Compliance & Standards

Our Compliance Commitment

Switchline operates under strict regulatory oversight and maintains certifications from leading industry bodies. Our compliance program ensures we meet or exceed all requirements for telecommunications providers.

Telecommunications Compliance

Federal Communications Commission (FCC)

As a telecommunications service provider, we comply with all FCC regulations:

• Part 68 Rules: Equipment authorization and network protection
• Accessibility Requirements: Section 255 and 716 compliance for users with disabilities
• Emergency Services: E911 compliance and location services
• Robocall Prevention: STIR/SHAKEN implementation for call authentication
• Customer Privacy: Customer Proprietary Network Information (CPNI) protection

Telephone Consumer Protection Act (TCPA)

We strictly enforce TCPA compliance to protect consumers:

• Consent Requirements: Proper consent verification for all automated communications
• Opt-Out Mechanisms: Easy unsubscribe options for all users
• Do Not Call Registry: Respect for national and state Do Not Call lists
• Time Restrictions: Compliance with calling time limitations

Privacy Regulations

General Data Protection Regulation (GDPR)

Full compliance with European Union data protection requirements:

• Lawful Basis: Clear legal basis for all data processing activities
• Data Subject Rights: Access, rectification, erasure, and portability rights
• Data Protection Officer: Designated DPO for privacy oversight
• Privacy by Design: Data protection built into all systems and processes
• Breach Notification: 72-hour breach notification procedures

California Consumer Privacy Act (CCPA)

Comprehensive compliance with California privacy rights:

• Consumer Rights: Right to know, delete, and opt-out of data sales
• Data Disclosure: Transparent reporting on data collection and use
• Non-Discrimination: Equal service regardless of privacy choices
• Verified Requests: Secure identity verification for consumer requests

Other Privacy Laws

We also comply with additional privacy regulations including:

• PIPEDA: Canadian Personal Information Protection and Electronic Documents Act
• LGPD: Brazilian General Data Protection Law
• State Privacy Laws: Virginia CDPA, Colorado CPA, and other state regulations

Financial and Payment Compliance

Payment Card Industry (PCI DSS)

Level 1 PCI DSS compliance for secure payment processing:

• Secure Networks: Firewalls and encrypted data transmission
• Data Protection: Cardholder data protection and secure storage
• Access Controls: Restricted access to cardholder data
• Monitoring: Regular security testing and vulnerability management
• Annual Audits: Qualified Security Assessor (QSA) validation

Anti-Money Laundering (AML)

Comprehensive AML compliance program:

• Customer Due Diligence: Identity verification and risk assessment
• Suspicious Activity Reporting: SAR filing when required
• Transaction Monitoring: Automated systems to detect unusual patterns
• Employee Training: Regular AML training for all staff

Security and Infrastructure Standards

SOC 2 Type II

Service Organization Control 2 compliance covering:

• Security: Protection against unauthorized access
• Availability: System availability for operation and use
• Processing Integrity: Complete and accurate processing
• Confidentiality: Protection of confidential information
• Privacy: Protection of personal information

ISO/IEC 27001

International standard for information security management:

• Risk Management: Systematic approach to information security risks
• Management System: Continuous improvement framework
• Security Controls: Comprehensive set of security measures
• External Audit: Annual certification by accredited auditors

Industry Certifications

Law Enforcement Cooperation

Legal Process Requirements

We cooperate with law enforcement through proper legal channels:

• Subpoenas: Response to valid court-issued subpoenas
• Search Warrants: Compliance with judicial search warrants
• Emergency Requests: Immediate response to emergency situations
• CALEA Compliance: Communications Assistance for Law Enforcement Act

Transparency Reporting

We publish annual transparency reports detailing:

• Number of legal requests received
• Types of data requested
• Percentage of requests fulfilled
• Any challenges to overly broad requests

Compliance Monitoring

Internal Compliance Program

Our comprehensive compliance monitoring includes:

• Compliance Officer: Dedicated chief compliance officer
• Regular Training: Ongoing compliance training for all employees
• Automated Monitoring: Systems to detect potential compliance issues
• Quarterly Reviews: Regular assessment of compliance status
• Documentation: Comprehensive compliance documentation and records

Third-Party Audits

Independent verification through:

• Annual SOC 2 Audits: Comprehensive security and compliance review
• PCI DSS Assessments: Quarterly vulnerability scans and annual assessments
• Privacy Audits: GDPR and CCPA compliance verification
• Regulatory Reviews: Periodic reviews by telecommunications regulators