STIR/SHAKEN Compliance
STI-PA, STI-CA & STI-GA setup, SPC token management, and Robocall Mitigation Database filing, done right the first time.
Starting at $1,500.00 setup fee
What's Included
STIR/SHAKEN caller-ID authentication is mandatory for voice service providers. We handle your SPC token application (STI-PA), digital certificate setup (STI-CA), Governance Authority registration (STI-GA), and your Robocall Mitigation Database (RMD) filing with the FCC. This is the STIR/SHAKEN portion of Phase 2 of our telecom compliance setup - Phase 1 (FCC Core: FRN, Form 499-A, Form 477) is covered on our FCC & Regulatory Filings page and must be completed first.
This service covers:
- STI-PA - SPC token application (iconectiv Policy Administrator)
- STI-CA, digital certificate setup (Certification Authority)
- STI-GA - Governance Authority registration
- Attestation policy configuration (A/B/C guidance)
- FCC Robocall Mitigation Database (RMD) filing
- Operating Company Number (OCN) setup
- Downstream carrier documentation package
Not Sure If You Need This?
STIR/SHAKEN comes with a lot of acronyms. Answer these three quick questions to see whether it applies to you.
STIR/SHAKEN Setup - Part of Phase 2
A one-time implementation project. Needs Phase 1 (FCC Core) complete first, see our FCC & Regulatory Filings page if you haven't done that yet. Yearly institutional fees (NECA, iconectiv, STI-CA certificate, about $1,500/yr combined) are separate, billed directly by those bodies.
STIR/SHAKEN + RMD/OCN Setup
Full caller-ID authentication setup for your voice network, plus RMD and OCN.
- Robocall Mitigation Database (RMD) filing
- Operating Company Number (OCN) setup
- STI-PA - SPC token application (Policy Administrator)
- STI-CA, digital certificate setup (Certification Authority)
- STI-GA - Governance Authority registration
- Downstream carrier documentation package
What to Expect
A quick reference before you order, what we'll need, how long it takes, and what you get back.
What You'll Need
- Company name and Operating Company Number (OCN), if known
- Details of your softswitch/platform (e.g. FreeSWITCH, Asterisk, Metaswitch)
- Whether you already hold an SPC token or STI certificate
Typical Timeline
SPC token and certificate setup typically completes in 5-10 business days once the Policy Administrator processes your application; Robocall Mitigation Database filing is submitted within 3-5 business days of intake.
What You'll Receive
- SPC token and STI certificate configuration confirmation
- FCC Robocall Mitigation Database filing confirmation
- A downstream carrier documentation package you can share on request
Why It Matters
Stay Off Blocklists
Unauthenticated or mis-attested calls are increasingly filtered or labeled "Spam Likely" by carriers, proper setup keeps your traffic clean.
Meet FCC Deadlines
The FCC requires RMD filings and STIR/SHAKEN implementation on a strict schedule, we track yours automatically.
Carrier-Ready Documentation
Upstream carriers frequently request proof of STIR/SHAKEN compliance before signing interconnection agreements, we prepare it in advance.
How It Works
Network Assessment
We review your switch/softswitch platform and current call signing capability.
Token & Certificate Setup
We apply for your SPC token and configure your STI certificate with an approved CA.
RMD Filing
Your Robocall Mitigation Plan is drafted and filed with the FCC database.
Ongoing Monitoring
We track re-attestation and renewal dates so your authentication never lapses.
Frequently Asked Questions
What is an SPC token?
A Service Provider Code token is the credential that lets your network sign calls under STIR/SHAKEN; it is issued by the industry Policy Administrator (STI-PA).
Do small VoIP providers need to comply?
Most originating voice providers are covered by the FCC's STIR/SHAKEN and Robocall Mitigation Database rules, including many smaller providers, we'll confirm your exact obligation.
What attestation level will my calls get?
It depends on your relationship with the calling customer; we help you configure policy to maximize A-level (full) attestation where appropriate.
What do all these terms actually mean?
In plain terms: STIR/SHAKEN is a caller-ID "signature" that proves a call is really coming from you, so it doesn't get flagged as spam. STI-PA (Policy Administrator) issues the SPC token that lets you sign calls. STI-CA (Certification Authority) issues your digital certificate. STI-GA (Governance Authority) oversees the whole system. Attestation (A/B/C) is how confident your signature is - A means "we fully vouch for this caller," C means "we can't vouch for them at all." The Robocall Mitigation Database (RMD) is a public FCC filing every voice provider must submit, signing (STIR/SHAKEN) or not.
Do I need Phase 1 first?
Yes, this is the STIR/SHAKEN portion of Phase 2, and it requires your FCC Core registration, FRN, and Form 499-A (Phase 1) to already be filed. See our FCC & Regulatory Filings page if you haven't done Phase 1 yet.
Are there ongoing costs after setup?
Yes, separate from our one-time setup fee: NECA charges ~$500/yr for your OCN, iconectiv charges ~$500/yr for STI-PA, and your STI-CA digital certificate renews at ~$500/yr, these go directly to those organizations. Annual re-attestation and renewal tracking is included in our Ongoing Compliance plan.
Ready to get stir/shaken compliance handled?
Tell us what you need and we will confirm scope, price and timeline before any work begins.
Start Now