Law No. 5651 Logging and Hotspot Solution for Hotels
Because they offer Wi-Fi to guests, hotels are mass-use providers under Law No. 5651 and must record every guest connection in a way that can be traced to a person. The right solution for a hotel does three things together: (1) a captive portal that binds the guest to a room/identity (SMS, form, room-no/surname, or PMS integration), (2) central and timestamped collection of firewall/DHCP/NAT records, and (3) retention of these records for the legal period with integrity intact. In hotels, PMS (property management system) integration additionally streamlines the guest experience; the guest connects seamlessly with their check-in details while records are kept in the background.
This page is for information only; consult the current legislation and a legal advisor for definitive obligations.
How is the captive portal set up in a hotel?
A user connecting to the guest Wi-Fi is redirected to the hotel’s login page before internet access. Verification can be by SMS code, by form, or with guest data from the PMS (e.g. room number + surname). The verified session is matched to internal IP and NAT records. For the SMS flow, see How does an SMS-verified captive portal work?
What does PMS integration add?
Integration with hotel management systems such as Elektraweb or Opera Cloud lets the guest connect without re-entering details and links authentication to the hotel’s existing records. This benefits both guest satisfaction and consistent logging.
Chain hotels and multiple locations
With multiple branches or locations, each location’s records must be collected centrally, consistently and synchronized to the same time source. Location-based reporting enables quick access to the right branch’s record during an audit request.
How is SignLogger used in hotels?
SignLogger brings together a captive portal with SMS/form/PMS verification, syslog collection from all brands, daily automatic signing of logs with the TÜBİTAK Kamu SM timestamp and e-signature, and Elektraweb/Opera Cloud integrations. It installs as a VMware/Hyper-V image. For the general obligation see Law No. 5651 log obligation, and for choosing software see the selection criteria guide. Explore the features or request a free demo.
Frequently Asked Questions
Must I always collect the guest’s Turkish ID?
Turkish ID is not the only method; SMS, form or PMS-based verification can also be used. Collected data must be processed in line with KVKK and limited to the purpose. [TO BE VERIFIED: accepted identification methods should be confirmed from the current legislation.]
Should room TV, IPTV or IoT devices also be logged?
Traffic from every internet-facing segment may fall within scope. In practice, guest and staff internet segment records take priority; assess according to your setup.
Is PMS integration mandatory?
It is not mandatory; SMS or form verification alone may suffice. PMS integration is a convenience that improves the guest experience and record consistency.
How long must I retain records?
Common practice is at least 6 months and at most 2 years; the exact period may vary by current regulation.
I have several branches — can I manage them with one system?
Yes; records can be collected centrally and reported per location. All devices must be synchronized to a common NTP source.