A trail for every file, assurance for every process: Filezonia — the ISO-compliant corporate quality and document control platform.
From the quality manual to contracts, from personnel records to audit files, every document lives in one hierarchy with a record of who did what and when. It runs on an isolated server dedicated to your company; it verifies the real identity of every uploaded file, seals every action in a cryptographic chain and calculates legal retention periods itself. When the auditor arrives, you produce a traceability report in one click.
- Dedicated isolated server or your own on-premises server
- No per-user fees
- Setup, penetration test and training by our engineers
Filezonia is the corporate quality and document control system developed by Piküp Medya. It is not a file-sharing tool: it is a management platform that carries the ISO 9001, ISO 27001 and ISO 15489 rules inside it and brings document classes and retention periods pre-configured for your sector.
Your data never enters a cloud pool shared by thousands of companies. It runs on a server dedicated to your company in Piküp Medya’s isolated infrastructure, or on your own on-premises server if you prefer. Setup, penetration testing, branding and staff training are delivered turnkey.
Three weak points of shared folders, closed on one platform.
No trail
In a shared folder nobody knows who changed or deleted a document. Filezonia chains every action to the previous one cryptographically; a retroactive change breaks the chain and raises an alert.
Fake files get in
Ordinary systems only look at the extension; executables disguised as .pdf slip through. Filezonia reads the first bytes of the file, verifies its real type and stops dangerous content before it is written to disk.
Audit stress
Folders are tidied by hand before an ISO audit. Filezonia keeps revision tracking, controlled distribution, approval flows and destruction records in the system; you hand the auditor a report in one click.
Security is not an add-on; it is the foundation of the architecture.
Everything below ships built into Filezonia 1.0; there are no extra modules or licences.
Deep file analysis (magic bytes)
The first bytes of every upload are read and cross-checked against the extension. Extension spoofing, hidden executables and ransomware are blocked at the source.
Immutable audit chain
Every document action, session and permission change is linked to the HMAC SHA-256 digest of the previous record. Even a database administrator cannot delete logs without a trace; a broken chain is reported instantly.
ISO 15489 WORM archive
Legal retention periods for financial, legal and personnel records are calculated automatically; nothing can be deleted before expiry. One-click Legal Hold during litigation, committee-approved digital destruction record at the end.
End-to-end drag & drop
Rebuild the hierarchy by dragging branches in the folder tree, drop multiple files from the desktop, approve or reject on the Kanban board. One move instead of forms.
8 sector taxonomies
Healthcare, finance, manufacturing, construction, logistics, legal, holding and SME. Pick your sector at setup; the ISO folder tree, document classes and document code template are generated automatically.
White-label corporate identity
Logo, colour palette, company name and department hierarchy are applied at setup. Holding and subsidiary structures are supported.
Role-based access and multi-factor login
RBAC with 6+1 roles, a zero-trust approach, RFC 6238 TOTP verification and IP/browser fingerprinting. Permission changes are written to the audit chain too.
ISO 9001 revision and distribution
Revision tracking, controlled document distribution, approval flows, destruction records and dynamic watermarking; a one-click traceability package for the auditor.
KVKK / GDPR data protection
Automatic masking of sensitive fields such as national ID and IBAN, right-to-be-forgotten protocols and IP logging.
Object storage and deduplication
MinIO S3-compatible object storage; duplicate copies are deduplicated and WORM protection is enforced at the storage layer.
Delivered with a penetration test
Before go-live the system is tested with port scans, brute force, reverse engineering and SQL injection scenarios and delivered with a report.
Hands-on training and manual
Live orientation training for administrators and staff; a detailed user manual is available as PDF.
Pick your sector and your quality folders arrive ready.
The ISO taxonomy, document classes and code template are generated automatically for the sector selected at setup.
- Manufacturing & industry
- Healthcare & medical
- Finance & banking
- Construction, infrastructure & energy
- Logistics & foreign trade
- Legal & consulting
- Holdings & subsidiaries
- SMEs
Face the auditor prepared.
A ready rule set for each standard is built in; when TÜRKAK, BSI, TÜV or an independent lead auditor arrives, the compliant output is produced with one key.
ISO 9001:2015
Revision tracking, controlled document distribution, approval flows and destruction records.
ISO 27001:2022
Magic-byte intrusion blocking, role-based access (RBAC 6+1), zero-trust security approach.
ISO 15489-1
Write Once Read Many protection; non-deletability, timestamping and an immutable audit chain.
KVKK & GDPR
Automatic masking of sensitive fields, right-to-be-forgotten protocols and IP logging.
ISO 45001 & 14001
Risk analysis forms, near-miss reports and hierarchical management of environmental waste documents.
BDDK & HIPAA
Data loss prevention (DLP), session timeouts, multi-factor authentication and immutable audit logs.
No confusing tariffs: a dedicated server and a clear investment.
Instead of per-user bills that multiply, hidden module extras and shared-cloud risk, a transparent three-step model.
A dedicated, independent server for your company
Your data lives only on an isolated server reserved for you: in Piküp Medya’s high-security data centre or, if you prefer, on your own on-premises server.
- Data sovereignty stays with you
- Encryption keys dedicated to your company
One-time setup and software licence
The corporate licence and the turnkey setup branded to your identity are paid once, in the first year only. When your team grows from 20 to 500 people, no per-user invoice follows.
- Unlimited users and departments
- All modules and capabilities included
Fixed annual development and server fee
In the following years you pay a single annual service fee covering hosting, daily backups, the security shield and continuous development and regulatory updates.
- Fixed budget, no surprises
- 7/24 Piküp Medya engineering support
There is no public list price: your file volume and user structure are analysed, and the right server capacity with a transparent investment plan is presented within 24 hours. All requests are protected under NDA.
Turnkey go-live in three steps.
Setup, server configuration, penetration tests and staff training are carried out by the Piküp engineering team.
- 1
Needs and security discovery
Your ISO standards, file volume and user profiles are analysed; whether to use an on-premises server or Piküp Medya’s private cloud is decided together.
- 2
Isolated setup and penetration test
A fully isolated system is brought up; magic-byte protection, the HMAC SHA-256 audit chain and intrusion resilience are tested and sealed.
- 3
Go-live and 7/24 assurance
Administrators and users are trained; the system is delivered fully operational and ready for regulatory audits from day one.
- Piküp Medya server infrastructure
- Isolated Docker (multi-stage Alpine)
- PostgreSQL 16 + MinIO WORM S3
- HMAC SHA-256 cryptographic audit chain
- White-label dynamic branding
- Version 1.0.0
What people ask before deciding
Who builds Filezonia?
Filezonia is the own product of Piküp Medya, based in İzmir, Türkiye. Setup, server isolation, penetration tests and staff training are delivered turnkey by the Piküp engineering team; the portal runs at app.filezonia.com.
How is it different from file-sharing tools?
Filezonia is not a shared folder but a quality and records management system: ISO 9001/27001/15489 rule sets, revision tracking, approval flows, legal retention periods, WORM archive and an immutable audit chain come built in.
Where is my data stored?
Only on an isolated server dedicated to your company: in Piküp Medya’s high-security data centre or, if you prefer, on your own on-premises server. There is no shared multi-tenant database.
How does pricing work?
There is no per-user licence. A setup and software licence paid once in the first year, then a fixed annual fee covering hosting, backups, security and development. There is no public list price; a tailored quote follows within 24 hours of discovery.
How many users can I add?
Unlimited. As your team grows there is no additional licence invoice per user or department; all modules and capabilities are included from day one.
How does it stop files with fake extensions?
The first bytes of every upload are read and cross-checked against the extension (magic-byte check). Executables disguised as .pdf or .docx are blocked before they are written to disk.
Are the audit records really immutable?
Each record is chained to the HMAC SHA-256 digest of the previous one. A retroactive change breaks the chain and the system raises an alert; even a database administrator cannot delete records without a trace.
How long does setup take, is there training?
After discovery, the isolated setup and penetration test are done by our engineers, followed by live orientation training for administrators and users. A detailed user manual is provided as PDF.
Which standards have ready rule sets?
ISO 9001:2015, ISO 27001:2022, ISO 15489-1 (WORM), KVKK/GDPR, ISO 45001 & 14001 and BDDK/HIPAA. Selecting the sector brings the matching folder tree and document classes automatically.
Start a discovery and demo tailored to your company
Let’s analyse your file volume and user structure together; we present the isolated server capacity and a transparent investment plan within 24 hours. Protected under NDA.