Kooch logo containing a shirdal inside a shield with kooch text

About us

We help international startups and tech firms navigate KVKK, GDPR, and ISO 27001 compliance — fast, reliable, and transparent.

Architecture pattern

OurStory

Kooch Cybersecurity & Compliance was founded in Istanbul in 2025 by Masoud Salmani, a cybersecurity analyst and entrepreneur.

Masoud saw that many startups expanding into Türkiye struggled with the complexities of local data protection law (KVKK) and its overlap with GDPR. Non-compliance wasn’t just a legal risk — it was blocking market entry and costing businesses opportunities.

Kooch was created to solve this problem: practical, productized compliance packages that help businesses register in VERBIS, meet regulatory requirements, and build trust with customers.

Why ChooseKooch?

Specialized in Türkiye & EU
Deep expertise in KVKK, GDPR, and ISO standards helps your business meet its regulatory requirements.
Startup-friendly approach
Flat-fee packages, clear timelines, and rapid delivery designed for fast-moving companies.
Risk-focused mindset
We go beyond paperwork to help you actively reduce risks of fines, breaches, and reputational damage.
Global mindset
Perfect for international firms entering Türkiye, combining bilingual (TR/EN) delivery with local regulatory know-how.
Founder-led expertise
Direct access to senior consultants and hands-on support, not just junior staff.
Lean and transparent
We use proven SOPs, cloud tools, and clear deliverables so you always know what’s happening and why.
Modern architecture details

Meet Our Founder

Masoud Salmani Founder & Principal Consultant

Masoud is a results-driven cybersecurity analyst with expertise in network security, cloud security, and incident response. He has previously founded and ran software ventures, built custom mobile and web platforms, and led cross-border projects.

That security and engineering background is what lets Kooch translate KVKK and GDPR from legal text into changes your developers can actually ship.

Certifications include:
- CompTIA Security+
- CompTIA Network+
- ISC2 Certified in Cybersecurity (CC)
- Microsoft Azure Fundamentals (AZ-900)

Languages: Persian (native), English (fluent), Arabic & Turkish (intermediate).

Architecture pattern
Modern architecture details

Our Mission & Vision

Mission: To make privacy compliance accessible, fast, and reliable for startups and tech companies expanding into Türkiye and Europe.

Vision: To become the go-to boutique consultancy for cross-border compliance in Türkiye, trusted by international startups and SMEs for their market entry and data protection needs

Modern architecture details

WhatWe Do

KVKK Startup Launchpad
Quick entry compliance (VERBIS registration + policies).
GDPR/KVKK Gap Analysis
Full audit of practices and risks.
ISO 27001 Readiness
ISMS design, policies, and audit prep.
Ongoing Compliance Management
Advisory compliance support and year-round oversight.
Data Controller Representative (KVKK) in Türkiye
Required local representative for foreign data controllers.