By the Subsentio Compliance Team. Reviewed for accuracy against the U.S. Code, FCC orders, and the Federal Register.
TL;DR: A CALEA trusted third party (TTP) is a company that handles a carrier's lawful intercept obligations for it: the technology, the review of each legal order, the liaison with law enforcement, and the required recordkeeping. The FCC has formally recognized the model, and most carriers use a TTP rather than build the capability in-house because it is specialized, around-the-clock work that sits far outside their core business. The one thing a TTP does not do is take your legal responsibility off your hands, and an honest one will tell you so.
Every telecommunications carrier subject to CALEA faces the same awkward fact. It must be able to execute a lawful intercept correctly and on a deadline, yet almost none of them do it often enough to build real expertise around it. Lawful intercept is rare, technical, legally exacting, and unforgiving when a court order is on the clock. The trusted third-party model exists to solve exactly that mismatch. This article explains what a CALEA trusted third party is, what it actually does, why carriers hand the job over, and how to tell a genuine specialist from a vendor offering it as a sideline.
What a Trusted Third Party Is
A CALEA trusted third party, or TTP, is a company that delivers a carrier's CALEA compliance for it on an outsourced basis, combining the technical solution with the program around it. Rather than the carrier assembling its own intercept capability, legal review process, and law enforcement relationships, the TTP provides those as a service.
The model is not a workaround or a gray area. The FCC has formally recognized the use of trusted third parties as a way for carriers to meet their CALEA obligations, addressing it directly in its 2006 implementation orders and permitting carriers to comply either by building solutions with their equipment vendors or by contracting with a trusted third party. Outsourcing to a TTP is a route the regulator itself put on the table.
What a CALEA Trusted Third Party Actually Does
A good TTP carries four connected responsibilities.
The technology. The TTP supplies and manages the intercept solution that captures the target's communications and call-identifying information and delivers them to law enforcement in the required format, kept conformant to the recognized standard for the carrier's network.
Legal order review. When a court order arrives, someone has to confirm it is valid before anything is provisioned. The TTP reviews each order, and if it contains an error, such as citing the wrong legal authority, returns it to the agency for correction rather than acting on a defective order. This step protects the carrier and the subscriber alike.
Law enforcement liaison. The TTP arranges the connectivity between the carrier's network and the authorized agency, activates the solution, confirms the agency is receiving what the order requires, and deactivates everything at the court-ordered termination date. It is the working interface between the carrier and the agency for the life of the intercept.
Recordkeeping and security. CALEA and the FCC's rules require records and security controls around every intercept. The TTP maintains the documentation, protects the privacy and security of the intercept, and keeps the audit trail that shows the carrier did things correctly.
Bundled together, these turn a rare, high-stakes event into a managed, repeatable process.
The One Thing a TTP Does Not Do
Here is the part an honest TTP states plainly. Using a trusted third party does not transfer your legal responsibility. The FCC was explicit: if a carrier chooses to use a TTP, the carrier remains responsible for the timely delivery of call-identifying information and content to law enforcement and for protecting subscriber privacy.
What a TTP changes is who does the work and who carries the operational burden, not who holds the statutory duty. A strong TTP shoulders the day-to-day execution and typically provides a degree of indemnification, but the obligation under the law still belongs to the carrier. Any provider who implies they make your legal responsibility disappear is overselling, and that is worth noticing before you sign.
Why Carriers Outsource Instead of Building In-House
Carriers hand the job over for reasons rooted in the nature of the work.
Lawful intercept is infrequent. Most carriers receive orders rarely enough that they never build muscle memory, yet each order arrives with a deadline and no room to learn on the job. It is also specialized, demanding current knowledge of the right technical standard, the legal validity of orders, the handover interfaces to law enforcement, and the privacy and security rules around all of it. And it runs around the clock, because court orders do not wait for business hours. Staffing that capability in-house means hiring and retaining scarce expertise to sit ready for an event that might come twice a year, or at three in the morning.
For a carrier whose actual business is selling connectivity, that is a poor use of people and attention. Outsourcing puts the rare, exacting work in the hands of a team that does it every day. (How the in-house and outsourced options compare on total cost is a decision worth its own analysis, which we cover separately.)
The Service-Bureau Cost Advantage
The economics follow from the same logic. A TTP operates as a service bureau. It builds the technology, expertise, and law enforcement relationships once, then spreads that cost across a base of carrier clients. No single carrier has to fund a full-time intercept capability on its own.
That shared model is why a managed service is usually far more affordable than building in-house, especially for small and mid-sized carriers. Instead of carrying the fixed cost of systems and specialists that sit unused between orders, the carrier pays for a service sized to its needs and concentrates its own resources on its core business.
What Separates a True Specialist from a Side-Service Vendor
Not everyone offering CALEA help is built for it. Plenty of vendors bolt it on beside their main product. A genuine trusted third party looks different in a few ways worth checking:
- It is the core business, not a sideline. A specialist lives in lawful intercept full-time, which is what keeps their knowledge of standards and law enforcement relationships current.
- It reviews orders, not just routes data. The legal validity check is a defining TTP function. A vendor that simply forwards whatever arrives is missing the part that protects you.
- It runs around the clock. Real coverage means a team reachable when an order lands at any hour, not a ticket queue that opens on Monday.
- It stands behind the work. Established TTPs offer indemnification and a track record across many carriers, not a best-effort add-on.
- It keeps you defensible. Documentation, security, and a clear audit trail are part of the service because being able to show you complied matters as much as complying.
The difference shows up exactly when it matters most, the first time a real order arrives on a deadline.
Meet the Trusted Third Party
A trusted third party turns CALEA from a capability you have to build, staff, and worry about into a service you can rely on, while keeping you firmly in control of an obligation that remains yours.
Subsentio is one of the largest trusted third parties in the United States, built around lawful intercept as its entire business: the technology, the legal order review, the law enforcement liaison, and the recordkeeping run around the clock. If you are weighing whether to keep CALEA in-house or hand it over, a short conversation will show you what a managed approach would look like for your network. Get in touch for a no-pressure consultation.
Frequently Asked Questions
What is a CALEA trusted third party?
A company that handles a carrier's CALEA lawful intercept obligations on an outsourced basis, providing the technology, reviewing each legal order, acting as the liaison with law enforcement, and maintaining the required records.
Is using a TTP allowed by the FCC?
Yes. The FCC has formally recognized the use of trusted third parties as a way for carriers to meet their CALEA obligations, addressed directly in its 2006 implementation orders.
Does a TTP take over my legal responsibility?
No. The carrier remains legally responsible for timely delivery and subscriber privacy even when a TTP does the work. A good TTP carries the operational burden and often provides indemnification, but the statutory duty stays with you.
Why not just build CALEA compliance in-house?
Lawful intercept is rare, specialized, deadline-driven, and around-the-clock. Most carriers cannot justify staffing scarce expertise for an event that happens infrequently, which is why the outsourced model exists.
How do I tell a real TTP from a vendor offering it on the side?
Look for lawful intercept as the core business, genuine legal order review, around-the-clock coverage, indemnification, a track record, and full documentation and security, rather than a forwarded-data add-on.
About Subsentio
Subsentio is one of the largest trusted third-party providers of CALEA compliance in the United States. For more than two decades, it has helped telecommunications carriers, broadband providers, and VoIP operators meet their lawful intercept obligations: reviewing and validating each lawful order, building and managing solutions designed to meet the recognized safe harbor standards, and operating around the clock so carriers never face a court order alone.
