So that schools, institutions and businesses can trust us, CANCO discloses transparently how we protect recording data.
Recording data belongs to the institution that adopted the service. CANCO processes it only within the scope of the contract.
Permissions are separated so users see only their own calls and only designated admins see all data.
Data in transit uses encrypted connections, and stored data is kept in access-controlled locations.
Our in-house AI Karina runs on CANCO servers and does not send business data to external AI services.
Every stage is protected, from the moment a call is recorded until an admin reviews it.
Web access and data transfer use HTTPS (SSL/TLS) encryption. Remote maintenance connects only through a Tailscale-based encrypted private network.
Cloud recordings are stored on Google Cloud; on-premises recordings on the institution's own server. Sensitive data is stored encrypted and backed up regularly.
Users see only their own calls; admins view all data in admin-only menus. Accounts are temporarily locked after repeated wrong passwords, and users are prompted to change the initial password after first login.
Speech transcription, analysis and our own AI Karina process only the data needed for the purpose. Karina is a compact AI model running on CANCO's own servers.
We minimize the number of personal data handlers and control access to servers and storage locations. Faults and anomalies are checked through remote monitoring.
We moved management of our company domains (canco.co.kr, edurecording.co.kr, etc.) to internet security company Cloudflare, adding another layer of protection to our website and email.
Website traffic passes through Cloudflare, which blocks attacks such as DDoS up front.
Cloudflare certificates encrypt traffic, and only TLS 1.2 or higher is used.
Automated bots are filtered out of inquiry and consultation forms (Turnstile).
Admin pages can be accessed only with a one-time code sent by email.
With SPF and DKIM, recipients can detect emails impersonating CANCO.
Website visit statistics are collected without personally identifiable information.
Customers' recording data is processed under the service contract and personal data processing outsourcing agreement signed with each customer, and is returned or destroyed according to set procedures when the contract ends.
We support adding a “This call may be recorded” announcement before calls connect, so institutions can inform the other party.
Ask your representative for security briefing materials and outsourcing agreement templates for your review.
Request security documents