Cloudflare says it obtained South Korea’s ISMS certification after KISA-appointed auditors reviewed 80 controls over ten days. Korean users must separately consent to the terms of service, personal-information collection and use, and limited overseas data transfers before creating an account; declining optional marketing consent does not block signup. Google, Apple, and GitHub social signup is unavailable in Korea because those flows bypass the consent form. IP geolocation sets the default experience, but the country selected by the user takes precedence. The certification is valid for three years, subject to annual maintenance audits.