Built to the standards US carriers actually live by.
Ringly's platform is architected from day one to comply with every applicable US telecom regulation. Below is our complete compliance map — what we cover natively, what's already wired into the data model, and the operational filings on our roadmap to full carrier status.
Federal Communications Commission
Section 214 Authorization
▶ RoadmapDomestic interstate Section 214 authorization required to operate as an interconnected VoIP provider. Our application is on the Phase-2 commissioning roadmap; until then we operate under our wholesale carrier partners' authority.
Form 499-A / 499-Q Annual + Quarterly Filings
▶ RoadmapFCC Form 499 is the annual revenue report that determines USF, TRS, NANP, and LNPA contribution. Ringly's billing engine already tags every CDR with the data necessary to file: jurisdiction, end-user vs. carrier-customer, regulated vs. enhanced.
Universal Service Fund (USF)
● LiveUSF surcharge line item is built into the invoicing engine. Current 2026 contribution factor: ~34.5% of interstate + international revenue. Auto-computed on invoice generation; passed through to the end-customer.
Telecommunications Relay Service (TRS) Fund
● LiveTRS surcharge ($0.00084 per minute as of 2026) auto-added to every billable minute. Funds the federal relay service for deaf and hard-of-hearing users including 711 access.
Local Number Portability Administration (LNPA)
● LiveNumber porting is handled via our upstream carriers (Bandwidth / Telnyx / DIDforSale) using the NPAC. All inbound and outbound port-in / port-out requests are tracked with an SLA timer.
North American Numbering Plan Administration (NANPA)
● LiveNumber assignment honors NPA/NXX block allocation. Toll-free numbers (800/888/877/866/855/844/833) provisioned through RespOrg-certified upstream partners.
E911 · Kari's Law · RAY BAUM's Act · NG911
E911 Service
Every Ringly DID is provisionable with a validated dispatchable location. We integrate with Bandwidth Emergency Services + Intrado for nationwide PSAP routing. Address validation occurs at registration time via MSAG (Master Street Address Guide) lookup.
Kari's Law (47 USC 623)
Direct 9-1-1 dialing without a prefix is enforced at the dialplan level on every Ringly extension. No '9' to get an outside line — calls to 911 are passed transparently. Mandatory notifications to a designated on-site contact fire as soon as a 911 call is initiated.
RAY BAUM's Act §506
Dispatchable location (street address, suite, floor, room, and where commercially feasible) is sent to the PSAP. Our portal forces each extension to be associated with an E911 address before going live. Mobile / softphone endpoints use dynamic LIS / HELD lookup.
Multi-Line Telephone System (MLTS) Compliance
Hosted PBX deployments enforce per-station dispatchable location. The admin UI flags any extension without an E911 address and blocks outbound provisioning until resolved.
NG911 Readiness
Our SIP signaling carries P-Asserted-Identity and Geolocation headers per IETF RFC 6442. Native NG911 routing via i3 ESInet is on the roadmap for jurisdictions where supported.
On-Site Notification
Every 911 call triggers a webhook + SMS + email to the account's designated emergency contacts within seconds — required under Kari's Law for businesses ≥ 5 stations.
STIR/SHAKEN · TRACED Act
STIR/SHAKEN Attestation
Outbound calls are signed at the originating SBC using our STI-CA-issued certificate. Per-customer attestation level (A: full / B: partial / C: gateway) is configurable in the admin console. Calls without a valid signing chain are flagged on inbound.
Robocall Mitigation Database (RMD)
Filed with the FCC RMD as required by the TRACED Act. Our published mitigation plan covers traffic monitoring, KYC, abuse takedown SLA, and traceback cooperation with the ITG (Industry Traceback Group).
Know Your Customer (KYC)
Every account is verified before outbound calling is enabled: legal entity name, business address, EIN, signed AUP. Higher-volume tiers require additional documentation.
Traceback Cooperation
Ringly is a registered participant in the ITG traceback program. Subpoena response within 24 hours. Internal audit log retains origin IP, account, signed STIR/SHAKEN passport, and CDR for 7 years.
TCPA Compliance (Outbound)
Customer AUP forbids autodialed calls / texts to consumers without express written consent. AI-agent originated calls are subject to additional consent verification — the AI Agents API enforces a recorded-consent flag before dialing.
Caller-ID Spoofing Detection
Inbound calls with mismatched From / P-Asserted-Identity / STIR-Identity headers are tagged in the CDR. Customers can block calls with low attestation via the dialplan rules engine.
CPNI · CALEA · HIPAA · CCPA
Customer Proprietary Network Information (CPNI)
47 CFR Part 64 Subpart U compliance: customer call records, billing, and usage data are protected per FCC rules. CPNI consent is captured at signup with documented opt-in. Annual CPNI compliance certification filed by March 1 each year.
CALEA — Communications Assistance for Law Enforcement Act
Our SIP infrastructure supports lawful intercept (T1.IAS) via standardized interfaces at both signaling and media tiers. Pen registers, trap-and-traces, and Title III intercepts can be effected without service interruption to the target.
HIPAA — Healthcare Customers
Business Associate Agreement (BAA) available for healthcare accounts. PHI in voicemails, transcripts, and recordings is encrypted at rest (AES-256) and in transit (TLS 1.3 + SRTP). Access logged + audited per § 164.312(b).
Subpoena + Court Order Response
Designated agent for service of process registered with the FCC. Standard subpoena response in 7 business days, emergency disclosure under 18 USC 2702(b)(8) in under 1 hour. Pen register / trap-and-trace effected within mandated 24-hour window.
State Privacy Laws (CCPA · CPRA · CDPA · TDPSA)
California (CCPA/CPRA), Virginia (CDPA), Colorado (CPA), Connecticut (CTDPA), Texas (TDPSA), and similar state privacy regimes are honored: data access requests, deletion, opt-out of sale, GPC signal compliance, sensitive-data opt-in.
GDPR / UK GDPR
EU and UK customers benefit from DPA-compliant data handling, Standard Contractual Clauses for transfers, 72-hour breach notification, and a designated EU representative on file.
10DLC + Toll-Free + Short Code
- ✓A2P 10DLC brand + campaign registration with The Campaign Registry (TCR) before any 10-digit messaging traffic flows.
- ✓Industry-vetted use-case throughput tiers (T-Mobile / Verizon / AT&T) enforced per campaign.
- ✓Toll-free SMS verification via Somos (the toll-free administrator).
- ✓Mandatory opt-in confirmation + STOP/HELP keyword handling — built into the messaging API.
- ✓Short code lease and approval workflow available for enterprise volume.
- ✓CTIA Short Code Monitoring Handbook compliance for short codes.
21st Century Communications + Video Accessibility Act
- ✓Hearing-aid compatibility (HAC) certification carried by all hardware in our drop-ship catalog.
- ✓TTY / RTT (real-time text) interworking for voice-equivalent text communication.
- ✓711 dial code routing to the relay service in every dialplan by default.
- ✓Closed-captioning support for IP-relay services on AI agents that handle voice.
- ✓Accessible website conformance to WCAG 2.1 AA — keyboard navigation, screen reader compatibility, color contrast ratios.
- ✓Volume control and HAC-mode signaling on every provisioned phone.
State PUC + Department of Revenue
Each US state has its own Public Utility Commission, communications-services tax, and 911 surcharge structure. Ringly's billing engine handles the per-state matrix automatically.
Need a BAA, DPA, or signed MSA?
Enterprise, government, and healthcare customers can request a signed Business Associate Agreement (HIPAA), Data Processing Addendum (GDPR/CCPA), or Master Services Agreement before going live. Standard templates available; legal redlines welcome.
Request paperwork →Available agreements
- • HIPAA BAA
- • Data Processing Addendum (GDPR / CCPA)
- • Master Services Agreement (MSA)
- • Acceptable Use Policy (AUP)
- • CALEA / Subpoena Cooperation Agreement
- • Carrier Interconnect Agreement (Class-4)
- • CPNI Notice + opt-in form
Full legal stack