An AI or SaaS venture may develop its own code, incorporate third-party software and models, and send customer data to external infrastructure. Each choice raises a distinct question about its ability to offer the resulting service. I examine how Turkish copyright rules establish the scope of protection and the venture’s authority to use software, how Article 9 KVKK governs cross-border personal-data flows, and how upstream licences condition distribution and network use. I then consider when the EU AI Act applies to a venture established in Türkiye and how its role determines the relevant duties and application dates. The analysis links those questions through the development and deployment of a single service: software rights, permission to process and transfer personal data, and regulatory responsibility each require their own legal basis.
Keywords: Artificial intelligence law; SaaS; Software copyright; Software licensing; KVKK Article 9; AGPLv3; EU AI Act
DOI: https://doi.org/10.5281/zenodo.23896353
Related notes on this site
- Intellectual property, cross-border data transfers and contractual structure in AI and SaaS ventures under Turkish law.
- Open-source licence compliance and investment due diligence in software and AI projects under Turkish law.
- Extraterritorial scope of the EU Artificial Intelligence Act: implications for Türkiye-based software and AI ventures serving the EU market.
Licensed under CC BY 4.0. This working paper provides scholarly and general information; it is not legal advice on a particular transaction.