After Company Formation in Turkey: 2026 Compliance Checklist

Quick answer: A Turkish company does not have one universal compliance checklist that applies in exactly the same way to every business. The right 2026 framework is trigger-based: some duties start as soon as the company exists, while others arise only if the company hires employees, employs foreign personnel, processes personal data, carries on a regulated activity, exports goods, operates from regulated premises or enters another specific workflow.

This guide covers post-registration compliance. It focuses on what happens after the company is legally registered. For the incorporation process itself, use Company Formation in Turkey: Complete 2026 Guide.

Turkey Company Compliance 2026: Start With Triggers, Not One Flat Checklist

Operating rule: Company registration creates the legal entity. Operational compliance is the second layer and depends on what the company actually does.

Post-registration compliance should be mapped to the company’s actual operating triggers rather than treated as one identical checklist.

Always: Tax and Licensed Accounting Onboarding

Once a Turkish company is established, tax and bookkeeping obligations do not depend on whether the company has already generated revenue. The company should be onboarded with the appropriately licensed Turkish SMMM/CPA for the declarations, bookkeeping and statutory tax work required for its actual profile.

Do not use a universal sentence such as “every company files VAT every month and withholding tax every quarter.” Filing obligations depend on the company’s tax registrations, transactions and current legislation. A company with no activity can still have declaration or recordkeeping duties.

Workon coordinates the onboarding workflow where included in scope; regulated accounting and tax work is handled by the licensed professional.

Use the CPA/SMMM requirement guide to establish the professional arrangement, the bookkeeping workflow guide for daily records and month-end handoff, and the company tax calendar for recurring filing and payment cycles. Keep these tasks assigned separately in the post-registration plan.

Always: Keep the Registered Address and Company Records Consistent

The registered company address should remain consistent across the Trade Registry/MERSİS record, tax records and the company’s current operating documentation. If the company changes address, manager/board member, representation structure, capital or shareholding, the applicable corporate-change process should be completed instead of merely updating an internal document.

For address changes, use Change Company Address in Turkey.

Always: Maintain the Required Company Books and Records

Türkiye’s commercial-book framework changed materially for companies established from 1 January 2026. Under the electronic commercial-book transition, certain statutory company books for newly established companies are kept through the Electronic Commercial Book System (ETDS) rather than relying on an old “every book must always be a physical notarised ledger” rule.

The exact book set depends on company type and current Ministry of Trade rules. Do not copy a pre-2026 physical-book checklist into a new-company file without checking whether the relevant book is now electronic.

Always: Review Beneficial Owner Information

A newly established company should identify the natural person or persons who ultimately own or control the structure and ensure the required beneficial-owner information is reported through the applicable GİB framework.

After a share transfer, capital change or upstream ownership/control change, re-run the UBO analysis rather than assuming the old declaration remains correct.

See Beneficial Owner Declaration in Turkey: 2026 UBO Guide.

If You Hire Employees: SGK and Payroll Compliance Starts

SGK employer obligations are an employment trigger, not a universal requirement for every newly formed company on day one.

If the company hires employees, the workflow can include:

• employer/workplace registration where required;
• employee entry notifications before the applicable statutory deadline;
• payroll and wage records;
• social-security premium declarations and payments;
• working-time, leave and personnel-file records;
• employment-law documentation appropriate to the role and arrangement.

Do not state that every company director must automatically be registered as an employee. Shareholder, manager/director, payroll and social-security status should be assessed under the person’s actual legal capacity.

See SGK Employer Registration in Turkey.

If Foreign Personnel Will Work in Turkey: Analyse the Work-Permit Route Separately

Foreign ownership, company management and the right to work in Türkiye are separate issues. A foreign person does not obtain automatic work authorisation merely by becoming a shareholder, manager or board member.

Equally, do not apply a single “five Turkish employees for every foreign employee” sentence to every case. Current work-permit criteria can differ by applicant category, sector, role, company profile and applicable exemption or special route.

For a foreign founder or employee who will work in Türkiye, check the current Ministry of Labour criteria for the specific route before filing. A residence permit is not a substitute for a work permit.

For an employee’s application, use the general work-permit guide. A foreign shareholder who will actively work in the business should first check the company-owner eligibility guide, then the company-owner application process.

If You Process Personal Data: KVKK Compliance Depends on What You Process and Why

KVKK compliance is not solved by adding consent boxes everywhere. Personal-data processing should be mapped to the correct legal basis, transparency notice, retention practice, data-security measures, processor/vendor relationships and international-transfer rules where relevant.

Explicit consent is one legal basis, not the default basis for every processing activity. A company should first identify why it processes the data and which lawful basis applies.

VERBİS registration should also not be described as mandatory for every Turkish company. Current thresholds, exemptions and sector-specific rules should be checked against the Personal Data Protection Authority’s current decisions. Under the current exemption decisions, a controller whose main activity is not processing special-category personal data can qualify for the general small-controller exemption where it has fewer than 50 employees and an annual financial-balance-sheet total below TRY 100 million. A separate 2025 Board decision also created a narrower exemption for controllers whose main activity is processing special-category personal data where they have fewer than 10 employees and an annual financial-balance-sheet total below TRY 10 million. An exemption from VERBİS registration does not exempt the business from the KVKK itself.

International transfers changed materially from 1 June 2024. Under the current Article 9 framework, Turkey has not yet designated an adequacy country. Where an adequacy decision is unavailable, an ongoing transfer should therefore be tested against the current appropriate-safeguard routes, such as the Board’s standard contracts, binding corporate rules or another legally available safeguard. A signed standard contract must be notified to the Authority within five business days. Explicit consent remains relevant only within the conditions allowed by the law and should not be presented as the routine default for continuing international data flows; the statutory derogations are designed for incidental transfer cases.

GDPR documentation can be useful background for an international company, but it should not be assumed to automatically satisfy KVKK.

KVKK compliance begins with a data-processing map and the correct legal basis, not blanket consent.

If You Need e-Fatura, e-Arşiv or Other e-Documents

Do not assume every company must join every GİB e-document system immediately after formation. e-Fatura, e-Arşiv and related obligations depend on current thresholds, sectors and specific regulatory conditions.

A company should check its e-document status when it begins invoicing, reaches a relevant threshold, enters a covered sector or receives a specific regulatory trigger.

See E-Invoice Registration in Turkey.

If You Open a Corporate Bank Account: Banking Compliance Is Separate

A Turkish company’s legal registration does not guarantee bank-account approval. Banks perform their own KYC/AML review of the company, beneficial owners, representatives, source of funds, expected activity and transaction profile.

After account opening, the company should keep transaction-supporting documents consistent with its business model and accounting records. There is no responsible basis for saying every foreign-currency inflow/outflow follows one universal CBRT reporting process at the customer level.

For account-opening mechanics, use How to Open a Business Bank Account in Turkey.

If You Import or Export Goods: Customs Compliance Becomes Relevant

Import/export compliance is not triggered merely because a company’s Articles of Association mention foreign trade. It becomes operational when the company actually moves goods across borders.

The real checklist can include:

• correct GTİP/HS classification;
• commercial invoice and transport documentation;
• origin/preferential-origin documents where applicable;
• product-specific conformity or ministry controls;
• licensed customs-broker coordination where used or required;
• exporter-association or other sector registrations where applicable.

Not every export needs a special “export licence.” Controlled goods, regulated products and specific destinations can create additional permissions.

See How to Register as an Exporter in Turkey.

If You Operate From Regulated Premises: Check Municipal and Activity Licences

A registered business address and an activity licence are different things. Some service businesses can operate from ordinary office premises, while restaurants, healthcare, education, manufacturing, retail, logistics and other regulated activities can require additional premises approvals, workplace-opening licences or sector-specific permits.

Before signing a long lease or fitting out premises, confirm whether the planned activity creates a zoning, building-use, fire, hygiene, equipment or regulator requirement.

If You Use a Virtual Office: Check Activity Suitability, Not Just Address Legality

A virtual office can be suitable for many service, consulting, software and trading businesses, but it should not be marketed as universally suitable for every activity. Some activities require physical premises or specific licence conditions.

For address suitability, use Registered Business Address in Turkey.

Workon coordinates company setup and operational-readiness workflows according to the company’s actual compliance triggers.

What Is Not Automatically Required for Every Turkish Company?

First 30 Days: A Practical Post-Registration Review

1. Confirm registered company/address/representation records are correct.
2. Complete licensed SMMM/CPA onboarding and confirm the actual tax/declaration profile.
3. Review beneficial-owner reporting and ownership documentation.
4. Confirm which statutory books/records are electronic under the 2026 framework.
5. Prepare corporate bank-account KYC documentation if banking is needed.
6. Decide whether employees will be hired and trigger SGK/payroll setup if so.
7. Decide whether any foreign founder/employee will work in Türkiye and assess the work-permit route.
8. Check whether the business activity requires a licence, physical premises or regulator approval.
9. Map personal-data processing and KVKK duties.
10. Check e-document obligations before invoicing at scale or entering a covered activity.

Ongoing Compliance Calendar: Build It Around Events

A useful compliance calendar should combine recurring tax/corporate tasks with event-driven alerts.

How Workon Supports Post-Registration Readiness

Workon supports foreign founders and overseas companies with business setup, workspace and operational coordination in Türkiye. Depending on the agreed scope, this can include registered-address/workspace coordination, company-document sequencing, licensed SMMM onboarding, bank-account application preparation, work/residence-permit coordination, KEP/e-signature readiness and related operating requirements.

Regulated legal, tax, accounting, customs, trademark and other professional work is handled by the appropriately licensed professionals. Banks, regulators and public authorities retain their own review and approval powers.

Review Workon’s company registration and operational coordination service.

Official Reference Points

• Turkish Revenue Administration (GİB)
• Social Security Institution (SGK)
• Ministry of Labour and Social Security
• Personal Data Protection Authority
• KVKK Authority — current international-transfer framework
• KVKK Authority — current VERBİS exemption criteria for special-category-data controllers
• Ministry of Trade

Frequently Asked Questions

Disclaimer: Last reviewed 17 September 2026. This trigger-based checklist provides general information about post-registration company compliance in Turkey and does not replace company-specific legal, tax, accounting, employment, immigration, data-protection, customs or regulatory advice. Verify each operational trigger against current official rules and appropriately qualified professionals.