Kooch logo containing a shirdal inside a shield with kooch text

About us

We help international startups and tech firms navigate KVKK, GDPR, and ISO 27001 compliance — fast, reliable, and transparent.

Architecture pattern

OurStory

Kooch Cybersecurity & Compliance was founded in Istanbul in 2025 by Masoud Salmani, a cybersecurity analyst and entrepreneur.

Masoud saw that many startups expanding into Turkey struggled with the complexities of local data protection law (KVKK) and its overlap with GDPR. Non-compliance wasn’t just a legal risk — it was blocking market entry and costing businesses opportunities.

Kooch was created to solve this problem: practical, productized compliance packages that help businesses register in VERBIS, meet regulatory requirements, and build trust with customers.

Why ChooseKooch?

Specialized in Turkey & EU
Deep expertise in KVKK, GDPR, and ISO standards ensures your business meets all regulatory requirements.
Startup-friendly approach
Flat-fee packages, clear timelines, and rapid delivery designed for fast-moving companies.
Risk-focused mindset
We go beyond paperwork to help you actively reduce risks of fines, breaches, and reputational damage.
Global mindset
Perfect for international firms entering Turkey, combining bilingual (TR/EN) delivery with local legal knowledge.
Founder-led expertise
Direct access to senior consultants and hands-on support, not just junior staff.
Lean and transparent
We use proven SOPs, cloud tools, and clear deliverables so you always know what’s happening and why.
Modern architecture details

Meet Our Founder

Masoud Salmani Founder & Principal Consultant

Masoud is a results-driven cybersecurity analyst with expertise in network security, cloud security, and incident response. He has previously founded and scaled tech startups, built custom mobile and web platforms, and led cross-border projects.

Certifications include:
- CompTIA Security+
- CompTIA Network+
- ISC2 Certified in Cybersecurity (CC)
- Microsoft Azure Fundamentals (AZ-900)
- ISO & data privacy specialization courses

Languages: Persian (native), English (fluent), Arabic & Turkish (intermediate).

Architecture pattern
Modern architecture details

Our Mission & Vision

Mission: To make privacy compliance accessible, fast, and reliable for startups and tech companies expanding into Turkey and Europe.

Vision: To become the go-to boutique consultancy for cross-border compliance in Turkey, trusted by international startups and SMEs for their market entry and data protection needs

Modern architecture details

WhatWe Do

KVKK Startup Launchpad
Quick entry compliance (VERBIS registration + policies).
GDPR/KVKK Gap Analysis
Full audit of practices and risks.
ISO 27001 Readiness
ISMS design, policies, and audit prep.
Ongoing Compliance Management
Virtual DPO and year-round support.
Data Protection Representative (DPR) In Turkyie
Required local representation for foreign companies.