running and remember the city you picked. Nothing is used for advertising or tracking. See our privacy notice for more.
