Carrier-grade security, built into every call.
Our Tier-1 network ships with STIR/SHAKEN A-level attestation, AES-256 encryption, automated multi-carrier failover, and a 24/7 NOC — on every plan. Not a tier upgrade. Not an add-on.
The threat starts at the wire. So does our defence.
Most VoIP providers re-sell wholesale capacity and hope nothing breaks. Teloz operates the carrier. Every protection below is enforced at the network edge — before a call ever touches your tenant. See how these protections translate into tangible benefits on our pricing page.
Tier-1 voice network
Direct peeringDirect peering with major carriers — no resold capacity. Every route runs across at least three independent paths so failure of one carrier does not break your traffic.
STIR/SHAKEN at the carrier
A-level · US/CAFull A-level attestation on US and Canadian traffic — signed at our edge, not just relayed. Reduces spam-flagging at the destination and meets FCC call-authentication requirements.
Real-time fraud detection
IRSF · WangiriMachine-learning models score every outbound leg for IRSF, Wangiri, and traffic-pumping patterns. Anomalies are scored and blocked in real time, with ACD anomaly detection on every trunk.
E911 + FCC RMD listed
Dynamic E911Dynamic E911 location for every extension, including mobile and softphone. Teloz is a registered US carrier on the FCC's Robocall Mitigation Database — public, auditable, and current.
Four independent layers. Failure of one does not compromise the next.
Customer data flows through four layers of protection — encryption, isolation, and recoverable backups. Every layer is reviewed annually by independent penetration testers. Encryption standards follow NIST cryptographic guidelines for symmetric encryption and key management.
In transit
TLS 1.3 for signalling and APIs. SRTP for every media leg, including mobile and softphone. No call audio leaves an encrypted tunnel — ever.
At rest
AES-256 with per-tenant key envelopes. Recordings, transcripts, voicemail, and CDRs are encrypted before they hit disk. Keys rotate on a documented schedule.
Per-tenant isolation
No shared schemas. No cross-tenant joins. Each customer's data lives behind its own logical boundary — enforced at the application and infrastructure layer.
Backup & recovery
Continuous backups with documented RPO/RTO targets. Region-pinned restore. Field-level redaction available for sensitive recordings and transcripts.
Identity and audit trails your IT team will actually approve.
SSO, SCIM, MFA, and role-based access are standard on every plan — including the free trial. Every admin action is logged, exportable, and reviewable for incident response.
- SSO via SAML 2.0 (any compliant IdP)
- SCIM 2.0 user + group provisioning
- MFA (TOTP, WebAuthn, hardware keys)
- Role-based access with custom scopes
- Tamper-evident audit log to SIEM
SSO via SAML 2.0
Okta, Azure AD, Google Workspace, OneLogin — standard SAML on every plan.
SCIM 2.0 provisioning
Auto-sync users and groups from your IdP. Deprovisioning revokes access instantly.
Mandatory MFA options
TOTP, WebAuthn, and hardware-key support. Configurable per-role and per-device.
Role-based access
Admin, supervisor, agent, billing, and read-only roles — plus custom permission scopes.
Tamper-evident audit log
Every admin action writes to an immutable log. Exportable to SIEM via webhook or API.
Real-time alerts
Anomalous-login detection, session revocation, and instant alerts on role or permission changes.
Built for failure. Designed to recover before you notice.
Carriers fail. Hardware fails. Software fails. The question is whether your platform is built to absorb those failures and keep customer calls flowing. Ours is.
Backed by financial remedy on every plan, scaling from 99.9% on Starter up to 99.999% on Enterprise.
Automated failover switches between at least three independent carrier paths in milliseconds.
Around-the-clock network operations center watches ASR, ACD, and CPS thresholds on every trunk.
Documented incident response plan. Customers notified within 24 hours. IR plan tested twice yearly.
When something breaks, you hear it from us first.
- 24/7 on-call engineers — not a ticket queue.
- Notification to affected customers within 24 hours of confirmation.
- Status page updates within 5 minutes of detection.
- IR plan documented and tested twice every year.
- Post-incident report within 5 business days of resolution.
The short answers.
Questions buyers ask in the first call.
Your security, by default.
STIR/SHAKEN A-level, AES-256 encryption, 24/7 NOC monitoring, and 99.999% uptime SLA — on every plan, including the free trial. Not a tier upgrade.