Türktrust

What Türktrust does

TÜRKTRUST Bilgi İletişim ve Bilişim Güvenliği Hizmetleri A.Ş. is one of approximately four licensed Electronic Certificate Service Providers (ESHS) in Turkey, operating under Law No. 5070 and regulated by the Information and Communication Technologies Authority (BTK). The company issues qualified electronic certificates to individuals (e-İmza) and legal entities (e-Mühür), and provides RFC 3161-compliant time-stamping services. Its sole confirmed international engagement is a two-phase PKI infrastructure delivery for the Qatar Central Bank (2006, 2010). All software, hardware, and data infrastructure are developed and operated domestically in Turkey.

The company has built a vertically integrated PKI stack entirely in-house at its Ar-Ge Merkezi (R&D Center, authorized 14.05.2015 under the Ministry of Science, Industry and Technology) and certified to CMMI Level 3. The product portfolio includes nine proprietary software products — Arnica (Java/.NET signing libraries used by ~100 organizations), Platan (certificate lifecycle management), Palma (smart-card management), STEIS (browser-based JNLP signing), Dianta (mobile MSSP), Cedrea (CAdES/CMS client), Pinea (PAdES/PDF client), Tilia (multi-format client), and Spira (time-stamping client) — supported by its own AKİS EAL4+ smart card and ISO 27001-certified operations, alongside distribution of Thales HSMs (Luna PCIe, Luna Network, ProtectServer).

Commercially, TÜRKTRUST pursues a hybrid B2B / B2C / B2G model: 38+ physical sales offices and mobile service points cover all major Turkish provinces; an e-Devlet NFC integration enables remote consumer onboarding; a national call center supports SMB and individual orders. Revenue is generated from multi-year qualified certificate packages (e-İmza 2–3 year and e-Mühür 1–3 year tiers), per-installation software licensing (Pinea, Cedrea, Arnica, etc.), usage-based time-stamping credit packs, and professional services for turnkey projects (E-İhale at KİK EKAP, E-Haciz at GİB, KAP at İMKB, and Qatar Central Bank PKI). Certificates are priced in TL inclusive of VAT and sold as multi-year bundles with smart card, reader, and client software.

Name

Türktrust

Legal name

TÜRKTRUST Bilgi İletişim ve Bilişim Güvenliği Hizmetleri A.Ş.

Website

https://turktrust.com.tr

Company type

Private

Founded year

2015

Operating status

Operating

Headcount range

51–100 employees

Short description

TÜRKTRUST is a BTK-licensed Turkish Electronic Certificate Service Provider issuing qualified e-signatures (e-İmza), electronic seals (e-Mühür), and RFC 3161 time-stamping services to individuals, banks, government agencies, defense firms, and enterprises via a 100% in-house PKI software stack and 38+ nationwide sales offices.

Ownership category

akta.pro rank

Product category

Digital Certificate Services

SIC

Services-Computer Programming, Data Processing, Etc. (7370)

akta.pro primary industry

Device Identity & Certificate-Based Authentication (PKI) (BPAMAEAL)

akta.pro secondary industry

Enterprise Application License Advisory, Vendor Management & Optimization (BPAEAGAO)

Keywords

• Electronic signature services
• Digital certificate authority
• Public key infrastructure
• Time stamping services
• Electronic seal services

Headquarters

HQ city

Çankaya

Offices49 records

Markets served

GTM type

B2B and B2C

Offering type

Services

Cost components

Personnel, Technology or R&D, Operations, Infrastructure, Marketing or Sales, Supply Chain

Revenue model

1. Electronic Certificate Sales (e-İmza / e-Mühür): TÜRKTRUST issues Qualified Electronic Certificates (Nitelikli Elektronik Sertifika – NES) for individuals (e-İmza) and organizations (e-Mühür). Certificates are sold as one-time products with validity periods of 1, 2, or 3 years. The product bundle includes the smart card, card reader, and Palma management software. Renewal business for existing certificate holders.
2. Time Stamping Service: Time stamping service sold in credit/contra units (100, 1,000, 10,000 units) at tiered volume pricing. Revenue is usage-based, with customers pre-purchasing credits that are consumed per time stamping request.
3. Software Licensing (Arnica, Platan, Palma, STEIS, Dianta, Cedrea, Pinea, Tilia, Spira): Proprietary software products are licensed to enterprises and software developers. Arnica libraries are sold to technology firms for integration into their own applications. Cedrea, Pinea, and Tilia are sold as desktop client licenses. License pricing is per computer/installation, with annual support/maintenance included.
4. Turnkey Project Services: End-to-end integration and software development projects for large organizations (banks, government agencies). Includes CEDRA (E-İhale), SEKOYA (E-Haciz), KAP system, and Qatar Central Bank PKI projects. Billed as project contracts with installation, integration, training, and maintenance components.
5. Hardware Sales: Sales of AKİS smart cards, USB smart card readers (ACR 38T/ACR39T-A1), wired card readers (HID OMNIKEY 1021), and HSM (Hardware Security Module) devices (Thales Luna PCIe, Luna Network, ProtectServer). Hardware sold as standalone products or bundled with certificate packages.
6. PKI Consulting and ESHS Setup Services: CA installation, PKI consulting, and Electronic Certificate Service Provider (ESHS) setup services for organizations requiring their own certificate infrastructure. Includes training on ARNICA library integration.

Pricing tiers

Go-to-market motion3 records

Distribution channels8 records

Marketing channels7 records

Core offering

TÜRKTRUST operates as a licensed Electronic Certificate Service Provider (ESHS) under Turkish Law No. 5070, issuing qualified electronic certificates for individuals (e-İmza) and organizations (e-Mühür), along with RFC 3161-compliant time stamping services. The company complements its certificate services with a portfolio of proprietary PKI software (Arnica, Platan, Palma, STEIS, Dianta, Cedrea, Pinea, Tilia, Spira), hardware (AKİS smart cards, card readers, Thales HSMs), and turnkey integration projects for banking and government clients.

Product overview

Türktrust operates as a Qualified Electronic Certificate Service Provider (ESHS) under Turkish Law 5070 and BTK regulation, offering a layered portfolio of certificate-based trust services centered on three core products: e-İmza (Qualified Electronic Signature for individuals), e-Mühür (Qualified Electronic Seal for legal entities), and Zaman Damgası (RFC 3161 Time Stamping). These are backed by a suite of proprietary software libraries and desktop client applications — Arnica (e-signature SDK in Java/.NET), Platan (certificate lifecycle management), Palma (smart card management), STEIS (JNLP browser-based signing), Dianta (mobile signature MSSP), Cedrea (CAdES/CMS signing), Pinea (PAdES/PDF signing), Tilia (document-to-PDF signing with email), and Spira (timestamp client) — plus hardware including AKİS smart cards, card readers (ACR 38T/ACR39T-A1, HID OMNIKEY 1021), and Thales HSMs (Luna PCIe, Luna Network, ProtectServer). Professional project and integration services round out the offering, with nearly 100 organizations using Türktrust's software libraries domestically and internationally. The company holds ISO/IEC 27001 certification and was designated an Ar-Ge Merkezi by Turkey's Ministry of Science, Industry and Technology.

Differentiator

Problem solved

Functional benefit

Brands

• Arnica: Electronic signature software library supporting CAdES, PAdES, XAdES formats for signing and verification.
• Platan
• STEIS
• Dianta
• Cedrea
• Pinea
• Palma
• eksprEs-İmza
• eksprEs-Mühür

Products and services

• e-İmza (Qualified Electronic Signature) Qualified Electronic Signature (NES) service that enables individuals to create legally binding electronic signatures equivalent to handwritten signatures under Turkish Law 5070. Delivered bundled with an AKİS smart card, USB card reader, and Palma management software for 1-, 2-, or 3-year validity periods.
• e-Mühür (Qualified Electronic Seal) Qualified Electronic Seal service for legal entities (companies and public institutions) to certify the source and integrity of electronic documents. Uses the same infrastructure as e-İmza but is issued to organizations rather than individuals; bundled with smart card, reader, and Palma software.
• Zaman Damgası (Time Stamping Service) RFC 3161-compliant time stamping service providing verifiable proof of the exact time when electronic data was created, modified, sent, received, or recorded. Enables long-term preservation and validation of electronic signatures, sold in tiered credit packages (100, 1,000, 10,000 units).
• Arnica Electronic Signature Software Libraries Java and .NET software libraries enabling electronic signature creation and verification in CAdES, PAdES, and XAdES formats. Supports X.509 certificates, PKCS#11 and CSP smart card interfaces, OCSP and CRL online validation, and time stamping integration. Used by approximately 100 organizations in Turkey and internationally for embedding e-signature capability into their own applications.
• Platan Certificate Services Management Software Complete certificate lifecycle management platform covering application processing, certificate production, distribution, revocation, and suspension. Features offline certificate authority, client-server architecture, barcode-based tracking, hierarchical root/sub-root certificate structure, HSM integration, OCSP/CRL services, and RFC-3161 time stamping.
• Palma Smart Card Management Software Smart card management software for TÜRKTRUST AKİS smart cards, supporting certificate enrollment, activation, PIN management, and card lifecycle operations. Available in 32-bit and 64-bit Windows versions.
• STEIS Browser-Based e-Signature System Browser-based electronic signature system using JNLP (Java Web Start) technology. Supports CAdES and PAdES signature formats, batch signing, online certificate validity checking, and XAdES-XL long-term signatures with time stamping. Works across all browsers without requiring repeated JNLP launches.
• Dianta Mobile Signature MSSP Software Mobile Signature Service Provider (MSSP) software compliant with ETSI TR 102203, TR 102206, TS 102204, and TS 102 207 standards. Enables mobile signature certificate issuance and full certificate lifecycle management. Developed in Java with web service communication.
• Cedrea CAdES Document Signing Software Desktop client for creating and verifying CAdES/CMS-format electronic signatures on any file type. Supports multi-file folder signing, multiple signatures per file, original file recovery from .cms output, and time stamping integration. Compliant with CWA 14169/14170/14171.
• Pinea PAdES PDF Signing Software Desktop application for PAdES (PDF Advanced Electronic Signature) format document signing and verification. Supports unlimited signing per license, batch folder signing, simultaneous multi-signature on single documents, and integrated time stamping. Files retain .pdf extension and can be verified in Adobe Reader without additional tools.
• Tilia Multi-Format Signing Software Client software supporting signing of various formats (.doc, .xls) converted to PDF, direct PDF signing, and plain text signing. Includes built-in certificate store, automatic smart card detection, and email send functionality. Platform-independent via Java Runtime Environment.
• Spira Time Stamping Client Software RFC 3161 compliant time stamping client software. Works with any time stamping authority, supports all file types (txt, doc, pdf, jpg, mp3), and includes integrated certificate repository for root certificates.
• AKİS Smart Card SIM-sized smart card (25x15mm) containing a secure chip for storing qualified electronic certificates and performing cryptographic operations. Supports RSA 1024/2048-bit key generation, at least 32KB memory, ISO 7816-1/2/3/4 and PKCS#11 standards, with EAL4+ certified OS and chip.
• ACR 38T / ACR39T-A1 USB Smart Card Reader SIM-sized USB smart card reader compatible with AKİS cards, supporting ISO 7816 Class A/B/C cards, CCID plug-and-play operation, and multiple operating systems including Windows, Linux, Mac OSX, and Android.
• HID OMNIKEY 1021 Wired Smart Card Reader Wired smart card reader supporting contact smart cards including TC Kimlik Kartı. Features USB 2.0 high-speed data transmission, compatibility with Windows 7/8/10, and a compact modern design.
• Thales Luna PCIe HSM PCIe Hardware Security Module (HSM) for protecting cryptographic keys and accelerating sensitive cryptographic operations. Designed for high-performance and stability requirements in electronic signature operations.
• Thales Luna Network HSM Network-attached Hardware Security Module (HSM) providing secure key storage and high-speed cryptographic operations over the network. Suitable for distributed PKI and certificate signing environments.
• Thales ProtectServer HSM (2 & 3) Network-based HSM family providing encryption, signing, and authentication services with tamper protection. Available in ProtectServer 2 and 3 models differentiated by cryptographic throughput.
• Project & Integration Services Professional services including e-İmza/M-İmza integration solutions, enterprise PKI solutions, CA installation and consulting, IT security software and integration, training, and turnkey software projects. Includes CEDRA (E-İhale), SEKOYA (E-Haciz), KAP system, and Qatar Central Bank PKI project deliveries.

Quantifiable outcome

• e-İmza certificate production time reduced to 3 hours as of April 22, 2026
• +3 more outcomes

Named customers33 records

Segments5 records

Ideal customer profiles5 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature12 records

Partnerships

Five partnerships are on record, tiered core and minor.

• Qatar Central Bank (Katar Merkez Bankası)coreStrategic or Co-development Partner · 1 June 2006TÜRKTRUST supplied SPIRA time stamping server software, ARNICA PKI software library, and HSM-integrated electronic certificate services infrastructure for Qatar Central Bank's internal PKI system. Project Phase 1 completed June–August 2006; Phase 2 (software update and training) delivered October 2010. This is TÜRKTRUST's primary international project reference.
• Thales (Luna PCIe HSM, Luna Network HSM, ProtectServer HSM)coreTechnology or IntegrationTÜRKTRUST distributes Thales Hardware Security Module (HSM) products including Luna PCIe HSM, Luna Network HSM, and ProtectServer HSM as part of its hardware portfolio. HSMs are used for secure cryptographic key generation and storage in certificate production and electronic signature operations. TÜRKTRUST also serves Thales HSM customers through its integration and support services.
• KamuSM (Kamu Sertifikasyon Merkezi)coreStrategic or Co-development PartnerKamuSM (Public Certification Center) is Turkey's government-run certificate authority for public institutions. TÜRKTRUST's Spira time stamping client is compatible with KamuSM libraries and ESYA API, enabling interoperability for government sector customers.
• SMMMO Chambers (Chambers of Certified Public Accountants)Channel Partner/ Reseller/ DistributorTÜRKTRUST maintains sales presences within SMMMO (Serbest Muhasebeci Mali Müşavirler Odası) chambers in Afyonkarahisar and other cities, leveraging the professional accountant network as a channel for reaching small business customers.
• TSO Chambers (Trades and Commerce chambers)minorChannel Partner/ Reseller/ DistributorTÜRKTRUST maintains sales presences within TSO (Ticaret ve Sanayi Odası) chambers in Aksaray and other cities, leveraging the chamber network for SME customer acquisition.

Scale indicators6 records

Recent moves6 records

Expansion highlights6 records

Broad incumbents

• Sectigo: Sectigo (formerly Comodo CA) is a global commercial certificate authority providing TLS, S/MIME, and enterprise PKI at scale — a broad incumbent in the same digital certificate category as TÜRKTRUST, though focused on non-qualified certificates.
• IdenTrust: IdenTrust is a digital identity and certificate authority widely used in US financial services and government — comparable to TÜRKTRUST in operating a regulated CA infrastructure serving financial institutions and public sector clients.
• DigiCert: DigiCert is a global leader in digital certificate and PKI services for TLS, IoT, and enterprise identity — a broad incumbent operating in the same certificate authority category as TÜRKTRUST but at global scale across non-qualified and qualified certificate use cases.
• Entrust: Entrust provides PKI, digital signing, and identity solutions to enterprises and governments globally, including qualified certificate capabilities in multiple jurisdictions — comparable to TÜRKTRUST in PKI technology stack and regulated e-signature delivery.
• GlobalSign: GlobalSign is a long-established global certificate authority offering SSL, identity, and PKI solutions for enterprises — comparable to TÜRKTRUST in core CA capabilities but serving a worldwide customer base rather than a single regulated market.

Direct peers

• E-GÜVEN: E-GÜVEN is another of the four BTK-licensed Electronic Certificate Service Providers in Turkey, offering qualified electronic signature services to individuals, enterprises, and government — competing head-to-head with TÜRKTRUST in the same Turkish qualified certificate market.
• E-Tuğra: E-Tuğra is a Turkish ESHS providing qualified electronic certificates and PKI services under BTK regulation, directly competing with TÜRKTRUST in the Turkish qualified e-signature market for individuals, corporates, and government clients.

Others

• Thales: Thales supplies the HSM hardware (Luna PCIe, Luna Network, ProtectServer) that TÜRKTRUST distributes and integrates, and is an adjacent player in PKI, digital identity, and data security — comparable as a digital identity ecosystem participant but operating in a different layer of the value chain.
• DocuSign: DocuSign is a global cloud-based e-signature platform serving enterprises across jurisdictions — not a direct competitor to TÜRKTRUST in Turkish qualified certificates, but a structurally disruptive alternative whose delivery model could pressure physical certificate demand over time.

Emerging players

• Evrotrust: Evrotrust is a qualified e-signature and digital identity provider in Eastern Europe (Bulgaria, Romania, EU), offering remote/mobile qualified electronic signatures — an emerging regional player competing with TÜRKTRUST in adjacent regulated markets.

Market position

Strengths4 records

Weaknesses5 records

Competitive moat6 records

Key risks6 records

Key highlights7 records

Customer concentration

• Xx.com/turktrust
• Facebookfacebook.com/TURKTRUST
• LinkedInlinkedin.com/company/t-rktrust

Compliance4 records

Revenue estimate

Valuation estimate

Number of profiles

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Türktrust