Short answer
Compliance is shared. FirstNet delivers the service under ISO 27001 and ISO 9001, and number ownership is verified at onboarding, but your call-reason content and consent practices also shape POPIA outcomes, so FirstNet does not claim compliance on your behalf.
In detail
What FirstNet is responsible for:
- Delivering the service under an ISO 27001 information security management system, covering security governance, risk management, change control, monitoring and incident response.
- Following ISO 9001 quality processes for service delivery.
- Verifying proof of number ownership and business registration before your brand profile goes live.
- Locking your verified identity so that only authorised changes made through FirstNet are accepted.
What stays with you is the content of your call reasons, your consent practices for contacting customers, and your internal legal and brand approvals.
In practice, keep call reasons general enough that they do not disclose personal information on a recipient's screen, check that your outbound calling has a lawful basis, and have your compliance team approve the profile and call reasons before the pilot. FirstNet is also ICASA-licensed for ECS and ECNS, and verification of number ownership helps keep your brand from being attached to numbers you do not control.
Source: FirstNet Truecaller for Business service page →
Didn’t answer your question?