ClovieGovern AI across the network, the care desk and the customers you resell to.
The telecom pack holds SIM swaps, port-outs and network changes for a person, keeps every agent away from lawful intercept and keeps subscriber identifiers out of prompts.
Telecom
| Policy | Decision | Mode |
|---|---|---|
| Approve SIM swaps and port-outs | Approval | Enforce |
| Approve call record and location lookups | Approval | Enforce |
| Keep agents away from lawful intercept | Deny | Enforce |
| Approve network changes | Approval | Enforce |
| Keep subscriber identifiers out of prompts | Deny | Monitor |
- Tool
- sim.swap_esim
- Customer
- Verified by code
- Requested
- 1 min ago
Care and network agents sit next to your most sensitive data.
Account takeover
A care agent that swaps a SIM or ports a number on request is a new path to account takeover.
Network control
Operations agents can change router, switch and radio access configuration faster than review can.
Subscriber data
Call records, location and IMSIs reach prompts that leave your network for third-party models.
The rules behind the telecom pack
The rules and guidance that shape how AI is controlled in telecom and media, each linked to its official source.
- 47 CFR 64.2010Federal Communications CommissionSafeguards on the disclosure of customer proprietary network information, such as call records. (official source, opens in a new tab)
- SIM swap and port-out rulesFederal Communications CommissionCustomer authentication before a carrier moves a number to a new SIM or another carrier. (official source, opens in a new tab)
- CALEA rules, 47 CFR 1.20003Federal Communications CommissionInterception may be activated only with the affirmative intervention of a carrier's own staff. (official source, opens in a new tab)
- Communications hardening guidanceCISA, NSA, FBI and international partnersVisibility and hardening for carrier networks, including changes outside change management. (official source, opens in a new tab)
Clovie maps its controls to these texts to help your teams; it is not legal advice, and using Clovie does not on its own make an organization compliant with any of them.
Controls in the telecom pack
6 controls, each a policy you install from the Policy Hub. Every one starts in monitor mode and changes nothing until you promote it after a simulation on your own traffic.
Telecom
Five policies for carriers, used with the action governance pack for destructive tools.
- A person approves
Approve SIM swaps and port-outs
A person approves before an agent moves a number to a new SIM, an eSIM or another carrier.
Telecom pack · mapped to FCC SIM swap and port-out rules - A person approves
Approve call record lookups
Agents without the cpni:read permission need an approver to read call records, usage or location.
Telecom pack · mapped to 47 CFR 64.2010 - Blocked
Lawful intercept out of reach
No agent can provision, activate or read lawful intercepts, pen registers or trap and trace.
Telecom pack · mapped to CALEA, 47 CFR 1.20003 - A person approves
Approve network changes
A person approves every configuration change or reboot on routers, switches, firewalls and radios.
Telecom pack · mapped to CISA communications hardening - Blocked
Identifiers out of prompts
Blocks prompts that contain an IMSI, an IMEI or a SIM card number next to its label.
Telecom pack · mapped to 47 CFR 64.2010(a) - Blocked
No destructive tools in production
Delete, purge and terminate tools are blocked for production agents and hidden from their tool lists.
Agent action governance pack
How a SIM swap a care agent starts is governed.
Run it for yourself and for your customers
Install Clovie in your own network for your own agents, and run multi-tenant installs to offer governed AI to business customers.
- SaaS
- Customer VPC
- On-premises
- Air-gapped
Inside your network
Self-hosted installs keep subscriber data, prompts and traces in your own data centers.
Resell governed AI
A provider console runs isolated customer organizations, each on its own licence and its own policies.
Network operations
Govern agents in your NOC with network change approval and tools scoped to the teams that own them.
Controls mapped to the frameworks you answer to
- NIST AI RMF: NIST AI Risk Management Framework
- OWASP Top 10: OWASP Top 10 for LLM applications and agentic AI
- ISO/IEC 42001: ISO/IEC 42001 AI management system
- EU AI Act: EU Artificial Intelligence Act
Questions
Why is lawful intercept blocked rather than sent for approval?
The CALEA rules require interception to be activated with the affirmative intervention of an individual officer or employee of the carrier. An agent is neither, so the pack denies every agent access instead of asking for approval.
Can care agents still look up a customer's usage?
Yes. Give the cpni:read permission to agents whose application authenticates the customer first. Other agents need an approver for each lookup.
Can we offer Clovie to our business customers?
Yes. Multi-tenant installs and a provider console let you run Clovie for business customers, each in its own isolated organization. Talk to us about the partner program.
Will the pack block anything on day one?
Every policy installs in monitor mode, records what it would have done, and changes nothing until you promote it.
Do lab and test devices count as network changes?
Tag lab equipment tools lab and the network change policy leaves them out, so engineers can test freely away from production.
See the telecom pack on your own agents.
We'll run the controls on your own agents in monitor mode and show what they would have held and blocked.