İYS (consent provider)

İYS (İleti Yönetim Sistemi, Turkey’s Message Management System) holds recipients’ consent for commercial electronic communications. For a purpose whose İYS check is required, Zitena asks the consent provider you configure for the customer’s CALL consent right before dialling. The consent provider is your İYS integrator or your own system; Zitena does not connect to iys.org.tr directly. The setting is on the Settings → Integrations → Consent provider (İYS) card (plan: Outbound calls).

Generic HTTP consent provider

Your İYS integrator or your own system only needs to expose an endpoint with this contract:

Consent query

GET https://consent.example.com/call-consent?telefon=%2B905321234567
Authorization: Bearer <access key>

{"durum": "ONAY"}

• durum: ONAY (consent) or RET (refused), case-insensitive. Any other value counts as unknown and the call is not made.
• The phone arrives as +90XXXXXXXXXX.
• A non-200 response, a timeout (5 s) or an invalid body counts as an error: the request is retried after 30 minutes; on the third error it is rejected with iys_erisilemedi.

Refusal report (optional, if a Refusal URL is set): when the customer says “don’t call me” during a call:

POST https://consent.example.com/refusal
Authorization: Bearer <access key>
Content-Type: application/json

{"telefon": "+905321234567", "durum": "RET", "kanal": "ARAMA"}

Field	Description
Consent query URL	Required. GET ?telefon=+905… → {"durum": "ONAY"}
Refusal URL	Optional. POST {telefon, durum: "RET", kanal: "ARAMA"}
Access key	Optional; sent as Authorization: Bearer …; write-only

If the Refusal URL is empty, no RET is reported; the number still goes on the do-not-call list.

There are also custom adapters for specific İYS middleware; contact support about the software you use.

Rules

• Without a consent provider, new requests for purposes that require the İYS check are rejected with iys_saglayici_yok.
• Consent is checked right before dialling, not when the request is opened, so a scheduled call is not made if consent was withdrawn in the meantime.
• Last line of defence: on a call that needs the İYS check, only ONAY starts the call.
• Error messages and logs never contain the phone number or the response body.

KVKK / İYS responsibility

For commercial purposes the İYS check is required by default. If you turn it off for a commercial purpose, legal responsibility for those calls lies with your company. The do-not-call list applies to every call regardless of the İYS setting. Pre-checks →