What's happening today

Records that can't be produced on demand = violations

When the auditor asks for the last seven days of temperature logs, not finding the file has the same effect as never having logged at all.

The event chain is broken

The temperature form is in one folder, the intervention note on WhatsApp, the closure proof in Excel. Auditors say 'the records exist but I can't see the chain.'

The same finding returns

A corrective action is opened, sent to maintenance over WhatsApp, forgotten. The next inspection writes up the same finding a second time.

Event → Action → Closure

01 Event

Open a finding with photo, location, and responsible department.

The quality lead, chef, or internal auditor opens it from one screen. It is routed automatically to the right role.

Quality Lead / Chef / Internal Auditor

Yeni Olay

Fotoğraf

Lokasyon

Ana Mutfak

Sorumlu Departman

Hijyen Ekibi

Olayı Aç

Tablet — New event form

02 Action

Assignee gets a link, records the response in one tap.

No login required. Take a photo, write a short note, confirm. Kitchen staff don't have to learn a new tool.

Assignee (Kitchen / Storage / Maintenance)

09:14 Müdahale

Olay #1021

Açıklama

Alan temizlendi, yağ kalıntıları uzaklaştırıldı.

Kaydet ve Onayla

Mobile — Action recorded

03 Closure

Verification + audit-ready evidence package, generated.

The quality lead verifies; the system produces the PDF and chain summary. When the auditor arrives, share it with a single link.

Quality Lead / Internal Auditor

Olay #1021 · KAPATILDI

Olay Bilgileri

Lokasyon: Ana Mutfak

Departman: Hijyen Ekibi

Zincir Özeti: 7f0a3c2b8e9d…

PDF İndir

PDF 📄

Laptop — Evidence package PDF

Modules — the audit chain end to end

Around the Event → Action → Closure chain

1
Event

Photo, location, department — event opened.
2
Assign

Link sent to the responsible person.
3
Action

Photo, note, confirmation.
4
Verify

Quality lead verifies.
5
Evidence

PDF + chain summary generated.
6
Share

One link, shared with the auditor.

One Screen

Simple to use

No Login Required

Fast and practical

Audit-Ready

Full traceability

Secure and Transparent

Verifiable with chain summary

Modules — the audit chain, end to end

The Event → Action → Closure chain surrounded by 8 modules. Each opens and closes independently; the sysadmin panel shapes the starting scope for the pilot facility.

01

Event → Action → Closure (CAPA)

Lead · Chef · Auditor

The product's core module. Open a nonconformity, the assignee responds via login-free link, the quality lead closes it. Immutable in the HMAC chain.

ISO 22000 §10.2 · Turkish Law 5996

02

Evidence Package + Auditor Link

Lead · Auditor

PDF package by date range and audit schema. Share a 3-day read-only link with the auditor; they review before walking in.

ISO 22000 §9.2 · Law 5996 on-demand production

03

Production Log + Lot Traceability

Chef · Lead

Which meals used this chicken lot today, and how many portions? Recall questions answered in 3 seconds. Day × meal × dish × opened lots.

Law 5996 §9 · Turkish Food Codex · ISO 22000 §8.3 · EC 178/2002

04

Document Library (cross-module)

Lead · Auditor

Certificates, reports, minutes, policies — one search across 6 sources. The 'where is that document?' reflex has an answer; no more six-tab hunting.

ISO 22000 §7.5 · Law 5996 §21

05

Micro Training Module

Lead · Staff

HACCP internal training + allergen + onboarding + post-incident refresher. Send links to staff via WhatsApp/email; login-free quiz; completion tracking.

ISO 22000 §7.2 · Law 5996 §22

06

Supplier + Multiple Certificates + Goods Receipt

Lead · Procurement

ISO 22000 + HACCP + Halal + Ministry manufacturing license tracked separately; each certificate's expiry monitored; earliest expiry surfaces on the dashboard.

ISO 22000 §8.4 · Law 5996 · Turkish Food Codex

07

HACCP CCP/PRP + Plan Approval

Lead · FS Consultant

Hazard analysis, critical control points, prerequisite programmes. Plan approval is stage-gated; approved plans are immutable snapshots.

ISO 22000 §8.5 · Codex Alimentarius

08

Personnel Hygiene + Health Records

Lead · HR

Hygiene training certificate (8-hour statutory) with 30-day expiry badges; health reports + carrier examination (field-level encryption, KVKK Article 6 special personal data).

Law 5996 · Hygiene Training Regulation · Law 1593 · KVKK Art.6

Product tour

From the live product — pilot demo tenant with sample data. The dashboards a food safety lead lives in every week.

Food safety lead dashboard — audit readiness score + urgent action list — 01

Lead dashboard — the day's priority in 30 seconds

Audit readiness score (0-100) plus sub-scores for open events, CCP verifications, document expiries and KVKK consent coverage. Below: urgent action list — personnel certificate expiries, unread HACCP plan, supplier certificate, equipment silent for 24 hours.

Inventory dashboard — limit breaches, missing readings, calibration, cleaning — 02

Inventory & Reading Dashboard — today's four questions

Any limit breaches today? How many pieces of equipment are missing a reading? How many are past due on calibration? Was the cleaning checklist run? The lead sees the answer at a glance and taps the action card.

In-house micro-training modules — 7 seeded titles — 03

In-house training modules — 7 regulation-backed modules out of the box

Allergen management (TFC Annex 2) · Infectious disease reporting · HACCP CCP intro · Cold chain · Cleaning SOP · New-hire orientation · Cross-contamination. These do NOT replace the statutory 8-hour hygiene certificate — they are ISO 22000 §7.2 in-house training records. Bulk assignment + automatic email/WhatsApp delivery + delivery tracking.

HACCP plan — hazards list + critical control points — 04

HACCP plan — hazards + CCPs + monitoring + verification in one place

Salmonella, E. coli, Listeria, allergen cross-contact and other hazards (biological/chemical/physical) with severity & likelihood. Each hazard linked to a CCP: critical limit, monitoring method, responsible role, verification frequency. Digital counterpart of ISO 22000 §8.5 and Codex Alimentarius HACCP 7 principles.

Screens rendered from sample data; no real person-specific data is shown. Contact us for a live demo with your own facility data.

Built for these audits

The same corrective action record is packaged in the schema each auditor expects.

Turkish Ministry of Agriculture (Law 5996): Official control. Digital + PDF evidence format for the on-demand production obligation.
ISO 22000: Certification and annual surveillance audits. Aligned one-to-one with Clause 10.2 (nonconformity + corrective action).
Tour operator hygiene audits: Separate-schema packages for Cristal, Diversey Check, Bureau Veritas, HTV, and other operator auditors.

Differentiation

Built for the reality of Turkish resort kitchens: regulation-specific, offline-first. Global SaaS tools are weak on regulation/language/data residency; Excel and paper cannot mend a broken chain.

	Evidras	Global SaaS (SafetyCulture/Jolt)	Excel + paper
TR regulation (Law 5996 · Food Codex · Hygiene Reg.)	Built-in	Partial/manual	Manual
Turkish UI + support	Native	English	—
KVKK/GDPR + DPA + data residency (TR)	TR + EU Hetzner	US/EU	Unclear
On-prem option	Day-1 architecture	SaaS-only	—
Auditor read-only link (3-day)	Evidence package + link	Read-only user
Lot traceability (dish × meal)	Production Log	Manual	Excel
Price (300-room hotel)	₺15-25K/month	$500-2500/month (~₺15-75K)	KS time + missing-record fine risk
Internal micro training + completion tracking	7 system-seed modules	3rd-party LMS

Pricing — by facility size

Monthly subscription per facility. Unlimited users. In boutique–mid tiers, setup and onboarding are included in the subscription (2-3 hour KS site visit + one week of tenant configuration). In large and mega tiers, setup, implementation and process reporting are separate line items negotiated with the customer.

Boutique

up to 100 rooms

₺6,000 – 8,000 / month

All modules
Unlimited users
Email support (48 h)
Monthly backup (30-day retention)

Mid-size

100 – 300 rooms

₺15,000 – 25,000 / month

Boutique features +
Priority support (24 h)
WhatsApp channel
Quarterly pilot check-in

Most common pilot band

Large

300 – 800 rooms

₺40,000 – 60,000 / month

Mid-size features +
SLA 4h critical incident
Monthly KS check-in
IoT sensor integration (on request)

Mega Resort

800+ rooms

Custom quote

Large features +
On-prem option
Custom SLA agreement
Group cross-tenant panel

Pilot: 1st facility 90-day POC for a nominal ₺25,000 fee. A successful POC becomes credit on the annual contract; if the pilot fails, the POC fee is refunded.

Prices calibrated 2026-08; the final figure is set in pilot negotiation. VAT excluded.

Frequently asked

How are you KVKK-compliant? Where is data stored?

Data processor agreement (DPA) is standard. SaaS uses Hetzner Germany (EU — GDPR equivalent protection). The on-prem option keeps data inside the facility. Personnel health data (KVKK Art.6) is protected with field-level encryption (Vault); access is role-based and audit-logged.

Should I choose on-prem or SaaS?

SaaS: fast start, maintenance/backup handled by Evidras. On-prem: data stays inside the facility; enterprise IT policies may require this. Day-1 architecture supports both modes; the code is identical, the deployment decision is separate.

How long until we're up and running?

Founder onboarding is a 2-3 hour KS site visit plus one week of tenant configuration (staff + suppliers + menu seed). The first records can be entered the same day; full activation takes 2-3 weeks.

Our kitchen staff have low digital literacy — will they use it?

The core module has 44px tap targets and one-hand mobile input. The chef's shift walk (50 devices × 3 shifts) auto-completes last values. Staff get login-free links (intervention + training quiz). None of the SafetyCulture-style learning curve.

Do you issue the statutory 8-hour hygiene certificate?

No. The statutory 8-hour certificate (Law 5996 + Hygiene Training Regulation) is issued by authorized institutions (Public Education, university-approved courses, Hijyen Akademi). Evidras runs company-internal training (ISO 22000 §7.2) and tracks the expiry of the statutory certificate.

How does pricing work? Is there a setup fee?

Monthly subscription per facility (boutique ₺6-8K → mega custom quote). Unlimited users. In boutique–mid tiers, setup is included in the subscription; in large and mega tiers, setup, implementation and process reporting are separate line items negotiated with the customer. Pilot: 1st facility 90-day POC for a nominal ₺25,000 fee; a successful POC becomes credit on the annual contract. Final numbers are set in pilot negotiation.

Do you issue ISO 22000 certification?

No — Evidras is not an ISO 22000 certification body (unlike BSI/TSE/Bureau Veritas). The product produces the evidence package to prepare for certification and surveillance audits. You need a separate agreement with a certification body for your certification application.

If the system fails, will we lose data?

Daily pg_dump + 30-day retention (off-site backup unlocks on the 4th pilot trigger). The HMAC chain is append-only; retroactive changes are auditable. No 5-9s SLA yet — 99.5% target at pilot scale.

Trust foundations

Immutable record chain

Every record is signed with HMAC-SHA256 and embeds the previous record's signature. Retroactive changes are detectable in audit.

Read-only auditor access

Share a read-only package link, valid for three days before the audit. Auditors can review the data before walking in.

GDPR/KVKK-aligned storage

Data processor agreement is standard. Retention policy follows regulation; clear documentation for user accounts and audit logs.

About Evidras

A product built by a solo founder with a consulting network.

Shaped iteratively with pilot facilities. We don't manufacture hardware; the architecture is open to integration with the measurement devices you already use.

Request a demo

Let's review your facility's audit readiness flow together in a short call. No commitment required before the demo.

A kitchen ready for inspection, every day.