Sign up

• Terms of Use Terms of Use

  Chapter 1 General Provisions Article 1 (Purpose) These Terms set out the conditions and procedures for using the services of the eiso AI Management System Platform website (eiso.co.kr, hereinafter the "Website") operated by AGENT Co., Ltd (hereinafter the "Operator" or the "Seller"), and the eiso passes (rights to write documents with AI functions) sold by the same company, as well as the rights and obligations of users, the Operator and the Seller. Article 2 (Operator and Seller) 1. The operator and the seller are both AGENT Co., Ltd. The operator runs and provides the website, member services, the Library (information collection), and the AI functions (management system establishment and operation, preparation of training materials, and so on). As the seller, it is the party to the sales contract for the eiso pass, the receipt of payment, the issuing of receipts and invoices, and cancellations and refunds. 2. The operator also provides the Library materials, the reference materials used by the AI functions, and the management system support and training guidance. The operator does not sell documents (files) separately. eiso does not belong to any particular certification body and operates independently; certification audits and certification decisions are made independently by the certification body the company chooses. 3. Operator and seller information: AGENT Co., Ltd; Representative: Lee Hyo-mi; Business registration number: 113-81-80099; Mail-order business report number: (report in preparation; to be entered after reporting); Address: 222, Building 1, 40 Yongmeori-gil, Tangjeong-myeon, Asan-si, Chungcheongnam-do, Korea; Hosting service provider: Cloudflare, Inc. 4. Contact: AGENT Co., Ltd, email eiso@eiso.co.kr. Article 3 (Definitions) 1. "User": a member or non-member who accesses the website and uses the services under these Terms. 2. "Member": a person who has agreed to these Terms, registered as a member and received an ID. 3. "Document set": a management system documentation pass shown for each standard in "eiso Pricing". It is the right to use the AI functions to prepare the manual, procedures, guidelines and forms for that standard (in Korean, English or Vietnamese). It is not the sale of documents (files). 4. "Pass": the right to prepare documents with the AI functions for the number of standards or items paid for (by number of items for Training Materials and Lesson Plans, Individual Document Development and Management System Operation; by standard for Management System Documentation (document set), Integrated Management System Document Development and Standard Revision Response). 5. "AI output": a draft of a document, training material, lesson plan or answer produced by an AI function. Article 4 (Posting and Amendment of the Terms) 1. The operator posts these Terms on the website. 2. When the Terms are amended, the effective date and the reason for the change are announced from 7 days before the effective date. Amendments that are unfavorable to users are announced from 30 days before the effective date and notified to members by email. 3. A member who does not agree to the amended Terms may withdraw from membership. The Terms in force at the time apply to purchase contracts already concluded. 4. Matters not covered by these Terms are governed by relevant laws and regulations, including the Act on Consumer Protection in Electronic Commerce and the Act on the Regulation of Terms and Conditions. Chapter 2 Members Article 5 (Membership Registration) 1. Registration is free of charge. You become a member immediately after completing the registration form and agreeing to these Terms and the Privacy Policy. 2. The operator may refuse a registration or cancel it later in the following cases: another person's information was used, false information was provided, or a person who lost membership status for violating these Terms registers again. 3. This website is a service for those in charge at businesses and organizations. Children under 14 years of age cannot register as members. Article 6 (Member Information, ID and Password) 1. Members must update the information given at registration when it changes. The operator is not responsible for any disadvantage caused by failure to update it. 2. Members manage their own ID and password and may not lend or share them. Multiple staff members of one company register separately. 3. A member who learns that their ID has been misused must change the password immediately and notify the operator. 4. The operator protects users' personal information in accordance with the Privacy Policy. Article 7 (Withdrawal and Loss of Membership) 1. A member may request withdrawal by email at any time, and the operator processes it without delay. 2. On withdrawal, any remaining passes expire. When a withdrawal is requested, the operator informs the member of the remaining passes, refunds those that can be refunded under Article 16, and then processes the withdrawal. 3. The operator may restrict use or terminate membership if a member falls under any of the following: a reason under Article 5, paragraph 2 comes to light; a prohibited act under Article 18 is committed; or materials are downloaded in bulk with automated programs or the AI functions are abused. Chapter 3 Services Article 8 (Content of the Services) The operator provides the following services. Details, prices and usage counts are as stated on the relevant screens of the website. 1. Library (information collection): free for members (a daily download limit applies per person). 2. AI functions: Find ISO Reference Materials (free for members); Training Materials and Lesson Plans; Management System Documentation; Integrated Management System Document Development; Standard Revision Response; Individual Document Development; the 20 steps of Management System Operation (payment is made when "Write with AI" is clicked) and, for using only the internal audit step among them, the single-use internal audit pass (one standard, 30 days from the first day of use); and AI Management System Operation (ISO/IEC 42001, 10 steps, platform pass; payment is made when "Write with AI" is clicked). 3. The website guidance chatbot, frequently asked questions, questions and answers, and Management System Establishment and Training Inquiries. 4. Guidance and application screens for the passes (rights to prepare documents) sold by the seller. Article 9 (Hours of Use and Suspension) 1. As a rule, the services are provided 24 hours a day, all year round. However, they may be temporarily suspended due to maintenance, equipment failure, or a failure or exceeded limit at an AI service provider. 2. The AI functions have a daily usage limit per member and for the website as a whole. 3. If the services are to be suspended for a long period or terminated, this is announced 30 days in advance, and the seller refunds the remaining passes. Article 10 (Nature of AI Output) 1. AI output is a draft for reference. Users must review, revise and approve it to suit their own organization before using it. 2. AI output does not guarantee obtaining certification or any certification result. 3. Content entered into the AI functions is used only to produce drafts and is not stored on the website. Its processing follows the Privacy Policy. Users must not enter other persons' personal information or trade secrets. 4. The website indicates on screen that output was produced by AI. When users release AI output externally, they may be required to disclose that it was produced by AI under relevant laws and regulations, such as the Framework Act on the Development of Artificial Intelligence and Establishment of Trust. Article 11 (Impartiality) 1. To safeguard impartiality, at eiso the operator does not artificially prepare or review the documents of individual companies, and staff provide guidance on how to use the services and on prices. Implementation consulting and training are discussed, contracted and provided separately from eiso through "Management System Establishment and Training Inquiries". 2. Whether or not the services are used has no effect on the certification audit or decision of any certification body. Chapter 4 Purchase and Payment Article 12 (Purchase Contract) 1. Users either pay by agreeing to the price shown when they click "Write with AI" in each function, or apply for a pass using the application form in "eiso Pricing" (bank deposit). 2. The purchase contract is concluded between the user and the seller, at the time the card or simple payment is approved or the seller confirms the deposit. 3. The seller may decline an application whose content is false or unclear, and refunds any money already received. Article 13 (Prices and Payment) 1. Prices are as stated in "eiso Pricing" and are excluding VAT. Card and simple payment amounts include 10% VAT. 2. Payment is made by card or simple payment (PaySsam) or by deposit to the seller's Korean bank account. Items priced in Vietnamese dong (VND) are paid only by bank deposit (international remittance). 3. Korean won and Vietnamese dong are calculated separately, and the remittance fee is borne by the sender. Article 14 (Receipts and Invoices) The seller issues a receipt, tax invoice or cash receipt, as chosen by the user on the application form, and sends it by email. Article 15 (Provision) 1. Once payment is confirmed, the pass is opened immediately on the member ID that made the payment, and the user prepares documents with that function and downloads them as Word or PPT files. 2. The operator and the seller do not sell or send documents (files) separately. ESG management system documentation will open as soon as preparation is complete. 3. Passes for Management System Documentation (document set), Integrated Management System Document Development and Standard Revision Response remain valid without a time limit, and when a standard is revised, documents can be prepared again on the latest revision. Chapter 5 Withdrawal and Refunds Article 16 (Withdrawal and Refunds) 1. Because preparation (provision of digital content) starts together with payment when "Write with AI" is clicked, withdrawal within 7 days does not apply to passes (Act on Consumer Protection in Electronic Commerce, Article 17, paragraph 2). However, because the period of the single-use internal audit pass does not start from payment alone, it can be withdrawn within 7 days of the payment date before first use (first use means "Write with AI" or starting a virtual audit in 17 Internal Audit) (same Act, Article 17, paragraph 1; where several were purchased, only those not used). Once it is first used, withdrawal is restricted for that single-use pass (same Act, Article 17, paragraph 2, item 5). The seller gives notice of this on the pricing screen before payment and in "eiso Pricing". Because the operator does not sell documents (files), there is no withdrawal for document files either. 2. Regardless of the payment method, a pass that was paid in advance but has never been used (by number of items, by standard, or the single-use internal audit pass) is refunded in full on request. However, a single-use internal audit pass for which TBA was deducted when paying for an operation pass is not refunded separately. Training materials, lesson plans and individual documents already used follow "Review first, then receive" in Article 17. 3. If what was provided differs from the labeling, advertising or the contract, the user may withdraw within 3 months from the date of receipt and within 30 days from the date the user learned of the fact. 4. The seller makes refunds. For card and simple payments, the payment is cancelled; for bank deposits, the amount is returned to the user's account within 3 business days. When a refund is made, the corresponding pass is withdrawn. 5. Refund requests are received by email (eiso@eiso.co.kr) and forwarded to the seller. Article 17 (Review First, Then Receive for Training Materials, Lesson Plans and Individual Documents) 1. When training materials, lesson plans or individual documents are prepared using the number of items paid for, the result is first shown as a preview. While in preview, copying, printing and downloading are not possible. 2. If the user chooses "Accept as is", the result can be copied or received as Word or PPT, and after that the item is not refunded. 3. If the user chooses "Refund", the one item used is returned to the member ID immediately and the result is deleted. The returned item can be used to prepare again or, under Article 16, paragraph 2, refunded in money. 4. A refund can be requested within 24 hours of completion of preparation, up to 2 times per member per month (based on the Korean time calendar). If more are needed, please contact the staff. 5. If the user leaves the screen without choosing, the result disappears, and after 24 hours it is regarded as received. 6. No item is deducted when AI preparation fails or for a request that the AI did not prepare. If the window is closed or the connection is lost during preparation, one item is regarded as used. 7. If this system is abused, for example by copying the content of a preview and then repeating refunds, the operator may refuse refunds or restrict use. Chapter 6 Users' Obligations and Intellectual Property Rights Article 18 (Prohibited Acts) Users must not do any of the following. 1. Registering or applying with another person's information, or using another person's ID. 2. Using the Library or the AI functions in bulk with automated programs, or evading the usage limits. 3. Bypassing the security of the website or interfering with the operation of the services. 4. Transferring a pass to another person or selling Library materials in violation of Article 19. 5. Posting, or entering into the AI functions, content that violates laws and regulations or infringes the rights of others. Article 19 (Intellectual Property Rights and Scope of Use) 1. The rights to the text, images and Library materials of the website and to the reference materials used by the AI functions belong to the operator or the rightful holders. 2. A pass is used by the organization that received it (the member, for an individual member) to write documents for creating and operating its own management system. 3. Handing over or sharing a pass (ID) with another company, and using a pass to write another company's documents in order to sell them as a consulting or training product, are not permitted. However, a consulting firm or similar body may pay on behalf of a client company; even then, the pass is given to that client company (the administrator of the company workspace) and is used only for that client's documents. A person whom the client company has invited to its company workspace as a writer (such as a consultant) may select that workspace and write the client's documents with the administrator's pass, and this is not regarded as sharing an ID. 4. AI output finalized with "Accept as is" may be used freely by the user. However, the rights of third parties, such as the original text of standards included in the output, belong to those rights holders. 5. The rights to materials that the user enters into the AI functions belong to the user. 6. The copyright in questions and content that the user writes in "Questions and Answers" belongs to the user, and the operator uses them only to the extent necessary to respond to the question and for posting that the user chose to make public. The author's name on a public question is masked, and a private question can be seen only by the author and the staff. 7. Questions and content that violate laws and regulations or infringe the rights of others may be suspended from posting or deleted under the procedures of the Act on Promotion of Information and Communications Network Utilization and Information Protection, and the author is notified of this. Chapter 7 Liability and Dispute Resolution Article 20 (Limitation of Liability) 1. The operator and the seller are not responsible for damage caused by reasons beyond their control, such as natural disasters or failures of communication, hosting or AI service providers. 2. The user is responsible for the consequences of using AI output without reviewing it (such as nonconformity in a certification audit or violation of laws and regulations). 3. Damage caused by the intent or gross negligence of the operator or seller is not exempted by this provision. Article 21 (Dispute Resolution) 1. Users' complaints and requests for relief from damage are received by email (eiso@eiso.co.kr) and handled without delay; if it takes long, the reason and the schedule are notified. 2. Compensation for damage and disputes are handled in accordance with the Consumer Dispute Resolution Standards announced by the Korea Fair Trade Commission. 3. If the matter is not resolved, the user may apply for mediation to a dispute mediation body such as the Korea Consumer Agency. Article 22 (Governing Law and Jurisdiction) These Terms are governed by the laws of the Republic of Korea, and lawsuits are filed with the court having jurisdiction under the Civil Procedure Act. However, the protection a user receives under the mandatory consumer protection laws of the country of residence is not reduced by this provision. The Vietnamese version of the Terms is a translation for reference, and the Korean version is the authoritative text. Supplementary provisions: These Terms apply from November 17, 2026 and replace the terms of use created in 2008 (announced on October 16, 2026; revision announced on October 18, 2026: the service was changed to grant the right to write documents (a pass) instead of selling documents (files), and the 7-day withdrawal clause for document files was removed. Because this includes changes that may be unfavorable to users, it is announced 30 days before the application date and members are notified by email). Revision announced on October 27, 2026: the one-time internal audit pass (Article 8) and its withdrawal and refund (Article 16) were added, and refunds of unused passes were extended regardless of payment method (no change unfavorable to users). Revision announced on October 28, 2026: payment on behalf of a client by consulting firms and similar bodies, and shared use of the pass by company workspace writers, were added (Article 19; no change unfavorable to users). The Seller's mail-order business report number will be entered, and these Terms revised, as soon as the report is completed.

• Privacy Policy

  In accordance with Article 30 of the Personal Information Protection Act, AGENT Co., Ltd (hereinafter the "Company") establishes and publishes this Privacy Policy to protect the personal information of data subjects who use the eiso AI Management System Platform website (eiso.co.kr, hereinafter the "Website") and to handle related complaints promptly and smoothly. 1. Items of Personal Information Processed, Purposes and Retention Periods - Sign-up and member management. Items processed: User ID, password (stored with one-way encryption), name, company name, telephone number, email, address, member type (standard member or corporate member application); for corporate member applications: type of registration (company or individual), business registration number (tax code, optional), number of contact persons; Purpose of processing: Member identification and login, provision of member-only materials, finding ID and password, member management, guidance and consultation on corporate member applications; Retention period: Until the member withdraws (corporate member application records: 1 year after processing is completed, then automatically deleted) - Management system establishment and training inquiries, usage applications (document-writing pass). Items processed: Company name (Korean and English), contact person's name, title and department, telephone number, fax, email, address, number of employees, business activities, application items (standards to use, writing language), requests; for support and training applications: support type, eiso usage status, support request and desired timing; Purpose of processing: Receipt and confirmation of applications, consultation on management system support, training and usage, discussion of consultant dispatch and customized training, guidance on quotations and contracts, and contact; Retention period: Management system establishment and training inquiries: 1 year after processing is completed (automatically deleted after that) Usage applications for passes (document-writing rights): 5 years (Act on the Consumer Protection in Electronic Commerce, etc.: records of contracts, withdrawal of offers and payment) - Payment (Pay now, bank transfer). Items processed: Invoice number, payment and deposit amount, approval number, mobile phone number, member ID, items purchased, depositor name, business registration number (if a receipt or tax invoice is requested); Purpose of processing: Confirmation of payment and deposit, granting of usage rights, issuance of receipts and invoices, cancellation and refunds; Retention period: 5 years (Act on the Consumer Protection in Electronic Commerce, etc.) - Find ISO Reference Materials. Items processed: Content of the question; Purpose of processing: Searching for related materials in the Library (information collection); Retention period: Not stored - AI functions (establishing and operating management systems, writing training materials): staff member inquiries. Items processed: Member information (user ID, name, company name, telephone number, email), inquiry content (items entered); Purpose of processing: Confirmation of inquiries, guidance on how to use the service, usage fees and training, and contact; Retention period: 1 year after processing is completed (automatically deleted after that) - AI functions (establishing and operating management systems, writing training materials): Write with AI and AI answers (when the AI function is connected). Items processed: Content entered when requesting writing or answers with AI (subject, requirements, document text, questions, reference materials for management system document writing (including images), etc.). Member ID, name and contact details are not sent. Logo images in reference materials are not sent (they are inserted only into the Word file on this PC); Purpose of processing: Generating AI drafts and answers; Retention period: Not stored on the Website (processing by the AI service provider: see Section 4) - AI function web research (Management System Operation 1 Context of the Organization and 3 Risk Assessment; ICT Management System Operation 1 AI Context Analysis and 13 Legal Requirements Identification and Monitoring; when the AI function is connected). Items processed: Industry entered (size, main products), industry-specific regulations, business region, selected standards, AI role (development, supply, use) and applicable items (personal information processing, automated decisions, etc.), departments and processes for risk assessment, targets of ad hoc checks (names of laws and regulations, news links). The company name, basic information, website, uploaded files and member information are not sent (please do not enter a company name or personal information in the fields above); Purpose of processing: Searching the public web for external trends and interested parties' requirements in the industry, applicable laws and regulations, and reference materials for risk assessment, to use as the basis and sources of AI drafts; Retention period: Not stored on the Website (processing and web search by the AI service provider: see Section 4) - Case-by-case consultation on nonconformities and corrective action (Management System Operation 19 Nonconformity and Corrective Action; ICT Management System Operation 15 Nonconformity and Corrective Action; when the AI function is connected). Items processed: Text read from the folder or files you specify (nonconformity reports, audit reports, customer complaint records, etc.), results of other steps stored in this browser, consultation content (agreement, edits and questions regarding proposals), and register rows when preparing a status report. The name of the person in charge is not sent in the status report. Member ID, name and contact details are not sent (please mask customer and personal names before uploading); Purpose of processing: Organizing nonconformity candidates, proposing clauses, grades, root causes, corrective measures and schedules, and preparing status reports; Retention period: Not stored on the Website (only the session number and number of calls) (the register is kept only in the user's browser, and copies of the materials read disappear when that tab is closed; processing by the AI service provider: see Section 4) - Website guidance chatbot (when the AI function is connected). Items processed: Questions entered in the guidance box. Member ID, name and contact details are not sent (please do not enter personal information in your questions); Purpose of processing: Generating guidance answers based on the content of the Website; Retention period: Not stored on the Website (processing by the AI service provider: see Section 4; rate limits: see Automatic collection below) - Questions and answers (Community, online inquiries). Items processed: Member ID, name (masked in public questions), email (answer notification), question title and content, whether public, answer by the staff member; Purpose of processing: Responding to and answering questions, answer notification emails, posting questions that the member chose to make public; Retention period: Until the author deletes the question or the member is deleted - Company Workspace (optional: only when the company administrator consents). Items processed: Company name, members' user IDs and roles (writing, review, approval), saved AI outputs (title and body, stored with encryption for each company), the people and dates of saving, review and approval, operating data (measurements, records, claims, evaluations and incidents entered or imported by your company; objectives, indicators, action plan tasks, changes to objectives, review and monthly closing records; nonconformities and corrective actions; policies and assignment of duties; measuring instruments and documents; internal audits and management reviews; context of the organization, risks, changes and suppliers; processes, design and facilities; food safety, gifts and hospitality; competence and awareness (counts by job title, without people's names); drawings (files are not sent, only fingerprint, size and path). Names and text are encrypted for each company, while numbers, figures and judgments are kept as they are so that they can be analyzed. We recommend entering job titles in the person in charge, approver, auditor and attendee fields; even if people's names are entered, they are encrypted for each company); Purpose of processing: Keeping the company's management system operation records, carrying the results of earlier steps into AI writing in later steps, review and approval, and providing information from analyzing and consolidating operating data (judgments, trends, summaries and management review inputs). Uploaded files are not uploaded to the server: they are read in the browser, used only for the task, and cleared from the screen when the task ends. They are not used for AI training, the operator does not view their content, and they are not used for certification audits.; Retention period: Automatically deleted after the retention period set by the company (3 months, 1 year, 3 years or 5 years); documents and the workspace can be deleted at any time; when a member is deleted, that member's membership information is also deleted - Operations calendar weekly email (optional: only when a workspace member turns it on). Items processed: Member ID and email, filtering by job title in charge, email language; Purpose of processing: Once a week, a notification of the types and number of deadlines of that company (item content is not included); Retention period: Not sent when turned off; deleted when the member leaves the workspace or the workspace or member is deleted - Monthly summary email for top management (optional: only when a workspace member turns it on). Items processed: Member ID and email, email language, month sent; Purpose of processing: Once a month (on the first business day), a numerical summary notification of that company's management system operation (only the workspace name and counts or ratios; record content is not included); Retention period: Sending stops when you unsubscribe, and the data is destroyed without delay if you are removed from the workspace members or if the workspace or membership information is deleted - Automatic collection. Items processed: Access IP address, access date and time, browser information, cookies for keeping you logged in, visit statistics cookies and visit information (Google Analytics, Section 7); Purpose of processing: Preventing fraudulent use (rate limits on login, applications, questions and downloads), keeping you logged in, ensuring service stability, visit statistics (service improvement); Retention period: Cookies: up to 7 days Visit statistics cookies: up to 2 years, Google Analytics data: 2 months (configured value) Rate limit records: used only to determine the limit period (up to 24 hours) Required items: for sign-up, user ID, password, name and email; for management system establishment and training inquiries and usage applications (document-writing pass), company name, name, telephone number and email (including the selected standards for usage applications); all other items are optional. Personal information is collected from what users enter directly on the Website. Users have the right to refuse consent to the collection and use of required items, but if you do not consent, you cannot sign up, apply or purchase. There is no disadvantage if you do not enter optional items. The Company does not collect unique identification information or sensitive information such as beliefs or health. This Website is a service for business and organization contact persons and does not accept sign-ups from children under 14. The Company does not send advertising information to users' email addresses or telephone numbers. 2. Procedure and Method for Destroying Personal Information The Company destroys personal information without delay once the retention period has passed or the purpose of processing has been achieved. Inquiries that have been processed are automatically deleted 1 year after processing is completed (usage applications and payment records are deleted after being kept for 5 years), and rate limit records are deleted after 24 hours. Electronic files are deleted by a method that cannot be recovered, and printed materials are shredded or incinerated. If information must be retained under other laws, it is stored separately from other personal information for that period. 3. Provision of Personal Information to Third Parties The Company processes the personal information of data subjects only within the scope of the purposes in Section 1 and does not provide it to third parties, except with the consent of the data subject or where laws specifically provide otherwise. The sale and payment of eiso passes (receiving payment, issuing receipts and invoices, cancellation and refunds) are also handled directly by the Company (Terms of Use, Article 2). 4. Outsourcing of Personal Information Processing and Overseas Transfer The Company outsources personal information processing to operate the Website as follows, and sets out the necessary matters in outsourcing contracts so that personal information is managed safely. - Cloudflare, Inc. Outsourced task: Website hosting; storage of member and application databases - Resend. Outsourced task: Sending notifications of application and inquiry receipt and receipt confirmation emails, emails for finding ID and password, and question and answer notification emails - Anthropic, PBC. Outsourced task: Generating AI drafts and answers (AI writing in the AI functions (establishing and operating management systems, writing training materials), including reference materials for management system document writing (including images); AI answers and asking questions with AI in Find ISO Reference Materials (including web search); web research on industry, laws and regulations, and risks in the AI functions (searching the public web with Anthropic's web search tool); and the Website guidance chatbot, when the AI function is connected) - Google LLC. Outsourced task: Visit statistics analysis (Google Analytics 4) - Wizice. Outsourced task: Website operation and maintenance - PaySsam (Paymint). Outsourced task: Card and simple payment processing (Pay now) Some of the processors above are located overseas, and personal information is transferred overseas as follows. - Cloudflare, Inc. Country of transfer: United States and other countries where data centers are located (database: Asia-Pacific region); Items transferred: Items processed in Section 1; Purpose of transfer and retention period: Hosting and data storage / Retention period in Section 1 - Resend. Country of transfer: United States; Items transferred: Application content, email address, user ID; Purpose of transfer and retention period: Sending emails / Follows the service's policy after sending is processed - Anthropic, PBC (when the AI function is connected). Country of transfer: United States; Items transferred: Content entered for AI writing, answers and the guidance chatbot (including reference materials for management system document writing (including images)); industry, business region, standards and AI role used for web research in the AI functions (excluding company name, website and uploaded files); Purpose of transfer and retention period: Generating AI drafts and answers / Follows the service's policy after processing - Google LLC. Country of transfer: United States; Items transferred: Address of the page visited (excluding search terms after the question mark), previous page address, browser, device, approximate region, time of visit, cookie identifier; Purpose of transfer and retention period: Visit statistics / Google Analytics retention period (2 months) Privacy inquiry contacts of the recipients: Cloudflare, Inc.: www.cloudflare.com/privacypolicy/ · Resend: resend.com/legal/privacy-policy · Anthropic, PBC: www.anthropic.com/legal/privacy · Google LLC: policies.google.com/privacy "Download as PPT" and "Download as Word" create files within the user's browser, and those files are not sent to the Website or the processors. Date and method of transfer: transmitted over the information and communications network at the time the service is used. If you do not want your information transferred overseas, you may inquire by email (eiso@eiso.co.kr) instead of signing up or applying online. In that case, you cannot use the Website's member services or online applications. 5. Rights and Obligations of Data Subjects and Legal Representatives and How to Exercise Them - Data subjects may at any time request the Company to provide access to, correct or delete their personal information, suspend its processing, and withdraw consent. - You may exercise these rights in writing or by email using the contact details in Section 8 below, and the Company will act without delay. You may also request to withdraw your membership in the same way. - Rights may be exercised through an agent, such as a legal representative or a person authorized by you. - Requests for access, correction, deletion and suspension of processing are received and handled by the department in charge in Section 8, and we will notify you of the result within 10 days of receiving the request. If we cannot grant a request, we will inform you of the reason and how to file an objection. - Users in Vietnam may also make requests for access, correction, deletion and so on under Vietnamese personal data protection law (Nghị định 13/2023/NĐ-CP) through the same contact point. 6. Measures to Ensure the Security of Personal Information - Passwords are stored with one-way encryption (PBKDF2-SHA256) - Encryption of data in transit (HTTPS) - Restricted access to the administrator screen and a limit on failed login attempts - Access control, including blocking requests sent from other sites - Content Security Policy (CSP) applied to block execution of external scripts - Administrator accounts that can view personal information are limited to the operator level 7. Installation, Operation and Refusal of Cookies The Company uses cookies to keep you logged in and, from October 26, 2026, Google Analytics 4 (GA4) cookies for visit statistics. We do not use cookies for advertising or personalized advertising. Google Analytics sends the address of the page visited (the part of the address after the question mark, such as search terms, is not sent), the previous page address, browser and device type, approximate region (country and city), time of visit and cookie identifiers (cookies starting with _ga and _ga_, up to 2 years) to Google LLC (United States) and produces visit statistics only. Names, emails, member IDs and entered text are not sent, and Google signals and ad personalization are turned off. The access IP address is used only to estimate the region and is not stored in Google Analytics (according to Google). Statistical data is kept for 2 months. Refusing cookies: you can block cookie storage in your web browser settings or install the Google Analytics opt-out browser add-on (tools.google.com/dlpage/gaoptout). If you block login cookies, you cannot use services that require login, but blocking visit statistics cookies does not affect your use of the services. If the visit statistics feature provided by the hosting provider (Cloudflare) is turned on, the address of the page visited, browser, country and so on are processed for statistical purposes only. This feature does not use cookies and does not identify individuals. 8. Chief Privacy Officer and Complaint Handling - Chief Privacy Officer: Yoon Ji-yeon - Department in charge and contact: AGENT · Email eiso@eiso.co.kr - Address: Room 222, Building 1, 40 Yongmeori-gil, Tangjeong-myeon, Asan-si, Chungcheongnam-do, Republic of Korea 9. Remedies for Infringement of Rights If you need to report or seek advice on a personal information infringement, you may contact the following organizations. - Personal Information Dispute Mediation Committee: 1833-6972 (www.kopico.go.kr) - Personal Information Infringement Report Center: 118, no area code (privacy.kisa.or.kr) - Supreme Prosecutors' Office: 1301, no area code (www.spo.go.kr) - National Police Agency: 182, no area code (ecrm.police.go.kr) 10. Changes to the Privacy Policy If this Privacy Policy is changed, we will announce it in the Website's announcements from 7 days before it takes effect. For important changes affecting the rights of data subjects, we will announce it from 30 days before it takes effect. You may request previous versions of the policy from the department in charge in Section 8. This Privacy Policy applies from October 19, 2026. Revision history: 2026-10-06 Established · 2026-10-07 Added Find ISO Reference Materials, staff member inquiries for core functions, and rate limit records · 2026-10-08 Outsourcing and overseas transfer for AI functions (Anthropic), retention period for applications and inquiries (1 year after processing is completed), scope of email sending, designation of Chief Privacy Officer (Certification Team Leader) · 2026-10-14 Payment information (kept for 5 years), AGENT Co., Ltd entrusted with sales and payment tasks (receiving payment and receipts), outsourcing of card payment to PaySsam (Paymint) · 2026-10-16 Website guidance chatbot (questions: not stored; outsourcing and overseas transfer to AI service provider Anthropic), questions and answers (member information, questions and answers: until the author deletes them or the member is deleted; answer notification emails) · 2026-10-16 In line with the revised Terms of Use, AGENT Co., Ltd changed from processor to seller (provision to a third party, consent given in the purchase application), and PaySsam (Paymint) became the seller's processor · 2026-10-16 Operator and seller changed to AGENT: no provision to third parties, PaySsam (Paymint) is the Company's processor · 2026-10-16 Chief Privacy Officer Yoon Ji-yeon, address in Asan · 2026-10-16 Main telephone number changed · 2026-10-16 Items supplemented (required and optional items and disadvantages of refusing consent, retention period of 5 years for purchase applications, business registration number and browser information, non-processing of unique identification information, sensitive information, pseudonymized information, children and advertising information, inquiry contacts of overseas recipients, deadline for handling access requests (10 days) and receiving department, contact point for Vietnamese users' rights, security measures, visit statistics, notice of changes to the policy) · 2026-10-16 Questions in Find ISO Reference Materials are not sent to the standards question server (removed from the scope of outsourcing to Wizice) · 2026-10-17 Web search in asking questions with AI (questions may be used as web search terms via Anthropic) · 2026-10-17 "Certification and Training Inquiries" renamed "Management System Establishment and Training Inquiries", with a change of name and purpose of use · 2026-10-17 Contact email changed (eiso@eiso.co.kr) · 2026-10-17 Reference materials for management system document writing (including images) added to the content sent for AI writing · 2026-10-18 Company Workspace (optional, encrypted storage after consent) · 2026-10-18 Reflects the model of granting document-writing rights (passes) instead of selling documents (files) (document set purchase application changed to usage application) · 2026-10-18 Added support type, eiso usage status, request content and desired timing to management system establishment and training inquiries (discussion of consultant dispatch and customized training) · 2026-10-18 Added member type at sign-up (standard member, corporate member application) and corporate member application information (type of registration, business registration number, number of contact persons) · 2026-10-18 Telephone contact removed: inquiries by email (eiso@eiso.co.kr) only · 2026-10-19 Stated the retention period of corporate member application records (1 year after processing is completed) · 2026-10-19 Added visit statistics (Google Analytics 4) cookies and overseas transfer (applicable from October 26, 2026) · 2026-10-19 Clarified the web research on industry, laws and regulations, and risks in the AI functions (items sent and items not sent) · 2026-10-23 Clarified the content sent for case-by-case consultation on nonconformities and corrective action and its storage in the browser · 2026-10-24 Stated operating data (for analysis, encrypted for each company) and the provision of analyzed and consolidated information in the Company Workspace; uploaded files are not uploaded to the server and are cleared from the screen when the task ends; output is stored in a computer folder designated by your company (only the folder name and permission are remembered in the browser) · 2026-10-27 Supplemented operating data items (registers added; drawings only as fingerprint; recording job titles recommended), operations calendar weekly email (optional), monthly summary email for top management (optional)
• I have read and agree to the Terms of Use and the Privacy Policy above.

• Member information

  Member type	General member: free, use right after signing up Apply for corporate membership: annual fee TBA (excluding VAT) · 1,500,000 points · based on 3 persons in charge. It is currently being prepared for launch, so we accept applications and our staff will contact you about the schedule and conditions; in the meantime you can use eiso as a general member. eiso Corporate Membership
  Membership type	Company (based on 3 persons in charge)   Individual (1 person)
  Business registration number	Optional: for a Vietnamese company, enter the tax code (MST); individuals should leave it blank.
  Number of persons in charge	1 person2 persons3 persons4 persons5 persons6 persons8 persons10 persons   For more than 3 persons, TBA per additional person per year (excluding VAT)
  Company name
  Name
  ID	Check ID availability / 4 to 20 characters: letters, numbers and underscore (_)
  Password	8 to 64 characters
  Confirm password	Please enter the password once more.
  Address	Search postal code   Please enter the rest of the address.
  Phone	- -
  Email