Compliance & Standards

Regulatory & Telephony Framework

Talki Talki operates within a complex global regulatory environment. We are committed to transparency and adherence to the highest standards of telephony and data governance.

1. Telephony Integrity (STIR/SHAKEN)

To combat illegal caller ID spoofing and reduce robocalls, Talki Talki utilizes STIR/SHAKEN protocols. This framework ensures that calls originating from our platform are verified and signed, providing your customers with the confidence that the Caller ID displayed is authentic.

2. Business SMS Compliance (A2P 10DLC)

We adhere to A2P 10DLC (Application-to-Person 10-Digit Long Code) requirements for business messaging in the United States and Canada. This ensures that your business messages achieve the highest delivery rates possible while protecting consumers from unsolicited spam.

3. E911 Emergency Services

In accordance with CRTC (Canada) and FCC (US) regulations, VoIP providers must provide Enhanced 911 (E911) services. Talki Talki requires every user to register a valid physical address for each phone line. This address is used to route emergency calls to the appropriate local Public Safety Answering Point (PSAP).

4. Data Sovereignty & PIPEDA

As a Canadian-based startup, Pandacat Inc. complies with the Personal Information Protection and Electronic Documents Act (PIPEDA). We ensure that all personal information is handled with the highest level of care, and we maintain data processing agreements with our sub-processors (Twilio, Google Cloud) that reflect these rigorous standards.

5. Infrastructure & Certifications

Our platform is built on enterprise-grade infrastructure. Our underlying service providers maintain several critical security certifications, including:

  • SOC 2 Type II: For rigorous security, availability, and processing integrity.
  • ISO/IEC 27001: For information security management systems.
  • PCI DSS: For secure handling of payment data via Stripe.

6. Telephony Trust & Vetting

To maintain network integrity and comply with international carrier requirements, Pandacat Inc. enforces a mandatory Telephony Trust vetting process.

All users must provide a valid Business Tax ID (EIN for US, Business Number for Canada) and a verified business website. This data is used solely for carrier registration and identity verification.

Mandatory Compliance Requirements:

US Carriers require A2P 10DLC compliance for all business messaging. This service may cost $12 USD per month for Small Business A2P brands. Canadian brands are currently exempt from this specific recurring requirement.

Pandacat Inc. reserves the right to discontinue service immediately and release all associated phone numbers if registration data is found to be fraudulent or used for unauthorized mass-messaging (spam).

For regulatory inquiries, please contact our compliance desk at compliance@pandacat.ca