2019 TRACED Act Spurs Global STIR/SHAKEN Vetting as STI-GA Taps Numeracle

For cybersecurity professionals battling caller ID spoofing, the STI-GA’s move to vet foreign governance authorities before they can interconnect with the U.S. STIR/SHAKEN ecosystem is a direct defense upgrade. It means that international calls claiming to be authenticated will soon be backed by a verified chain of trust—not just a hope that the issuing body has good intentions. The framework’s emphasis on certificate-management security and ongoing monitoring directly addresses the risk of a weak link in the global authentication fabric.

The Secure Telephone Identity Governance Authority (STI-GA) has selected Numeracle to design and implement a comprehensive vetting framework for Non-Jurisdictional Governance Authorities (NJGAs) that seek interoperability with the U.S. STIR/SHAKEN ecosystem. This move, announced on July 23, 2026, marks a pivotal step in extending the call authentication standards mandated by the TRACED Act of 2019 beyond domestic borders. As global adoption of STIR/SHAKEN accelerates, the lack of a consistent cross-border governance mechanism has become a critical vulnerability. The new framework aims to close that gap by establishing rigorous evaluation criteria focused on identity verification, governance structures, certificate-management security, and policy alignment with STI-GA requirements.

“

The Secure Telephone Identity Governance Authority (STI-GA) has selected Numeracle to design and implement a comprehensive vetting framework for Non-Jurisdictional Governance Authorities (NJGAs) that seek interoperability with the U.S.

The TRACED Act catalyzed the deployment of STIR/SHAKEN within the United States, requiring voice service providers to authenticate caller ID and combat robocalls and illegal spoofing. Now, with international regulators and operators pursuing similar authentication architectures, the need for interoperability is urgent. Without a unified vetting process, a foreign governance authority could introduce systemic risks—ranging from lax certificate issuance to insufficient oversight of service providers—that undermine trust in the entire authentication chain. The STI-GA's selection of Numeracle signals a proactive move to erect a global gatekeeping function that preserves the integrity of the U.S. ecosystem while enabling legitimate international calls to be securely authenticated.

Numeracle, a specialist in call trust and identity management, will lead the development of a multi-faceted assessment process. The framework will scrutinize an NJGA’s legal identity, board and management structure, financial viability, operational resilience, and security controls surrounding the issuance and management of digital certificates. This is not a one-time audit; the program includes ongoing monitoring to ensure continued compliance as threats evolve. By formalizing these requirements, the STI-GA creates a clear pathway for foreign authorities to interconnect, but also sets a high bar that may slow integration for entities with weaker governance. This trade-off between security and speed will be a defining tension as the framework rolls out.

From a market perspective, this development validates Numeracle’s growing role as a critical infrastructure partner in the anti-robocall ecosystem. It also underscores the maturation of STIR/SHAKEN from a domestic regulatory obligation to a global standard. Telecom operators, cloud communications providers, and enterprises that rely on international calling will be directly affected. Those that have already aligned with STI-GA policies stand to benefit from smoother cross-border call completion and enhanced consumer trust, while those outside the framework may face increased scrutiny or blocked calls.