Acceptable Use Policy (AUP)

All Clients are responsible for understanding and complying with the laws, regulations, and standards applicable to their use of USTelco’s services. By using the services, Clients agree to the following ongoing compliance obligations:

• Compliance with Law: Clients must at all times use USTelco services in compliance with all applicable laws and regulations. This includes, but is not limited to, the Telephone Consumer Protection Act (47 U.S.C. § 227) and its implementing regulations (47 C.F.R. § 64.1200 et seq.) which govern telemarketing calls and texts, the Telemarketing Sales Rule (16 C.F.R. Part 310) enforced by the FTC, the CAN-SPAM Act (15 U.S.C. § 7701 et seq., as applicable to commercial electronic messages), the Truth in Caller ID Act (47 U.S.C. § 227(e)), state laws regarding telemarketing and text messaging, and any regulations or orders issued by the FCC or other regulatory bodies concerning communications. It is the Client’s responsibility to stay informed of legal requirements; compliance with this AUP does not excuse any failure to abide by the law. Where laws differ by jurisdiction (federal, state, local), the strictest applicable rules should be followed.
• Consent and Recipient Permissions: Prior to initiating any call or text, the Client must obtain and document all necessary consents or authorizations from the intended recipients as required by law and industry best practices. For example, if the Client is sending marketing text messages, it should have prior express written consent from each recipient (as defined by the TCPA for automated marketing) on record. For automated or pre-recorded calls to wireless numbers or residential lines, the appropriate form of consent must be secured. Clients should also maintain internal do-not-call (DNC) lists and honor any direct requests from recipients not to be contacted, in addition to scrubbing marketing contact lists against the National Do Not Call Registry where applicable. Adequate record-keeping systems should be in place so that proof of consent can be provided if a complaint arises. USTelco may request evidence of consent for specific campaigns or calls/messages if a compliance issue is brought to our attention, and Clients are expected to promptly furnish such proof upon request.
• Know Your Customer/Business (KYC/KYB) Information: Clients are required to participate in USTelco’s KYC/KYB onboarding protocols. This means Clients must provide accurate and current information about their identity, business, designated authorized users, and nature of service usage when establishing service and upon USTelco’s reasonable request. USTelco may require documentation such as corporate formation documents, identification of account administrators or end users, physical address, federal tax ID or other government-issued identification, and information about the Client’s intended use case for voice or messaging services. This information is used to verify the legitimacy of Clients and enable compliance measures such as STIR/SHAKEN attestation at the appropriate level. Clients have a continuing obligation to update USTelco if any of their provided information changes (for example, a change in ownership, or using new phone numbers for different purposes than initially described). USTelco reserves the right to decline or terminate service if a Client fails KYC/KYB verification, provides false or misleading information, or refuses to furnish information required to meet regulatory obligations (such as responses needed for the FCC’s Robocall Mitigation Database filings or carrier 10DLC registrations).
• Use of Assigned Numbers and Caller Identification: Clients must use only those telephone numbers for caller ID or message origination that have been assigned to them by USTelco or properly ported to USTelco for their use, or for which they have documented permission from the number’s owner. Using USTelco’s service to transmit traffic with a caller ID that is unauthorized or spoofed is prohibited (as per Section 3.1). USTelco participates in the STIR/SHAKEN caller ID authentication framework as mandated by FCC regulations. In line with these standards, USTelco will sign and attest to the authenticity of Client call traffic based on the level of trust established (Attestation A, B, or C). Clients are expected to cooperate in this process by providing any needed information to verify number ownership or usage authority. If USTelco determines that a Client has not been “fully verified” or has not “identified its end user customer,” a lower attestation level may be assigned to that Client’s calls (which could affect call completion and labeling). Clients must not attempt to circumvent STIR/SHAKEN signing or verification. USTelco may block or refuse to carry calls that cannot be appropriately attested or that fail authentication in a manner suggesting illegal spoofing.
• 10DLC Campaign Registration and Messaging Compliance: As noted in Section 3.2, any Client utilizing A2P messaging via 10-digit long codes in the U.S. is required to register their campaigns through the official process (e.g., The Campaign Registry) before sending live traffic. Clients must provide truthful and complete information about the message content, category, sample messages, opt-in method, etc., as part of registration. If a campaign is rejected or requires modification, the Client must resolve those issues and obtain approval prior to sending messages. Clients are also responsible for paying any applicable 10DLC registration fees or messaging surcharges imposed by carriers for their campaigns. Once a campaign is active, the Client must adhere to the use case and content submitted; any material change may necessitate re-registration or update. Furthermore, Clients must follow CTIA and carrier guidelines in operation of their campaigns, including sending required initial disclosure messages (for recurring programs, the first message must typically include the program name, frequency of messages, and opt-out instructions), and maintaining low complaint rates. USTelco may request periodic auditing of the Client’s messaging program (such as proof of opt-in records or content samples) to ensure ongoing compliance. Failure to comply with 10DLC requirements or messaging best practices not only violates this AUP but can result in carriers suspending the Client’s messaging capabilities or levying substantial fines, for which the Client will be responsible.
• Cooperation with Robocall Mitigation and Tracebacks: USTelco has filed a Robocall Mitigation Plan with the FCC and participates in industry efforts to trace and stop illegal calls. Clients are required to cooperate fully and promptly with any efforts by USTelco, law enforcement. If USTelco receives a traceback request indicating that suspected illegal robocalls or spam texts have originated from the Client’s account or phone numbers, the Client must respond in a timely manner with complete and accurate information about the traffic in question. This may include providing the identity of the party on whose behalf the calls or texts were made, proof of consent from called/texted parties, or other details. Generally, traceback requests should be answered within 24 hours or within any specified deadline given by authorities. By using USTelco’s services, Clients acknowledge and agree that USTelco may share relevant Customer information and traffic data with the FCC, FTC, law enforcement agencies. Such information sharing will be done in accordance with USTelco’s privacy policy and applicable confidentiality laws, but to the extent allowed, USTelco will not hesitate to assist in identifying and blocking sources of illegal communications. Refusal to cooperate with a legitimate traceback or investigation is grounds for immediate service suspension or termination.
• Network Security and Integrity: Clients must implement reasonable security measures to prevent unauthorized use of USTelco services. For example, SIP credentials, API keys, portal logins, and other access credentials provided by USTelco should be safeguarded and not shared beyond authorized personnel. If a Client uses an on-premises PBX or server, it should be secured against hacking (e.g., strong passwords, IP access control, and up-to-date software) to prevent it from being taken over to send robocalls or spam. The Client should also monitor its account for any sudden or abnormal usage that could indicate a security breach. If the Client suspects that its account or equipment has been compromised (for instance, experiencing a burst of traffic that was not initiated by the Client, or noticing fraudulent charges or calls), it must immediately notify USTelco so that protective measures can be taken (see Section 6, Reporting Suspicious Activity). Clients are further prohibited from interfering with USTelco’s network security measures or testing the vulnerability of USTelco’s systems, except with prior written authorization for legitimate security research purposes.
• Responsibility for End Users and Third Parties: If a Client re‑brands, resells, or provides USTelco’s services to third-party end users (for example, a partner integrating USTelco’s SIP trunking into their own product offering, or a corporate client allowing its affiliates to use the service), the Client is responsible for ensuring that any such end users or downstream customers also comply with this AUP. The Client must incorporate equivalent use restrictions in its agreements with those parties and promptly enforce any violations. In the event that an end user of the Client engages in conduct that would violate this AUP, USTelco may take action against the Client’s account as if the Client had committed the violation. Therefore, Clients should screen and monitor their users’ activities and educate them on compliance. Know Your Customer’s Customer (KYCC): USTelco expects Clients to know and vouch for the identities and reputations of any sub-clients or traffic sources they introduce. Passing through traffic from unknown or unvetted sources is a violation of this obligation.

By adhering to the above compliance requirements, Clients help USTelco maintain a trusted network environment and avoid service interruptions. USTelco stands ready to assist Clients in understanding these obligations and implementing compliant solutions. However, ultimate responsibility for legal compliance in using the services rests with the Client. Any breach of these obligations will be addressed under Section 5 (Enforcement & Remediation) and could also constitute a material breach of the Client’s contract with USTelco.