TÜBİTAK BİLGEM KAMU SERTİFİKASYON MERKEZİ

What TÜBİTAK BİLGEM KAMU SERTİFİKASYON MERKEZİ does

TÜBİTAK BİLGEM Kamu Sertifikasyon Merkezi (Kamu SM) is the Turkish government's state-operated Electronic Certificate Service Provider (ESHS), established in 2005 and headquartered at the TÜBİTAK Gebze Campus in Kocaeli, with a secondary office in Ankara. Operating under Law No. 5070 and the supervisory authority of BTK (Information and Communication Technologies Authority), Kamu SM is the sole government-run issuer of qualified electronic certificates in Turkey and maintains seven versions of root Certificate Authority hierarchies spanning NES, SSL, Mobile NES, and corporate certificate lines. The organization is wholly owned by TÜBİTAK BİLGEM, with no private investment, and operates as a public-service entity with approximately 63 employees.

The company's core technology is X.509 Public Key Infrastructure (PKI) compliant with ITU-T X.509, ETSI TS 101 861, CWA 14167-1, RFC 3161, CAdES, and PAdES standards. All cryptographic libraries (MA3 API, Şifreleme API, İmzager Kurumsal, Zamane, Kaşif) are domestically developed by TÜBİTAK BİLGEM. The product portfolio covers NES qualified electronic certificates for individuals, Mobile NES (SIM-based via Turkcell, Türk Telekom, Vodafone), Mali Mühür financial seal certificates for legal entities (smart card or HSM), OV SSL/TLS certificates for .tr domains, time stamping, corporate electronic seal and encryption certificates for e-Yazışma, new generation ÖKC POS certificates, GEM access device certificates, smart card readers, and compliance assessment plus training services.

Kamu SM generates revenue through a mix of one-time certificate licensing (NES 1–3 years, Mali Mühür 3 years, SSL 198 days, corporate seal 1 year), usage-based time stamping credits (minimum 10,000 credits), hardware sales (card readers), professional services (compliance assessment, consulting, training), and recurring software licensing (İmzager Kurumsal, Zamane, with MA3 API transitioning to paid licensing on 01.06.2026). Distribution is via the onlineislemler.kamusm.gov.tr self-service portal, e-Devlet integration, contracted couriers (PTT Kargo, Yurtiçi Kargo, AGT Kurye), and payment through state banks (Vakıfbank, Ziraat Bankası). Customers are exclusively Turkish public sector employees, government institutions, and Turkish legal entities with mandatory e-invoicing and e-correspondence obligations.

Name

TÜBİTAK BİLGEM KAMU SERTİFİKASYON MERKEZİ

Legal name

TÜBİTAK BİLGEM KAMU SERTİFİKASYON MERKEZİ

Website

https://kamusm.gov.tr

Company type

Private

Founded year

2005

Operating status

Operating

Headcount range

51–100 employees

Short description

TÜBİTAK BİLGEM Kamu Sertifikasyon Merkezi (Kamu SM) is Turkey's sole government-operated Electronic Certificate Service Provider, issuing qualified electronic signatures, financial seals, SSL, and time stamping certificates to public sector employees, government institutions, and Turkish legal entities under Law No. 5070.

Ownership category

akta.pro rank

Product category

Digital Certification Services

NAICS

Investigation and Personal Background Check Services (561611), Computer Systems Design and Related Services (54151), Custom Computer Programming Services (541511)

SIC

Services-Computer Programming, Data Processing, Etc. (7370), Services-Computer Processing & Data Preparation (7374)

akta.pro primary industry

Identity Verification, Proofing & KYC (IDV) (HDAEAJAI)

akta.pro secondary industries

Identity Verification & Proofing (IDV, KYC, Biometrics) (HDADAAAF), Fraud Prevention & Identity Verification (IDV/KYC) (BPAMAEAI), Information Technology (IT) & Cybersecurity Certifications (EDAAANAA)

Keywords

• Electronic signature certificates
• Public key infrastructure
• Digital certification authority
• Electronic seal services
• Time stamping services

Headquarters

HQ city

Gebze

HQ country

Türkiye

HQ region

Europe

Offices2 records

Markets served

GTM type

B2B

Offering type

Services

Cost components

Technology or R&D, Personnel, Operations, Infrastructure, Marketing or Sales

Revenue model

1. Nitelikli Elektronik Sertifika (NES) - Qualified Electronic Certificate: Electronic signature certificates sold to government employees and public sector personnel. Offered in 1, 2, or 3-year validity periods. Individual employees can purchase directly for certain institutions (Ministry of Health, Ministry of Education, Higher Education Council, Ankara Bar Association).
2. Mobil NES - Mobile Electronic Certificate: Mobile-based electronic signature certificates using SIM card technology, available through TURKCELL, TÜRK TELEKOM, and VODAFONE operators for both postpaid and prepaid subscribers.
3. Mali Mühür Sertifikası - Financial Seal Certificate: Electronic seal certificates for legal entities required for e-invoicing and official document signing. Available as smart card or HSM (Hardware Security Module) format.
4. SSL Server Certificates: Organization Validated (OV) SSL certificates for .tr domain names of Turkish institutions. Offered as Standard SSL, Wildcard SSL, and SAN SSL variants.
5. Zaman Damgası - Time Stamping Service: Credit-based time stamping service with minimum purchase of 10,000 credits. Used for document timestamping and long-term electronic signatures.
6. Kart Okuyucu - Smart Card Readers: Sale of mini card readers and desktop card readers for use with electronic certificate smart cards.
7. E-İmza Uyum Değerlendirme - Electronic Signature Compliance Assessment: Compliance testing service for electronic signature applications against international technical standards. Mandatory for government institutions.
8. İmzager Kurumsal Software License and Support: Corporate e-signature software licensing with annual license renewals and technical support packages available.
9. Şifreleme API License: API licensing for encryption/decryption operations in official government correspondence. Available only to government institutions holding Electronic Seal/Corporate Encryption Certificates.
10. Kurumsal Elektronik Mühür ve Şifreleme Sertifikaları - Corporate Electronic Seal and Encryption Certificates: Certificates for institutional identity verification in e-correspondence and mandatory encryption of confidential official documents under regulation.

Pricing tiers

Go-to-market motion1 record

Distribution channels6 records

Marketing channels8 records

Core offering

TÜBİTAK BİLGEM Kamu Sertifikasyon Merkezi (Kamu SM) is Turkey's official Electronic Certificate Service Provider (ESHS), issuing qualified electronic certificates (NES/e-İmza), mobile electronic signatures, SSL/TLS server certificates, financial seal (Mali Mühür) certificates, time stamping services, and corporate electronic seal/encryption certificates for e-correspondence. Operating under Law No. 5070 and BTK supervision, the center provides the full certificate lifecycle from issuance to revocation, including compliance assessment for government institutions and domestically developed cryptographic software (MA3 API, İmzager Kurumsal, Zamane).

Product overview

TÜBİTAK BİLGEM Kamu Sertifikasyon Merkezi operates as Turkey's Electronic Certificate Service Provider under Law No. 5070, offering a comprehensive portfolio of PKI-based products and services. The core offerings include Qualified Electronic Certificates (NES/e-İmza) for individuals, Mobile NES for SIM-based mobile signatures, Mali Mühür (Financial Seal) certificates for legal documents, SSL/TLS server certificates, and Zaman Damgası (Time Stamp) services. The product suite also includes corporate solutions for e-Yazışma (electronic correspondence) with Kurumsal Şifreleme and Elektronik Mühür certificates, new generation ÖKC certificates for payment terminals, and GEM card access device certificates. Supporting infrastructure includes smart card readers, the İmzager Kurumsal and Zamane software applications for signing, and MA3 API libraries for developer integration. Compliance assessment and training services complement the technical offerings.

Differentiator

Problem solved

Functional benefit

Brands

• İmzager Kurumsal: Corporate electronic signature software application for document signing
• Zamane
• Kaşif
• MA3 API

Products and services

• Nitelikli Elektronik Sertifika (NES) / e-İmza Qualified Electronic Certificate carrying legal value equivalent to wet signature in electronic environments. Issued to individuals for authenticating and signing electronic documents. Available in 1, 2, or 3-year validity periods. Mandatory for Turkish government employees.
• Mobil NES (Mobil İmza) Mobile Qualified Electronic Certificate that carries wet signature value in mobile environments. Allows electronic signing via SIM card through TURKCELL, TÜRK TELEKOM, and VODAFONE operators for both postpaid and prepaid subscribers. Available in 1 and 2-year validity periods.
• Güvenli Sunucu Sertifikası (SSL/TLS) OV (Organization Validated) SSL/TLS certificates for securing communication between servers and clients, limited to .tr domain extensions. Available as Standard SSL, Wildcard SSL, and SAN SSL certificate types with 198-day validity per CA/B Forum requirements.
• Mali Mühür Sertifikası (Financial Seal Certificate) Electronic seal certificate that ensures security and confidentiality of legal documents. Used for e-Fatura, e-Defter, and other official electronic documents per tax authority regulations. Available as Smart Card or HSM (Hardware Security Module) format with 3-year validity.
• Zaman Damgası (Time Stamp) Time stamping service that proves the existence of data at a specific date/time and maintains data integrity. Operates per RFC 3161 X.509 PKI Time Stamp Protocol. Credit-based system with minimum purchase of 10,000 credits and no expiration on credits.
• Kurumsal Şifreleme ve Elektronik Mühür Sertifikaları Corporate encryption and electronic seal certificates for e-Yazışma (electronic correspondence) between government institutions. Electronic seal verifies institutional identity; encryption certificate enables secure transfer of confidential ('Hizmete Özel') official documents. Maximum 1-year validity per BTK regulation.
• Yeni Nesil ÖKC Sertifikası Certificate for IP-based payment recording devices (New Generation POS). Enables secure communication for retail point-of-sale systems under GİB regulations.
• GEM (Güvenli Erişim Modülü) Kart Sertifikası Certificate for GEM (Secure Access Module) card access devices used for secure authentication and access control.
• E-imza Uyum Değerlendirmesi (Compliance Assessment) Compliance assessment service that evaluates electronic signature applications against international technical standards per e-signature legislation. Mandatory for public institutions requesting NES certificates. Group-based pricing.
• Danışmanlık ve Eğitim Consulting and corporate training services including E-Signature Awareness Training, E-Signature Technology Training, E-Signature Library Training, and E-Seal Awareness Training.
• İmzager Kurumsal Software Desktop application for creating electronic signatures using CAdES, XAdES, PAdES formats and electronic correspondence packages (EYP 1.3 and EYP 2.0). Supports PDF signing with PAdES format from version 2.7.
• Zamane Time Stamping Client Software Free client software for applying time stamps to documents. Uses username/password authentication to connect to Kamu SM Time Stamp Server.
• MA3 API Kütüphaneleri Software libraries (MA3 API) developed by TÜBİTAK BİLGEM for e-signature and encryption integration. Includes e-imza libraries and encryption libraries for building compliant signature applications. Available for free use until 01.06.2026.
• Kart Okuyucu (Card Reader Hardware) Smart card readers that enable communication between smart cards and computers. Available as Mini Card Reader and Desktop Card Reader variants.

Quantifiable outcome

• Electronic seal and corporate encryption certificate validity limited to maximum 1 year per BTK regulation, ensuring regular key rotation and security.
• +3 more outcomes

Named customers9 records

Segments4 records

Ideal customer profiles4 records

Technology focussed Yes

API detail

Has API

Yes

API docs

API detail

Core technology

AI maturity

App detail

Integration6 records

Feature5 records

Partnerships

Eleven partnerships are on record, tiered core and minor.

• TÜBİTAK BİLGEM (Informatics and Information Security Research Center)coreStrategic or Co-development PartnerKamu SM is a unit of TÜBİTAK BİLGEM. All proprietary technologies including MA3 API cryptographic libraries, İmzager Kurumsal software, Zamane time stamping client, Kaşif verification tool, and Şifreleme API are developed by TÜBİTAK BİLGEM. The center operates within the TÜBİTAK Gebze Campus.
• TURKCELL, TÜRK TELEKOM, VODAFONEcoreTechnology or IntegrationMobile network operators provide the SIM card infrastructure for Mobil NES (Mobile Electronic Signature). TURKCELL serves both postpaid and prepaid subscribers; TÜRK TELEKOM and VODAFONE serve postpaid subscribers. The service uses SIM-based cryptographic operations for mobile e-signatures.
• PTT (Posta ve Telgraf Teşkilatı)coreChannel Partner/ Reseller/ DistributorOfficial courier partner for certificate delivery. Kurum Kurye No: 906553861. Offers both door-to-door delivery and PTT branch pickup options. Delivery within 10 business days. SMS/email notification sent upon dispatch.
• Yurtiçi KargocoreChannel Partner/ Reseller/ DistributorOfficial courier partner for certificate delivery. Kurum Kurye No: 1222605904. Provides door-to-door and branch pickup delivery options for electronic certificate smart cards.
• AGT KuryeminorChannel Partner/ Reseller/ DistributorCourier service partner for Mali Mühür certificate delivery and branch pickup points. Listed among approved branch pickup locations for Mali Mühür certificate collection.
• VakıfbankcoreChannel Partner/ Reseller/ DistributorPayment channel partner for certificate fee collection. Supports branch, internet banking, mobile banking, ATM, and call center payments. Payments made through Vakıfbank channels reflect in the Kamu SM system within 1 business day.
• Ziraat BankasıcoreChannel Partner/ Reseller/ DistributorPayment channel partner for certificate fee collection. Supports branch, internet banking, and mobile banking payments. Payments reflect within 1 business day.
• e-Devlet (Türksat A.Ş.)coreTechnology or IntegrationIntegration with Turkey's national e-Government portal (e-Devlet) for identity verification in certificate applications, certificate status queries, and process tracking. Kamu SM portal accepts e-Devlet login for identity authentication.
• DETSİS (National Address Database System)coreTechnology or IntegrationDETSİS is used by Kamu SM to verify government institution authorization for electronic seal and corporate encryption certificates. Eligibility queries are performed through DETSİS web service integration.
• BTK (Bilgi Teknolojileri ve İletişim Kurumu / Information and Communication Technologies Authority)coreStrategic or Co-development PartnerRegulatory supervisory authority for Kamu SM as an Electronic Certificate Service Provider. Issues regulations governing certificate validity periods, usage requirements, and corporate seal/encryption standards under Law No. 5070.
• Cumhurbaşkanlığı Dijital Dönüşüm Ofesi (Digital Transformation Office)coreStrategic or Co-development PartnerProvides the e-Yazışma test platform (testeyazisma.cbddo.gov.tr) for compliance testing of e-correspondence packages. Issues the e-Yazışma Technical Guide that defines mandatory requirements for electronic seal and corporate encryption certificates issued by Kamu SM.

Scale indicators4 records

Recent moves5 records

Expansion highlights4 records

Broad incumbents

• Sectigo (formerly Comodo CA): Large commercial Certificate Authority with broad SSL, e-signature, and IoT certificate portfolios - mirrors Kamu SM's diversified certificate product set at global scale.
• DigiCert: Global commercial Certificate Authority and TLS/PKI provider serving enterprise SSL, document signing, and identity use cases at scale - functionally parallel to Kamu SM's SSL and digital signature products on an international scale.
• GlobalSign (GMO GlobalSign): Long-established CA operating qualified e-signature, e-seal, and SSL certificate services globally under eIDAS - a direct functional peer for Kamu SM's PKI and trust services portfolio at international scale.
• IdenTrust (HID Global): Identity and CA services provider used across U.S. federal and financial sectors - comparable to Kamu SM as a high-assurance certificate authority serving regulated public-sector customers.
• Entrust Corporation: Public-traded identity and PKI vendor offering digital signing, certificates, and authentication - closely comparable to Kamu SM's TLS and document signing infrastructure at enterprise scale.

Regional players

• A-Trust GmbH: Austrian accredited TSP for qualified electronic signatures serving government and enterprise in Austria - analogous role/scope to Kamu SM at a smaller national scale.
• D-Trust (part of Bundesdruckerei): German state-affiliated trust service provider offering qualified e-signature and e-seal certificates under eIDAS, structurally analogous to Kamu SM as a national/government-linked CA in a different geography.
• Turkcell (e-İmza service): Turkish mobile operator that distributes Mobil NES alongside its own e-signature offerings and mobile identity services, overlapping with Kamu SM on mobile certificate distribution in the same geography.

Direct peers

• EBG Bilişim Teknolojileri ve Danışmanlık: Privately operated Turkish ESHS providing qualified e-signature, e-seal, and SSL certificates across the same legal framework as Kamu SM, competing for the non-government portion of the Turkish market.
• E-Tuğra EBG A.Ş. Turkish accredited Electronic Certificate Service Provider offering qualified electronic certificates (NES), SSL, and time stamping services under Law No. 5070 - directly competing with Kamu SM in the Turkish government and enterprise CA market.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks6 records

Key highlights7 records

Customer concentration

• Xx.com/Kamu_SM
• YouTubeyoutube.com/channel/UCzDezMOeAaZIzRBB5V5VjpA/featured
• Facebookfacebook.com/KamuSertifikasyonMerkezi
• LinkedInlinkedin.com/company/kamusm
• Instagraminstagram.com/kamu_sm

Compliance6 records

Revenue estimate

Valuation estimate

Number of profiles

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about TÜBİTAK BİLGEM KAMU SERTİFİKASYON MERKEZİ