Compliance Dashboard

In an effort to combat fraudulent calls and text messages, the United States telecommunications industry has acted on a number of regulatory changes that require businesses to obtain an attestation trust score through the creation of a business profile. This trust score will provide the underlying carrier with information to verify that the communications are not spam.

Clients can improve overall SMS and telecommunication reliability by submitting a single business profile through Slate for each of the following areas:

  Business Profiles

    • SMS Deliverability via A2P 10DLC
    • Caller ID Name - CNAM
    • Voice Call Certification via SHAKEN/STIR

These compliance measures are required industrywide and their associated business profiles are relatively quick to submit, with approval coming typically within 24 hours.

 

Setting Up Your Business Profiles

Setting up your institution's Business Profile requires the following information:

    • Employer Identification Number (EIN)
    • Website information
    • Social Media Information
    • Address
    • Authorized Representative Information - Designated Staff Member.

Compliance_Dashboard_-_Edit_Profile.png

To edit your business profile:

  1. Select Database from the main navigation.
  2. Under Communications, select Compliance Dashboard.
  3. Click Edit Profile. A popup appears.
  4. Complete each field in the profile, then click Submit. You can also click Save for Later. 

Refer to the following sections for more information on each compliance area.

 

SMS Deliverability via A2P 10DLC

The new registration process for businesses using 10DLC for A2P messaging is intended to decrease spammers and increase deliverability, giving your messages more credibility in the long run.

To comply with carriers, you will need to register for A2P 10DLC by filling out the Business Profile found within the Compliance Dashboard, as illustrated in the previous section. Once completed, carriers review the information provided and assign a Trust Score to your institution.

Lingo

A2P
Application-to-person texting (that is, using an SMS provider to send and receive messages).
10DLC
10-digit long code number (that is, a standard phone number).

Trust Score and Delivery Rates

The Trust Score is based on a scale from 0 to 100. A higher score allows for a greater rate of message delivery:

Score Message Delivery Rate
75-100 225 messages per second
50-74 120 messages per second
1-49 12 messages per second

If you are sending more than 3,000 text messages per day, or use more than 5 phone numbers, registration with the carriers via A2P 10DLC is considered to be required.

  Important!

Failure to register for A2P 10DLC may result in your messages being filtered and ultimately not delivered to the intended recipients. We strongly encourage everyone to register for A2P 10DLC via the Compliance Dashboard.

  Best Practice

Until you have registered for A2P 10DLC and completed the campaign use registration, you essentially have a Trust Score of zero. Registering will always increase your score, and therefore your send rates.

 

Caller ID Name (CNAM)

CNAM data—the 15-character textual name for a phone call—identifies incoming callers with either an individual or business name, associating their caller ID information with the phone number's registration data.

A terminating service provider retrieves the CNAM data when an individual receives a call. However, the CNAM data must first be registered to a known database that the carrier can scan.

Once your institution has established its Business Profile and has submitted the Voice Call Certification profile, you will be able to specify a Caller ID Name (CNAM) for outbound calls.

 

Voice Call Certification via SHAKEN/STIR – STIR/SHAKEN

The FCC requires all voice service providers to implement STIR/SHAKEN or SHAKEN/STIR, a validation standard that ensures Caller IDs for calls traveling via an interconnected phone network are marked as legitimate by the originating carrier, and validated by the receiving carrier, before getting to the consumer.

Phone Numbers that are conducting outbound calls are given one of three attestations.

    • Full Attestation (A)
    • Partial Attestation (B)
    • Gateway Attestation (C)

Lingo

STIR
Secure Telephone Identity Revisited
SHAKEN
Signature-based Handling of Asserted Information Using toKENs

If your institution submits its Voice Call Certification (SHAKEN/STIR) profile, it will be reviewed for the A-level attestation. If the Voice Call Certification is not submitted, then your institution will receive the B-level Attestation.

 

Frequently Asked Questions

Is this only for US-based institutions, or is this open to international institutions?
At this time, this is just for organizations based in the United States, but will be expanded to international institutions in the future.

Who should be listed as the authorized representative on the business profile?
This should be someone reasonably senior in the organization (for example, the Vice President of Enrollment), or someone with "Director" in their title, whose name and title are publicly visible (listed on your website). This will enable the form reviewer to more easily verify the information. Please note that this contact is for the Business Profile only and is a component of the Know Your Customer validation process. There is no public directory, and the individual will likely not be contacted.

What do I select for Regions of Operation on the business profile?
Regions of Operation refers to any region where your institution has a physical or staff presence.

If there are two legal entities sharing a database, which one should be listed as the legal name on the Compliance Dashboard?
We recommend selecting the organization that “owns” the database.

Is the Employer Identification Number (EIN) treated as a unique identifier for the purpose of the Business Profile, or are there separate validations/certifications per Slate instance based on the Compliance Dashboard submission?
The Employer Identification Number (EIN) is used solely for business verification and validation by the mobile carriers. Therefore even if an institution’s campuses need to operate separately, they should still submit the form with the most relevant EIN for this one-time verification.

Is there a way to know which individual completed the Business Profile?
At this time, there is no way to view which Slate user filled out or submitted the Business Profile.

If the Business Profile was submitted with incorrect information (for example, with an incorrect business address), is there a way to update those items?
Once the Business Profile is submitted, it enters a review process where it can no longer be updated. If it is ultimately rejected, then the profile will become editable again. Please note however that the Business Profile is only used for the one-time verification by the mobile carriers. It should not pose a problem if the Business Profile is submitted and approved with the incorrect business address.

Can the Caller ID Name (CNAM) be changed after being submitted?
At this time, the Caller ID Name (CNAM) cannot be altered once submitted. We hope to provide a mechanism within Slate in the near future that allows the CNAM to be edited as desired.

What if the A2P 10DLC registration returns a low Trust Score?
If the Trust Score returned is less than the usual thresholds, an appeal is handled automatically.

Are there fees associated with A2P 10DLC?
There is a one-time registration fee, as well as a monthly fee. The fee is assessed and charged by the telecommunications carriers, passed to Twilio, and then passed on to Slate.

Does Technolutions bill each Slate instance with the new monthly fee?
The fees will be debited from your Slate Credits automatically on a monthly basis.

Where can I learn more about A2P 10DLC?
Here are some useful resources:
Was this article helpful?
2 out of 2 found this helpful