Security & Compliance at WorldAtlantus

How we protect your data, your calls, and your compliance posture.

1. Overview

WorldAtlantus operates enterprise cloud telephony and messaging services for businesses, BPOs, and carriers. Security and regulatory compliance are built into the platform rather than bolted on. This page summarizes the controls and standards we maintain. For a current, detailed posture or to request supporting documentation, contact sales@worldatlantus.com.

2. Data Encryption

  • In transit: All signaling and media are encrypted using TLS 1.3, with SRTP for voice media on supported endpoints.
  • At rest: Stored data, including call recordings and customer records, is encrypted with AES-256.
  • Key management: Encryption keys are managed separately from the data they protect and rotated on a defined schedule.

3. STIR/SHAKEN Attestation

For voice traffic, WorldAtlantus supports STIR/SHAKEN call authentication. Outbound calls can be signed with full A, partial B, or gateway C attestation depending on the originating relationship, with per-customer signing policies and keys. Attestation maps directly to FCC obligations for originating, intermediate, and gateway providers.

4. A2P 10DLC & Messaging Compliance

For US application-to-person messaging, we handle A2P 10DLC brand registration, campaign vetting, and trust scoring through The Campaign Registry. Toll-free messaging numbers are submitted for carrier verification. Automatic STOP/HELP keyword handling and opt-out management are available on all messaging products.

5. SOC 2

WorldAtlantus is pursuing SOC 2 Type II attestation. A SOC 2 Type II report is currently in progress; we do not claim a completed certification until the report is issued. Customers with a contractual requirement may request the current status and timeline from our team.

6. GDPR & Data Processing

Our practices for personal data are described in our Privacy Policy. A Data Processing Agreement (DPA) is available on request for customers who require one to meet GDPR or other data-protection obligations. We support data subject access and deletion requests in line with applicable law.

7. Access Control & Monitoring

  • Role-based access control with least-privilege defaults for both customer and internal accounts.
  • Single sign-on via SAML/OAuth for supported products.
  • Full audit logging of administrative and security-relevant events.
  • Continuous monitoring of infrastructure with alerting and incident response procedures.

8. Network & Robocall Integrity

Our network applies behavioral analytics and reputation scoring to detect and mitigate illegal robocall traffic, and we help eligible customers prepare and file their Robocall Mitigation Plan in the FCC Robocall Mitigation Database (RMD). These measures support compliance with the TRACED Act and related FCC rules.

9. Reporting a Security Issue

If you believe you have found a security vulnerability or have a security concern, please contact us so we can investigate promptly: