Alnera.Mission-critical software for regulated industries.
Compliance in days, not weeks
Measurable outcomes from our SPK VII-128.10 case study — compared to manual Excel workflows.
Turkish and EU regulations in one platform
From SPK to DORA, from KVKK to GDPR — manage yesterday's and tomorrow's compliance in the same ecosystem.
Four specialized products that solve the regulatory workload
From SPK to DORA, from audit to service management. One ecosystem, distinct specializations — all multilingual, all on-premise.
Alnera RegTech
Compliance management platform for SPK VII-128.10 and III-62.2. Control library, three-tier document model, AI evidence matching and encrypted auditor packages.
- 800+ control library
- Three-tier document model (template → draft → official)
- AI evidence matching + SHA-256 timestamp
Alnera Command
ITSM platform unifying tickets, ITIL, CMDB, AIOps and service portfolio. From enterprise helpdesk to Service Intelligence — on your own servers.
- ITIL + CMDB + AIOps in one product
- 26 granular permissions, 4 preset roles + custom
- 14-day free Enterprise trial, Windows installer
Alnera DORA
Compliance platform for the EU DORA regulation (2022/2554). ICT risk framework, incident reporting (NCA), third-party risk and WORM evidence management.
- 5 modules: ICT Risk · Incident · TPRM · Evidence · Dashboard
- NCA incident reporting (72h / intermediate / final)
- Hash-chained audit ledger + WORM evidence vault
Alnera Academy
Eleven programs including BGFE: certified training for SPK, BDDK, MASAK, KVKK and EU regulations. Anti-cheat quizzing, immutable result records.
- 11 programs (BGFE + 10 compliance tracks)
- Anti-cheat question shuffle + 70% pass threshold
- Certified result records (TTR immutable)
Ten modules, one platform
From audit to reporting, from evidence to workflow — every RegTech need under one product.
Evidence Management
Template → draft → official three-tier model, SHA-256 hash + timestamp.
Risk Register
Persistent risk management, heatmaps, RCSA processes and tolerance thresholds.
Control Library
800+ controls mapped to SPK/BDDK/DORA/ISO — pre-built frameworks.
Vendor Assessment
Third-party risk management, contract tracking, n-tier subcontractor chain.
Audit Planning
Annual calendar, responsibility assignments, overdue task alerts.
Action Tracking
Finding → action → closure loop, automated reminders and approval flow.
AI Assistant
Claude and GPT-4 powered Q&A, evidence matching, document summarization.
Reporting
Auditor packages, PDF/Excel export, KPI dashboards and executive reports.
Workflow Engine
Task assignment, approval chains, SLA tracking, automated routing.
API & Integrations
REST API, webhooks, LDAP/AD, DMS connectors and single sign-on.
Industry-specific, pre-configured
Regulation mix, control libraries and workflow templates pre-built for each industry.
Banking
BDDK IT systems audit, MASAK compliance and internal control automation. From tier-1 banks to participation banking.
Asset Management & Brokerage
SPK VII-128.10 and III-62.2 compliance, full annual audit readiness, encrypted auditor package.
Insurance
SEDDK IT audit, KVKK, actuarial data protection and sales channel compliance.
FinTech & Payments
Payment institution licensing, DORA readiness, e-money operations — fast growth, strict regulation.
SPK VII-128.10 IT Independent Audit Platform
We unified mandatory audit controls, evidence management and reporting under a single platform required by the Turkish Capital Markets Board. AI-powered evidence matching reduced manual workload by 70%.
Problem
Capital market institutions collect evidence for hundreds of controls each year, ship Excel + folder hierarchies to auditors, and rely on error-prone manual workflows.
Solution
AI-powered evidence matching, three-tier document model (template → draft → official), encrypted auditor packages, automated regulation-to-control mapping.
Result
Audit preparation time dropped from 6 weeks to 1. Every piece of evidence is verifiable via SHA-256 hash + timestamp.
Compliance stays within your borders
Unlike cloud-only competitors — runs on your servers, speaks your language, stays under your control.
On-Premise Deployment
Windows installer, up in 5 minutes on your own servers. Your data never crosses your borders, no cloud dependency. Embedded PostgreSQL, ready-made Docker image — no DevOps team required.
4-Language Parity
Turkish, English, Dutch, German — UI, documents, auditor packages and support at parity across all four. Local regulation, local language, local support.
Full Data Sovereignty
KVKK, GDPR and EU data residency compliant. Audit records hash-chained, WORM evidence vault, no one can touch your data — not even Alnera.
From strategic infrastructure to specialized solutions
We offer core IT services and advanced specialized solutions in two columns — together we pick the best combination for your business.
Core IT Services
The solid foundation of your digital infrastructure
Strategic IT & Digital Roadmap
We analyze your current stack and build a technology roadmap aligned with your business goals. Architecture decisions, modernization plan, investment prioritization.
Cybersecurity & Information Security
Penetration testing coordination, security architecture, vulnerability management, ISO 27001 / SOC 2 compliance consulting. Proactive defense.
Cloud & DevOps
Azure/AWS migration, Kubernetes + Docker, CI/CD pipelines, scalable infrastructure. Cost-optimized, secure deployment.
Systems Analysis & Consulting
Process mapping, system integration, performance optimization. We turn technical complexity into goal-oriented solutions.
Specialized Solutions
Deep expertise in regulation and AI
AI-Powered Enterprise Automation
We automate your business processes with Claude, GPT-4 and custom models. Document analysis, evidence matching, intelligent assistants.
Custom Software Development
Web + mobile apps, enterprise portals, MVPs. Modern stack: Next.js, FastAPI, PostgreSQL, Docker.
From uncertainty to clarity, in four steps
Every project goes through these four phases. Product decisions between phases are made jointly with you.
Discover
We listen to your need. We clarify existing processes, user types, regulatory constraints and success criteria. Output: written requirement map + priority matrix.
Plan
Architectural decisions, prototype screens, sprint plan and budget framework. We start building only after your approval.
Build
Live releases in 1-2 week iterations. Demo + feedback at the end of every sprint. Code, tests and documentation in the repo every day.
Iterate
We keep improving the product with real user data, metrics and feedback from production. Contracted support + feature development.
Netherlands-based, technology-focused
Alnera IT Consultancy B.V. — a consultancy studio registered in Amsterdam. We deliver fast, measurable and sustainable technology solutions for capital markets, banking, insurance and fintech. Few teams combine deep financial-regulation expertise with modern enterprise software craftsmanship — we do.
We work with honesty and true collaboration. Our clients' success is the foundation of a long-term technology partnership.
"We turn complex regulation into usable software."
We sell trust as much as technology
Building a long-term partnership requires trust first, results second.
Honesty & Transparency
We don't overpromise. We're two-way transparent about technical risk, cost and timeline — even when the news is bad.
True Partnership
We're an extension of your team, not a detached vendor. We don't take over the project — we build, run, and improve it with you.
Measurable Outcomes
Every engagement ends with concrete KPIs: reduced manual workload, shorter audit cycles, higher system availability. Results are delivered and reported.
Have an idea? A need?
Fill the form below and we will get back to you within 24 hours. All conversations are confidential.