Communications Provider/Reseller Schedule

Effective June 1, 2026

This Communications Provider/Reseller Schedule ("Provider Schedule") applies when a Customer uses MultiTEL Services to provide voice, messaging, numbers, eSIM, PBX, API, trunking, white-label, or related communications capabilities to downstream customers, brands, subscribers, applications, or platforms. It supplements the Terms of Service and Messaging Acceptable Use Policy.

1. Enhanced provider approval

Provider service requires MultiTEL's written approval and enhanced due diligence. You must disclose your legal and trade names, ownership and control, tax and registration information, operating locations, websites, service description, target markets, upstream and downstream roles, technical architecture, traffic types, countries, expected volumes, compliance contacts, abuse procedures, and other information MultiTEL reasonably requests.

You must promptly disclose material changes, including ownership, control, products, traffic, markets, interconnections, onboarding standards, or regulatory status. MultiTEL may condition service on deposits, credit limits, security controls, testing, traffic caps, direct contracts, or additional documentation.

2. Responsibility for downstream parties

You are responsible for every downstream customer, Brand, subscriber, user, application, and traffic source using your account or interconnection. Before activation, you must identify and verify each downstream party to a standard appropriate to its risk and retain supporting records. Anonymous, fictitious, unverifiable, sanctioned, fraud-associated, or materially misrepresented parties may not use the Services.

You must contractually require downstream parties to comply with obligations at least as protective as the Terms, Messaging Acceptable Use Policy, this Provider Schedule, applicable service schedules, law, carrier requirements, and registry rules. You must maintain effective suspension, credential-revocation, number-control, complaint, and escalation procedures and enforce them promptly.

3. No undisclosed or nested resale

You may provide Services only through the approved business model and to disclosed categories of downstream parties. Nested resellers, sub-aggregators, traffic brokers, lead generators, shared gateways, or other intermediaries require prior written approval. You may not commingle unidentified traffic or conceal the party that originates, controls, or benefits from communications.

4. Messaging registration and consent

For messaging, each actual Brand, Campaign, sender, use case, and downstream relationship must be accurately registered where required. Your identity may not be substituted for a downstream Brand merely to obtain approval. You must ensure that downstream senders obtain and retain legally sufficient consent, honor opt-outs, maintain suppression lists, identify themselves, and send only approved traffic.

You must maintain a mapping from every message and sending number to the originating downstream party, Brand, Campaign, use case, application, and relevant approval. That mapping must be available to MultiTEL promptly on request.

5. Technical and security controls

You must maintain reasonable security and abuse-prevention controls, including:

• unique credentials and least-privilege access for downstream parties;
• multi-factor authentication and network restrictions where appropriate;
• logging sufficient to attribute traffic and investigate incidents;
• rate, spend, volume, destination, and anomaly controls;
• protection against spoofing, account takeover, SIM-box, robocalling, phishing, smishing, and toll fraud;
• prompt patching, credential rotation, and access revocation; and
• tested incident-response, preservation, and notification procedures.

Do not expose MultiTEL credentials directly to downstream parties unless expressly authorized. API and interconnection access may be restricted by IP, certificate, sender, number, traffic type, geography, or throughput.

6. Records and audit

Maintain KYC, beneficial-ownership, authorization, registration, consent, traffic-attribution, security, complaint, opt-out, payment, suspension, and enforcement records for the period required by law and at least four years. MultiTEL may conduct risk-based or for-cause reviews and may require samples, system demonstrations, policies, contracts, or independent audit evidence.

You must provide requested information promptly and must not alert a downstream party to a confidential investigation where prohibited by law or reasonably requested to preserve network security or evidence.

7. Monitoring, complaints, and incident response

You must continuously monitor traffic and promptly investigate anomalies, consumer complaints, carrier notices, registration discrepancies, and abuse indicators. Maintain a staffed compliance contact capable of restricting traffic without delay. Notify MultiTEL immediately of material abuse, legal demands affecting the Services, security incidents, or unauthorized access.

As permitted by law, MultiTEL may review account and registration information, metadata, content indicators, representative communications, complaint data, and traffic patterns; trace traffic to downstream parties; and preserve approval and enforcement records.

8. Immediate protective action

MultiTEL may filter, throttle, reroute, quarantine, block, suspend, disconnect, reclassify, or terminate affected traffic, numbers, credentials, downstream parties, interconnections, or the entire account immediately where necessary to address suspected fraud, unlawful traffic, consumer harm, registration evasion, security risk, carrier action, or failure to cooperate. MultiTEL may require you to suspend a downstream party and may prevent re-onboarding through another account.

9. Charges, penalties, and indemnity

You are responsible for all usage, recurring, carrier, registry, vetting, number, tax, investigation, remediation, and penalty charges attributable to your account and downstream traffic. You must not represent MultiTEL pricing, approval, coverage, or regulatory status inaccurately. Your indemnification obligations under the Terms include claims and penalties caused by downstream parties, except to the extent prohibited by law.

10. Regulatory responsibility

You are responsible for determining and maintaining licenses, registrations, filings, tax treatment, consumer disclosures, emergency-service obligations, privacy compliance, accessibility, law-enforcement support, and other requirements applicable to your role, products, customers, and jurisdictions. MultiTEL's approval or technical support is not legal advice and does not establish your regulatory classification.