Basic Policy on Information Security
Last Revised: October 27, 2026
First Established: February 1, 2021
oVice, Inc. (the “Company”) operates the virtual space “ovice” and related services (including free trial use; collectively, the “Services”).
In providing the Services, the Company is committed to ensuring and enhancing the confidentiality, integrity, and availability of information assets entrusted to us by our customers. We recognize our responsibility to ensure that our employees understand the value and importance of these information assets, to protect them from threats such as accidents, disasters, and crimes, and to maintain the stability of the information system environment used by our customers.
To earn the trust of our customers and society, we engage in company-wide efforts toward information security based on the following policies:
Responsibility of Management
- The Company’s management will take the lead in promoting organizational and continuous improvement of information security.
Establishment of Internal Systems
- The Company will establish an organization dedicated to maintaining and improving information security and will stipulate information security measures as formal internal rules.
This includes:- Establishing an organization with management involvement to promote continuous improvement of information security;
- Defining roles and responsibilities for managing customer information assets and ensuring thorough operation of the Information Security Management System (ISMS);
- Conducting regular reviews of the ISMS to evaluate effectiveness and implement improvements as necessary;
- Performing periodic internal audits to confirm compliance with established rules; and
- Defining criteria for assessing risks to customer information assets, identifying such risks, and implementing risk response plans.
Employee Initiatives
- The Company’s employees will acquire the knowledge and skills necessary for information security to ensure effective engagement.
This includes:- Providing education and training to all employees and related personnel involved with information assets within the scope of this Policy;
- Ensuring that employees have the necessary competence to perform their duties; and
- Educating and training employees on the basic policy of information security, related standards, and procedures.
Compliance with Legal and Contractual Requirements
- The Company will comply with laws, regulations, standards, and contractual obligations related to information security, while meeting customer expectations.
Response to Violations and Incidents
- In the event of legal violations, contractual breaches, incidents, or disasters related to information security, the Company will take appropriate action and work to prevent recurrence.
This includes:- Establishing, in advance, policies, systems, and procedures for incident response based on the assumption that security incidents may occur; and
- Ensuring that, in the event of an incident, the Company can promptly execute organizational responses including escalation, countermeasures, recovery, and notification.
oVice, Inc.
CEO Sae Hyung Jung
