Knowledge Base
Compliance & Legal
CALEA, wiretap access, retention, and legal obligations.
2 answers · Part of 46 across the knowledge base
What are the CALEA requirements when an ISP adds business voice?
Yes. Once you offer interconnected VoIP (service that can call or receive calls from the public telephone network), you are subject to CALEA, the Communications Assistance for Law Enforcement Act. It requires you to maintain lawful intercept capability, file a System Security and Integrity (SSI) plan with the FCC, designate a 24/7 point of contact, and contribute to the Universal Service Fund. Adding hosted PBX or UCaaS to a broadband product almost always crosses that threshold.
What STIR/SHAKEN obligations apply to white-label softphone operators?
In a white-label softphone setup, the SIP trunk provider is responsible for STIR/SHAKEN attestation, not the app or the operator. The originating carrier holds the signing certificate and attaches an attestation to every outbound call, which determines whether receiving carriers let it through or flag it as "Spam Likely." If subscribers see spam labels or dropped calls, the fix sits with the trunk provider's STIR/SHAKEN compliance, not the softphone app.