trust & compliance
Factual list. No badge theater.
What VoipFlow enables and supports, stated precisely. Emergency call delivery stays with your carrier — we orchestrate software and we say exactly that, because "guarantees" in this domain would be a lie.
Compliance posture
- Kari's Law notifications — supported: notification to on-site personnel when a 911 call is placed (informational notification)
- RAY BAUM'S PIDF-LO pass-through — supported: dispatchable location passes through intact to the carrier's emergency call handling
- 911 delivery — stays with your licensed carrier. We enable and support the notification and location mechanisms; we do not deliver emergency calls and never claim to
- HIPAA BAA — available on Growth ($799/mo tier)
- EU data pinning — EU-tenant workloads pinned to EU edge nodes (Frankfurt, London)
Security controls
- TLS 1.2+ on every signaling path; SRTP on every media path
- IP ACLs per tenant partition — signaling accepted only from allow-listed ranges
- Toll-fraud controls per partition: rate limits, destination restrictions, and alerting on anomalous dialing patterns
- Tenant isolation — configuration, certificates, ACLs, and media isolated per partition
- Certificates — ACME-issued, auto-renewed; no human handles private key material in normal operation
Said plainly, once: VoipFlow is multi-tenant cloud infrastructure orchestration software. We are not a carrier, we don't provide trunks, lines, phone numbers, or minutes, and we don't route PSTN traffic — your customer brings their own licensed carrier (BYOC), and the software layer does the orchestration.
edge nodes — where your tenants' sessions land5 NODES OK