Hancom Carelink’s ‘Carehae’ earns KISA information security certification

[Financial News] Hancom Carelink, a company specializing in healthcare, announced on the 30th that its health screening reservation platform, ‘Carehae (CAREHE),’ had obtained Information Security and Personal Information Protection Management System Certification (ISMS-P) from the Korea Internet & Security Agency (KISA).
ISMS-P is a nationally accredited certification program that comprehensively assesses whether companies securely protect and manage information security and personal information in accordance with the Act on Promotion of Information and Communications Network Utilization and Information Protection and the Personal Information Protection Act. Companies must pass a rigorous review of 101 detailed criteria in total, including requirements for establishing and operating a management system, safeguards, and each stage of personal information processing. The certification covers the overall operation of the ‘Carehae service’ and is valid for three years, from October 7, 2026, through October 6, 2029.
Health screening reservation services handle highly sensitive health data, including past screening records and the presence or absence of diseases, in addition to ordinary personally identifiable information. Through this review, Hancom Carelink was officially certified as fully meeting legal standards and security requirements throughout the entire personal information lifecycle, including collection, use, provision, and destruction.
‘Carehae’ is a health screening reservation platform used by at least 200,000 people a year, supported by a nationwide network of about 500 partner screening institutions. Users can easily compare and book screening institutions through the mobile app, website, or phone consultation. The platform offers AI-powered, personalized screening item recommendations based on a simple questionnaire; disease-specific risk prediction and risk-factor analysis; and the ability to view and compare up to 10 years of screening results. It also provides comprehensive follow-up care, including expert consultations on abnormal findings, referrals for care at higher-level hospitals, metabolic age analysis reports, cerebrocardiovascular disease risk reports, occupational stress reports, a screening report for depression and anxiety disorders called ‘Mind Log,’ and regular health information.
Hancom Carelink plans to further expand its share of the B2B corporate health screening market by targeting corporate and institutional customers that rigorously assess security and personal information protection requirements. It also plans to maintain a high level of security through annual post-certification audits and continually strengthen platform safety by requiring security reviews throughout the development cycle, from service planning through deployment.


[email protected] Yeon Ji-an Reporter