Certifications and Compliance

AICPA SOC 2 Compliance Certification

Phonexa has completed its SOC 2 (Security and Organization Controls) compliance audit from an independent auditor, allowing our users to feel confident in the security and compliance of all data under globally recognized standards.

Fraud Prevention, Data Verification and Hygiene, Data Append

Companies depend on consumer information that is accurate, complete, and consistent. At Phonexa we’re proud to present our comprehensive, multi-level approach to fighting fraud and preserving data integrity.

ISO/IEC 27001:2005

The ISO/IEC 27001:2005 standard specifies the requirements for establishing, enacting, operating, guarding, maintaining, and enhancing Phonexa’s Information Security Management system within the context of specific business risks. It also includes requirements for the implementation of our strict security controls.

ISO/IEC 27001:2013

The ISO/IEC 27001:2013 standard outlines requirements for establishing, enacting, maintaining, and bolstering Phonexa’s Information Security Management system. It also includes requirements for the assessment and treatment of information security threats.

CDSA Certificate of Compliance

The CDSA Content Protection & Security (CPS) Standard specifies a set of controls designed to ensure the integrity of intellectual property and the confidentiality and security of media assets at every stage of the digital media supply chain.

PCI DSS Compliant

PCI DSS ensures a secure network, encryption of sensitive data including banking information, and social security numbers, among other enforcement measures.

HIPAA Compliant

At Phonexa, we pursue our business objectives with integrity and operate in full compliance with all applicable laws and regulations. As such, all Phonexa employees are required to complete training in the awareness and applicable laws of HIPAA.

CIPP US Certified

Our personnel are Certified Information Privacy Professionals and possess an understanding of global privacy concepts and data protection laws and practices. CIPP is the global industry standard for professionals in the privacy field and it helps organizations strengthen compliance and risk mitigation practices.

TRUSTe Certified

TRUSTe LLC (TRUSTe) offers a set of privacy assurance programs that enable companies that collect or process personal information to demonstrate responsible practices consistent with regulatory expectations and standards for privacy accountability.

CCPA Compliant

The California Consumer Privacy Act (CCPA) is a state-wide data privacy law that regulates how businesses all over the world are allowed to handle the personal information of California residents.

STIR/SHAKEN Compliant

CCPA Compliant

STIR/SHAKEN are FCC standards that help verify caller sources to assure that calls come from real people and not spoofed or fake caller IDs. Phonexa is certified for the full implementation of STIR/SHAKEN protocols to validate call sources and improve the user experience for both our clients and their customers.