The STIR/SHAKEN Hosted Signing Service enables Anveo customers to use their own STIR/SHAKEN certificates, hosted in Anveo’s Certificate Repository, and set up call signing policies to automatically sign calls routed through Anveo across all available carriers in Anveo’s Hosted Least Cost Routing (LCR) service without the need to integrate other third party signing services or invest into their own signing infrastructure.

Who is the Hosted Signing Service For?

According to the FCC’s regulations, starting June 20, 2025, the FCC requires all voice service providers, including originating service providers, with a STIR/SHAKEN implementation obligation to use their own STIR/SHAKEN certificate(s) to sign and attest their US-bound calls. This means that originating service providers must:

• Obtain a Service Provider Code (SPC) token from the Policy Administrator
• Use the SPC token to obtain their own STIR/SHAKEN certificates from a STIR/SHAKEN Certificate Authority
• Sign all US-bound calls using their own certificates by June 20, 2025
• Independently decide attestation levels (A, B, or C) for outbound calls

Non-compliance with the FCC regulations carries risks. Consult your legal counsel regarding STIR/SHAKEN regulations, including the Eighth Report and Order.

Starting June 20, 2025, Anveo Direct reseller customers (voice service providers) are expected to sign all US-bound calls using their own STIR/SHAKEN certificates. But managing certificates and developing signing infrastructure can be complex, and using specialized third-party services may be costly.

Introducing Anveo’s STIR/SHAKEN Hosted Signing Service

Our new service will sign your calls using your own STIR/SHAKEN certificate, with the call attestation level that you specify, without requiring you to develop your own STIR/SHAKEN infrastructure. Here’s how it works:

1. Upload your STIR/SHAKEN certificate and private key issued by an approved Certificate Authority. Anveo will sign calls on your behalf using your certificate. We securely store your private key in our Certificate Repository (CR) for call signing and make the public certificate accessible to downstream carriers for call signature verification.

2. Set a default account-wide attestation level (A, B, or C) which can be overwritten on a per-call basis via ‘P-Attestation-Indicator’ SIP header. If the SIP header is not found, the default attestation level will be used.

Anveo’s Hosted Signing Service can also handle multiple certificates (e.g., for backups, regions, or phased rollouts).
And the best part is that the STIR/SHAKEN Hosted Signing Service is Free for Anveo Direct customers for calls that go through Anveo.