Legal Compliance, Security Architecture, and Future Projections.
1. Executive Summary and Strategic Background
In the second quarter of the 21st century, industrial production facilities, factories, and organized industrial zones are under immense pressure to transform not only their operational efficiency but also their legal compliance and data security protocols. The legal framework in Turkey, shaped particularly by the Law on the Protection of Personal Data No. 6698 (KVKK) and the Occupational Health and Safety Law No. 6331 (OHS), compels facility managers to abandon traditional methods. This report provides an in-depth analysis of the technical infrastructure, legal grounds, and market positioning of the AI-powered visitor management software developed by And Dreams Digital. The primary objective is to expose the legal, financial, and operational risks posed by paper-based visitor registration processes and, conversely, to analyze the multi-dimensional advantages offered by the developed digital solution.
Factory entrance gates are not merely physical checkpoints, they are the initial contact points where the institution interacts with the outside world. The quality of data collected here, its storage method, and destruction processes are critical factors determining the enterprises standing regarding KVKK. The dramatic increase in administrative fines projected for 2025 and 2026 has escalated the cost of data security breaches to levels that threaten business sustainability. Furthermore, legal obligations regarding accident prevention and emergency management mandate effective briefing of visitors before they enter the facility. And Dreams Digitals software offers an integrated solution addressing these two fundamental needs through masked data architecture, mandatory video viewing modules, and AI-based verification features.
This report will first detail the current legal framework and anticipated changes, followed by a risk map of manual processes. Subsequent sections will examine the technical features of the And Dreams Digital software and its advantages over competitors.

2. Legal Legislation Analysis: Risks and Obligations under KVKK
Data protection law in Turkey exhibits a dynamic structure in the process of harmonizing with the European Union’s General Data Protection Regulation (GDPR). Decisions and guidelines published by the Personal Data Protection Board (the Board) contain binding provisions for data controllers. Identity verification and registration processes at factory entrances fall directly within the scope of this legislation.
2.1. KVKK No. 6698 and Fundamental Principles
Article 4 of the KVKK outlines the general principles to be followed in processing personal data. These include being compliant with the law and rules of integrity, processing for specific, clear, and legitimate purposes, and most importantly, being relevant, limited, and proportionate to the purpose for which they are processed (Data Minimization). Traditional visitor books and practices of photocopying ID cards contradict each of these principles.
2.1.1. Data Minimization and Proportionality Principle
Verifying a visitor’s identity to ensure factory security is a legitimate purpose. However, photocopying or scanning the entire ID card containing the visitor’s TR ID number, place of birth, mother’s name, and photo to achieve this purpose violates the “proportionality” principle. The Board emphasizes that data controllers must process only the “minimum” data serving the purpose. The “masked data” structure offered by And Dreams Digital is a technological reflection of this principle. AI, recording only the necessary parts (e.g., Name, Surname, and the last 4 digits of the TR ID number), and masking the rest without processing ensures full compliance with the data minimization principle.
2.1.2. Data Security Obligation (Article 12)
Article 12 of the Law imposes an obligation on the data controller to take all necessary technical and administrative measures to prevent unlawful processing of personal data, prevent unlawful access to data, and ensure data preservation. An open visitor book sitting on a reception counter is a clear violation of this article. A person writing their name, surname, phone number, and company information in the visitor book can see the data of all preceding individuals. This constitutes “access to personal data by unauthorized third parties” and is a data breach. Past Board decisions show that high administrative fines are imposed on companies failing to take data security measures.
2.2. 2025-2026 Administrative Fines Projection
The Revaluation Rate determined annually by the Ministry of Treasury and Finance directly affects the lower and upper limits of KVKK administrative fines. The increase rate of 25.49% determined for 2025 serves as an indicator for 2026 projections. The financial risks that businesses may face show that even a simple negligence can lead to millions of liras in damages.
The table below presents the projected administrative fine limits according to violation types.
This table highlights the severity of the Failure to Fulfill Data Security Obligations clause. If a visitor book is stolen, lost, or viewed by third parties, factory management could face a fine risk exceeding 17 million TL. Furthermore, businesses continuing the practice of taking ID photocopies despite the Boards prohibition may be punished separately under Failure to Comply with Board Decisions.
2.3. Ban on ID Photocopying and Principle Decisions
In a principle decision taken in 2025 specifically for the tourism and accommodation sector but carrying precedent value, the Personal Data Protection Board stated that the practice of taking photocopies of identity documents must be terminated. The decision emphasized that physically viewing the identity document is sufficient to verify the accuracy of identity information, and recording the document by scanning or photocopying it is contrary to the principle of proportionality.
This decision is directly binding for factories as well. Factory security is obliged to confirm the visitors identity but is not required to keep a copy of the ID for this verification. And Dreams Digital’s AI powered method is the safest approach ensuring full compliance with the Boards principle decision. Additionally, past ID photocopies stored must be immediately destroyed pursuant to Article 7 of the KVKK. The software automates this obligation by ensuring digital data is automatically destroyed (deleted or anonymized) when retention periods expire.
3. Occupational Health and Safety (OHS) Perspective
Industrial facilities harbor much higher security risks compared to office environments. The Occupational Health and Safety Law No. 6331 imposes an obligation on employers to protect not only their employees but all persons (visitors, interns, suppliers) present in the workplace.
3.1. Visitor Briefing and Training Obligation
In accordance with the Law and relevant regulations, employers are obliged to inform visitors about risks in the workplace, emergency plans, evacuation routes, and rules to be followed. In traditional methods, a printed paper (Visitor OHS Instructions) is signed by the visitor at the entrance. However, the legal validity of this method is debatable:
- Readability and Comprehensibility: Visitors often sign the text without reading it. In a potential accident, defenses such as “I was not given time to read” or “The text was too small” may be raised.
- Proof Issue: Storing paper forms and presenting them when necessary is difficult.
And Dreams Digital software provides legal protection by digitizing this process. When creating an appointment or arriving at the factory, the visitor is required to watch the OHS Information Videointegrated into the system. The software confirms that the video has been watched to the end, not fast-forwarded, and that any test questions at the end of the video have been answered correctly. The QR code required for entry is not generated until this process is completed. The system digitally logs who watched which version of the training video, on what date, and at what time. In an industrial accident lawsuit, these digital records (with timestamps) can be presented to the court as conclusive evidence, proving that the enterprise fulfilled its training and information obligation.
3.2. Emergency Management and Instant Headcount
In emergencies such as fire, explosion, gas leak, or earthquake that may occur in large factories, the most critical question is “Who is inside?” Answering this question instantly with paper books is impossible. The book may have been left at the reception, or those who exited may not have signed out.
And Dreams Digital creates an instant In-Facility Visitor List (Headcount) with its cloud-based or on-premise architecture. In an emergency, security officers at the assembly area can access this list via tablets or mobile phones and conduct a roll call. Missing persons, their last entry point, and whom they came to visit can be identified within seconds and reported to search and rescue teams. This feature plays a vital role in fulfilling obligations under Article 11 of Law No. 6331 titled Emergency Plans, Fire Fighting, and First Aid.
4. Analysis of Manual Processes: Invisible Risks and Costs
Many business managers think that paper-and-pen-based visitor management is “cost-free.” However, these systems bring serious burdens such as hidden operational costs, security vulnerabilities, and loss of brand image.
4.1. Operational Inefficiency and Time Loss
The process of a visitor arriving at the reception, taking out their ID, writing their information in the book, the receptionist calling the host from the internal line, failing to reach them, getting confirmation, and issuing a visitor card takes an average of 3 to 7 minutes. In a factory receiving 50 visitors a day, this corresponds to approximately 4-5 hours of labor loss per day. Queues forming at the door during shift changes or busy supplier entry times slow down operations and create visitor dissatisfaction.
With And Dreams Digital, this process becomes self-service. Thanks to the pre-registration feature, the visitor enters all their information (HES code, ID details, vehicle plate, etc.) into the system, watches the OHS video, and gives KVKK approval before even coming to the factory. When they arrive at the factory, they enter within seconds by simply scanning the QR code sent to them at the kiosk or turnstile. This reduces the burden on reception staff by 80% and allows personnel to focus on more value-added tasks.
4.2. Security Vulnerabilities and Social Engineering
Paper books are the easiest targets for social engineering attacks. A malicious person can take a photo of the book by taking advantage of the receptionist’s momentary distraction and learn the company’s customer portfolio, suppliers, and visitors of senior executives. Additionally, identifying people trying to enter with false declarations such as “I am Mr. X’s guest” is difficult in manual systems.
The AI-based software performs appointment confirmation digitally. The host (factory employee) cannot allow the visitor to enter without approving the visit via the notification sent to them. Furthermore, the system performs a “Blacklist” check, instantly detecting people who are banned from entering the factory or risky profiles via facial recognition or ID number matching, and alerts security.
5. Technical Architecture and Solution Details
And Dreams Digital possesses a scalable and secure software architecture developed with industrial needs in mind. The prominent technical features and added values provided by the software are detailed below.
5.1. Multi-Layered Security and Masked Data Technology
At the core of the software is a KVKK engine that manages the data lifecycle (collection, processing, storage, destruction).
- Masking Algorithm: The system applies the “privacy-by-design” principle when writing visitor data to the database. Name, surname, and other sensitive data are masked so that no one other than authorized personnel can see them (e.g., A*** Y***). The unmasked version of the data can only be viewed with “Super Admin” authority and by logging the action in cases of legal necessity (e.g., police request).
- Encryption: All data is stored encrypted with the AES-256 standard and protected by SSL/TLS protocols during transmission. This provides high-level protection against cyber attacks.
5.2. Integrated Video and Exam Module
Many global solutions in the market focus on general office management and do not have detailed OHS features. And Dreams Digital, however, is “factory” focused.
- Mandatory Viewing: The video player does not allow the visitor to skip the video or play it in the background. The act of watching is guaranteed via eye tracking (with optional hardware) or interactive buttons (e.g., a “Continue” button appearing at the 30th second of the video).
- Multi-Language Support: Videos are provided in different languages (English, German, Arabic, etc.) for foreign suppliers or visitors.
5.3. Artificial Intelligence (AI) Supported Verification and Analysis
- Appointment Confirmation Bot: The AI module in the system confirms whether the visitor will come by calling or messaging them before the appointment day (Intent Recognition). This reduces “no-show” rates and allows for the optimization of meeting room/catering organization.
- Anomaly Detection: The system analyzes unusual visitor traffic (e.g., entry attempts at midnight or frequent entries by the same person) and reports to the security manager.
5.4. End-to-End Integration Capability
And Dreams Digital has a flexible structure that can communicate with the factory’s existing ecosystem.
- PDKS and Turnstile Integration: The software works integrated with the factory’s existing Personnel Attendance Control System (PDKS) and turnstile hardware. The QR code or RFID card given to the visitor opens only the doors they are authorized for.
- Outlook/Gmail Integration: Employees can automatically create a visitor record when creating a meeting invitation via Outlook or Google Calendar.
5.5. Paperless and Hygienic Processes
Increased hygiene sensitivity post-pandemic has made commonly used pens and books risky. And Dreams Digital allows visitors to complete all transactions contactlessly via kiosk screens or their own mobile phones (BYOD – Bring Your Own Device).
Why And Dreams Digital?
- 100% KVKK Compliance and “Masked Data” Technology: We are ending your legal department’s worries. Our software works with the “Privacy by Design” principle. It verifies your visitor’s identity with AI but records it in the database in a masked manner compliant with laws (e.g., A*** Y***, TR ID: 12*******89). It completely eliminates the risk of data breach where “arrivals see those who left” in paper books and the burden of storing ID photocopies. It automatically destroys data whose legal retention period has expired.
- Legal Shield: OHS Training and Video Confirmation: Law No. 6331 is no joke. You are obliged to inform every visitor entering your facility against risks. Our software does not generate an entry QR code without making the visitor watch the factory-specific OHS video to the end. In a possible work accident or ministry inspection, it legally protects your business and minimizes compensation risks by presenting “time-stamped digital proof” that the visitor received the training.
- Artificial Intelligence (AI) Supported Security Operation: Our AI assistant calls or texts your visitors before the appointment to confirm their attendance, reducing the “no-show” rate. Instantly detects unwanted persons or risky profiles entering the facility and alerts security.
- Operational Excellence and Prestige: Send a link to your guests before the meeting; let them approve the KVKK text and watch OHS videos. Let them pass by simply scanning a QR code or just a digital code at the door without waiting. Global auditors, customers, and suppliers coming to your facility encounter a modern, tablet-based interface reflecting your corporate identity. Don’t leave the first impression to chance.
Our AI Visitor Management Solution for Industrial
Visitor management in industrial facilities is no longer a “stationery” issue but a “governance” issue. And Dreams Digital, with its integrated solution, protects businesses from heavy financial sanctions of KVKK while digitizing OHS processes to eliminate human error. Cost-benefit analyses show that the system provides return on investment (ROI) in a very short time by preventing potential fine or litigation risks. Businesses viewing this transformation not as an obligation but as part of corporate maturity and digitalization vision will gain a competitive advantage.
Don’t Take Risks, Manage Them. Errors brought by manual processes, lost books, and data breaches can cost your business hundreds of times the software investment. Open your factory doors to technology and close them to risks with And Dreams Digital. As And Dreams Digital, we provide AI-powered, company-specific software solutions tailored for factory entrances and OHS management.
Links:



