We send customer info and invoices via WhatsApp, is this KVKK compliant, is it risky?

we were sending via whatsapp too... then we made a written policy and sitched to encrypted email

Encrypted email: ProtonMail or Outlook's protected message. Time-limited access can be set.

generally correct but one part is missing and tying to do this alone is the most expensive way.

i'm also curious if anyone does it differently.

We've heard this a lot, but it never happened like that for us. If the notification path is long, notifications don't arrive; missing notifications mean delayed incident detection.

When you try to change everything at once, nothing settles.

Let me summarize the topic, since several different answers were given. When making decisions, write down the worst-case scenario too, not just the best.

Hope this helps.

There's also a measurement aspect to this. If you don't write this down from the start, it leads to arguments later.

If I were you, I'd go this route.

Let me summarize the topic, since several different answers were given. Start with a small trial; don't commit to everything at once.

Just leaving this note, it might be useful.

I went through the same thing. When making a decision first look at what data you have on hand.

Let me summarize what's been said so far. If permission and scope aren't in writing, don't start that test.

This is my opinion, I'm not claiming it's absolute truth.

I disagree with you on this point. Any unwritten clause becomes a point of disagreement later as both sides remember it differently.

Hasty decisions become decisions you have to fix six months later. Good luck with that.

The cheap-looking path usually ends up costing more later. If you get three different answers on a topic, the question was asked wrong.

If I were you, I'd go this route.

Great work. Don't rely on a single measure; go layer by layer.

If the notification path is long, notifications don't arrive; missing notifications mean delayed incident detection.

I'll try it. Just because everyone does it doesn't mean it's right.

We need to make a distinction here. Everything goes well for the first three months; problems arise in the fourth.

That's all, sorry if I went on too long.

I think it's hard to be that definitive about data sharing via whatsapp. If permission and scope aren't in writing, don't start that test.

Just leaving this note, it might be useful.

My question might sound amateurish, sorry about that. People defend habits, not processes. Resistance comes from there.

Quick summary for newcomers: People defend habits, not processes. Resistance comes from there.

Proven by experience.

You're right.