CPNI compliance is one of the most commonly assumed and least commonly documented obligations in telecom. EquiTel builds CPNI programs that can be demonstrated — policy, training, authentication procedures, annual certification, and remediation when the existing program will not survive scrutiny.
A program, not a template.
We build CPNI policies and manuals against how your company actually handles customer data — who touches it, through which systems, and under what authentication.
The evidence behind the annual filing.
Training turns a policy into a program. EquiTel delivers role-appropriate CPNI training, maintains the completion record, and establishes what the annual certification can accurately assert. The certification is filed by STIRSHAKEN.AI.
When the program cannot be demonstrated.
If documentation is missing, outdated, or inconsistent with practice, remediation rebuilds the record in a defensible sequence — and closes the gap that produced it.
Customer Proprietary Network Information is the data a telecommunications carrier obtains about a customer by virtue of providing service — the numbers called, the services purchased, the configuration of the account. Federal rules restrict how it is used, disclosed, and protected.
More than a policy document. It requires written policies, employee training, authentication procedures, access controls, an incident response process, an annual review, and records demonstrating each of those happened. A policy with no training records is difficult to defend.
Covered carriers file an annual certification stating that they have established operating procedures adequate to ensure compliance, accompanied by a statement explaining how those procedures work. The certification is a statement of fact about your program — which is why the program has to exist first.
Start with an honest gap assessment, then build in order: policy that matches operations, training that reaches the people handling customer data, records that prove it, and a review cycle that keeps it current. EquiTel builds these as a remediation sequence rather than a document drop.
Filing execution and STIR/SHAKEN certification are handled by STIRSHAKEN.AI, our sister company — AI-powered, backed by humans.
STIRSHAKEN.AI takes providers through STIR/SHAKEN certification end to end — eligibility, SPC token, certificates, and the records that keep them renewing — and executes every regulatory filing.
Get STIR/SHAKEN Certified All Filing ServicesOnce you are in good standing, STIR SHIELD watches the obligation set and files what is required. Optional, and contracted directly with STIRSHAKEN.AI.
Explore STIR SHIELDEquiTel sets the position where judgement is required. STIRSHAKEN.AI certifies, files, and monitors. Engaging either does not commit you to the other.
Guides covering the questions that bring providers to this practice.
Most carriers have a CPNI policy. Far fewer have a CPNI program — and the annual certification is a statement about the program, not the policy.
Read the guideA short filing that makes a long claim: that a program existed and operated for an entire year. Most of the risk is in the statement attached to it.
Read the guideTraining is the difference between a CPNI policy and a CPNI program — and the records are the only part anyone can verify afterward.
Read the guideEquiTel builds CPNI programs that hold up when someone asks to see the training records.
