Security & trust
What we have, and what’s in progress
Answers to the questions security reviews ask first. If we have it, we say so. If it’s in progress, we say that too.
At a glance
Seven things security teams check first, with where each one stands today.
| Item | Status | Detail |
|---|---|---|
| Telecom licences | Held | Facilities-based carrier, No. 1-01-25-0027 · Special-category value-added telecom operator, No. 3-01-25-0010 |
| Patent | Granted | AI agent contact center integrated with booking platforms · Korean Patent No. 10-3022994 (2026) |
| Recording retention | In effect | Call recordings are kept for 12 months, then destroyed. |
| Where data is processed | Processor list coming | Runs on AWS. Parts of speech recognition and AI processing are entrusted to external AI providers, including transfers outside Korea. |
| Data retention & deletion | Public policy in progress | Internal retention and deletion procedures are in place. A public version is being prepared. |
| ISMS-P | Target: H1 2027 | Korea’s information security and privacy certification. |
| ISO 27001 | In preparation | The international standard for information security management. |
Status as of October 2026.
How we handle your data
Three commitments that hold today, while our certifications are in progress.
- 01
We run the line and process call data for you
As a licensed telecom operator, Flover carries your calls and processes call data on your behalf, to deliver the service you set up.
- 02
We say who else handles it
Processors and overseas transfers are disclosed in our privacy policy, which we are updating now.
- 03
Recordings don’t stay forever
Call recordings are kept for 12 months, then destroyed.
Certification roadmap
Where we are now, what we are preparing, and the certification we are working toward.
Now
Held and granted
- Two Korean telecom licences
- Patent No. 10-3022994
- 12-month recording retention
In progress
Being prepared
- Public data retention and deletion policy
- Processor and overseas transfer list
- ISO 27001
Target · H1 2027
ISMS-P certification
- Korea’s information security and privacy certification
Need our security questionnaire answered?
Send us your questionnaire. We’ll answer with what we have today and what’s in progress.
Flover Inc. (formerly Drop Studio) · Business registration No. 165-81-02191 · Facilities-based carrier No. 1-01-25-0027 · Special-category value-added telecom operator No. 3-01-25-0010
Let’s go through your requirements
Tell us what your security and compliance teams need before you build on Flover.