Industry Assurance Consulting, Inc.

IACAdviceCompliance,Consulting,Certifications Telephone:(215)4327341 6303BlueLagoonDrive,Suite400,Miami,FL33126 www.iacadvice.com,Email:compliance@iacadvice.com

March10,2014 BYELECTRONICSUBMISSION MarleneH.Dortch,Secretary FederalCommunicationsCommission OfficeoftheSecretary 44512thStreet,S.W.,SuiteTWA325 Washington,DC20554 Subject:EBDocketNo.0636,CPNICertificationdueMarch1,2014(CY2013Operations) DearMs.Dortch: XenotelCommunicationsLLC(herebyreferredtoasthe"Company"),submitsthe followingCPNICertification,regardingitsCalendarYear2013operations,incompliancewith Section64.2001etseq.oftheCommission'srules. TheCompanyrespectfullyaskstheCommissiontoacceptthefollowingCertificationas timelyfiled,intermsoftheMarch1,2014filingdeadlinelistedin47C.F.R.64.2009(e). ________________________ AlonzoBeyene IndustryAssuranceConsulting,Inc. RegulatoryAnalyst

Enclosures cc: FCCEnforcementBureau,TelecommunicationsConsumersDivision, 44512thStreet,SW,Washington,DC20554 BestCopyandPrinting,Inc.(viaemail fcc@bcpiweb.com)

EB Do
A n n u a l 6 4 2 0 0 9 (e

t 06 36
-

C P N I C e r t if i c

t i o n f o r A c t iv it ie s o f C a le n d a r Y e a r 2 0 1 3

D a t e f i le d : N a m e o f T h e Co m p a n y

a r c

h 10

20 1 4
:

(s )

co v e r e

d b y t h is
m

c e rt
r :

if ic a t i o n
:

X e n o t e l C o m m u n i c a t io n s L L C

Fo N
a

r o n

4 9 9 F i le
s

ID

8 2 868 5

f
a

ig n a t o r y
r

R ic k
n a

W M
.

v e rs

T it l e o f s ig

to

LL C

Ma

gin g M e m b e r

I R ic k
,

W Mve
.

r s

c e rt

if y t h
,

t I am an

f f ic

e r o

f th
o

Co m p
e

a n

y n a me d abo v e

a n

a c

t in g a s a n

a o

ge n

t o f t he Co m pa n y

t ha t I ha v e
a

pe r s o n a q
.

l kn

w le d g
c o

t h a t t h e C o m p a n y h a s e s t a b li s h e d
n c e

p e r a t in g p r o c e d u r e s t h a t a r e

u a

te to

e n s u r e

m p l ia

w it h t h

C o m m is s i o

'

C PN I

r u

le

Se e 4 7 C F R
.

64

2001 e t s e q

A t t a c h e d t o t h i s c e r t if i c a t i o n

i s a n a c c o m p a n y i n g s t a t e m e n t e x p la i n i n g h o w t h e C o m p a n y s
'

p m

r o ce a n

d
a

u r e s e n s u re

t h a t t h e c o m p a n y i s i n c o m p li a n c e
,

w it h t h
, '

r e e

q u ire m e n t s
,

(i n c l u d i n g
p
e r v

t h o se

t i n g t h e a d o p t io n o f C P N I p r o c e d u r e s

t r a in i n g

r e c o r s r u

d ke
s
.

p in g

a n

su

iso r y re v ie w

s e

t f o r t h in s e c t io n

64 20 0 1
.

t s eq

f th

Co m m i s s i o

le

T he Co m p a n y ha s n o t h a d t o t a k e a n y a c t i o n
a c o r o

(s ) ( i

p r o c e e d i n g s i n s t i t u t e d o r p e t i t i o n s f il e d b y
,

m pa ke
r s

t e it h e r s t a t e c o m m i s s i o n s

t h e c o u rt s yst e m

o r a
,

t t h e C o m m is s io n a g a in s t d a t a

ag a

in
a c

t d a t a b r o k e r s i n t he p a s t y e a r

If a f f i r m a t i v e

t h e Co m
.

a n

y is

a re

t h a t it m u s t

e x

p l a in
u s

a n

t io n s t h a t it h a s h a d t o t a k e a g a i n s t d a t a b r o ke r s

Th

Co m p

a n y i s a w a r e t h a t it

t r e p o r t o n a n y d a t a t h a t i t h a s w it h r e s p e c t t o t h e y

pr

o c e ss e s

t h a t a n y p r e t e x t e r s h av e u se d

( if

a n

t o a t t e m pt t o a c c e s s CP N I a n d w h a t s t e p s t he Co m p a n y
,

is t

kin g t

p r o t e c t CP N I

T h e C o m p a n y h a s n o t r e c e iv e d a n y c u s t o m e r c o m p la i n t s in t h e p a s t y e a r c o n c e r n i n g t h e
u n a u

t h o r iz e d r e le a s e o f C P N I

T h e C o m p a n y is a w a r e

t h a t h a d it h a d a n y s u c h c o m p l a i n t s

it

w o u ld h a v e t o r e p o r t t h e n u m b e r o f c u s t o m e r c o m p la i n t s t h a t t h e C o m p a n y h a s r e c e i v e d
r e c a

la t

d t
r

u n a u

t ho r i z e d a c c e s s t o
,

CP N I
c e

o r u n a u

t h o r iz e d d is c l o s u r e
r

f CP N I b
,
,

r o

ke

by

tego

y o f c o m p la i n t s

in s t a n

f im

o p e

a cc e ss

by
,

e o r

m p lo y e e s

in s t a n c e s o f i m p r o p e r

d is
o n

c lo s u r e

t o i n d iv i d u a l s n o t a u t h o r i z e d t o r e c e i v e t h e d a t a
.

in st

a n c e s o

f im p

ro p e r a c c e s s

to

li n

t a b y i n d i v id u a l s n o t a u t h o r i z e d t o v i e w t h e d a t a

T h e c o m p a n y r e p r e s e n t s a n d w a r r a n t s t h a t t h e a b o v e c e r t if i c a t i o n i s c o n s i s t e n t w i t h 4 7 C F R
.

1 17
.

w h i c h r e q u i r e s t r u t h f u l a n d a c c u r a t e s t a t e m e n t s t o t h e C o m m is s i o n
o

T h e c o m p a n y a ls o

a c u n

kn d

w le d g e

t h a t f a ls e s t a t e m e n t s a n d m i s r e p r e s e n t a t io n s t o

t h e Co m m i s s i o n a r e

u n is

b le

e r

T it le I S j o f t h e

p
^

S ) C o d e a n d m a y s u b j e c t it t o e n f o r c e m e n t a c t i o n ^ ^< ^^ ^

S ig n

d X

^ ^ ^M
^

[S i g n

a tu

e o

f a

ffi c e r

a s a

ge

n e r] t o f th e e a r

A tta c hm e n ts

A c c o m p a n y i n g S t a t e m e n t e x p l a i n i n g C PN I p r o c e d u r e s

AccompanyingStatementonCompanysCompliancewith47C.F.R.64.2009,Safeguards requiredforuseofCustomerProprietaryNetworkInformation(CPNI)andCompliancewith Section64.2001etseq.oftheCommission'sRules. A. Definitions CPNI(CustomerProprietaryNetworkData)referstodatasuchascustomername,address, contactdataaswellasquantity,technicalconfiguration,type,destination,andamountofuse ofservicesubscribedtobytheCompanyscustomers,andmadeavailablebytheCompanys customerstothecompany,solelybyvirtueofthecustomerrelationshiptothecompany.Italso includesdatacontainedincustomerbills,ifapplicable.

B. Use of CPNI (1)TheCompanymay,ifapplicable,use,disclose,orpermitaccesstoCPNIforthepurposeof providingormarketingserviceofferingsamongthecategoriesofservice(i.e.,local, interexchange,andCMRS)towhichthecustomeralreadysubscribesfromtheCompany, withoutcustomerapproval. (2)TheCompanydoesnotuse,disclose,orpermitaccesstoCPNItomarketserviceofferingsto acustomerthatrequireoptinoroptoutconsentofacustomerunder47C.F.R.64.2001et seq. (3)TheCompanydoesnotuse,discloseorpermitaccesstoCPNItoidentifyortrackcustomers thatcallcompetingserviceproviders. (4)Notwithstandingtheforgoing:ItistheCompanyspolicythattheCompanymayuse, disclose,orpermitaccesstoCPNItoprotecttherightsorpropertyoftheCompany,orto protectusersofthoseservicesandothercarriersfromfraudulent,abusive,orunlawfuluseof, orsubscriptionto,suchservices. C. Safeguards Required for the Use of CPNI (1)ItisthepolicyoftheCompanytotrainitsapplicablepersonnel,onthecircumstancesunder whichCPNImay,andmaynot,beusedordisclosed.ItisaviolationoftheCompanyspoliciesto discloseCPNIoutsideoftheCompany.Anyemployeethatisfoundtohaveviolatedthispolicy willbesubjecttodisciplinaryactionuptoandincludingtermination. (2)ItistheCompanyspolicytorequirethatarecordbemaintainedofitsownanditsaffiliates salesandmarketingcampaignsthatusetheircustomersCPNI.TheCompanymaintainsa recordofallinstanceswhereCPNIwasdisclosedorprovidedtootherthirdparties,orwhere thirdpartieswereallowedtoaccesssuchCPNI.Therecordincludesadescriptionofeach campaign,thespecificCPNIthatwasusedinthecampaign,andwhatproductsandservices wereofferedasapartofthecampaign.Suchrecordsareretainedforaminimumofoneyear.

(3)TheCompanyhasestablishedamandatorysupervisoryreviewprocessregarding compliancewithCPNIrulesforoutboundmarketing.Ifapplicable,salespersonnelmustobtain supervisoryapprovalofanyproposedoutboundmarketingrequestforcustomerapproval.The Companyspoliciesrequirethatrecordspertainingtosuchcarriercomplianceberetainedfora minimumperiodofoneyear. (4)IncompliancewithSection64.2009(e),theCompanywillprepareacompliancecertificate signedbyanofficeronanannualbasisstatingthattheofficerhaspersonalknowledgethatthe Companyhasestablishedoperatingproceduresthatareadequatetoensurecompliancewith 47C.F.R.64.2001etseq.Thecertificateistobeaccompaniedbythisstatementandwillbe filedinEBDocketNo.0636annuallyonMarch1,fordatapertainingtothepreviouscalendar year.Thisfilingwillincludeanexplanationofanyactionstakenagainstdatabrokersanda summaryofallcustomercomplaintsreceivedinthepastyearconcerningtheunauthorized releaseofCPNI.

D. Safeguards on the Disclosure of CPNI ItistheCompanyspolicytotakereasonablemeasurestodiscoverandprotectagainst attemptstogainunauthorizedaccesstoCPNI.TheCompanywillproperlyauthenticatea customerpriortodisclosingCPNIbasedoncustomerinitiatedtelephonecontactoronline access,asdescribedherein. (1)MethodsofAccessingCPNI. (a)TelephoneAccesstoCPNI.ItistheCompanyspolicytoonlydisclosecalldetaildata overthetelephone,basedoncustomerinitiatedtelephonecontact,ifthecustomerfirst providestheCompanywithapassword,asdescribedinSection(2),thatisnot promptedbythecarrieraskingforreadilyavailablebiographicaldata,oraccountdata.If thecustomerisabletoprovidecalldetaildatatotheCompanyduringacustomer initiatedcallwithouttheCompanysassistance,thentheCompanymaydiscussthecall detaildataprovidedbythecustomer.

(b)OnlineAccesstoCPNI.ItistheCompanyspolicytoauthenticateacustomerwithout theuseofreadilyavailablebiographicaldata,oraccountdata,priortoallowingthe customeronlineaccesstoCPNIrelatedtoatelecommunicationsserviceaccount.Once authenticated,thecustomermayonlyobtainonlineaccesstoCPNIrelatedtoa telecommunicationsserviceaccountthroughapassword,asdescribedinSection(2), thatisnotpromptedbytheCompanyaskingforreadilyavailablebiographicaldata,or accountdata.

(2)PasswordProcedures Toestablishapassword,theCompanywillauthenticatethecustomerwithouttheuseofreadily availablebiographicaldata,oraccountdata.TheCompanymaycreateabackupcustomer authenticationmethodintheeventoflostorforgottenpasswords,butsuchbackupcustomer authenticationmethodwillnotpromptthecustomerforreadilyavailablebiographicaldataor accountdata.Ifthecustomercannotprovidethecorrectpasswordorcorrectresponseforthe backupcustomerauthenticationmethod,thecustomermustestablishanewpasswordas describedinthisparagraph.

(3)NotificationofAccountChanges TheCompanywillnotifycustomersimmediatelywheneverapassword,customerresponsetoa backupmeansofauthenticationforlostorforgottenpasswords,onlineaccount,oraddressof recordiscreatedorchanged.Thisnotificationisnotrequiredwhenthecustomerinitiates service,includingtheselectionofapasswordatserviceinitiation.Thisnotificationmaybe throughaCompanyoriginatedvoicemailortextmessagetothetelephonenumberofrecord, orbymailtotheaddressofrecord,andmustnotrevealthechangeddataorbesenttothenew accountdata.

(4)BusinessCustomerExemption TheCompanymaybinditselfcontractuallytoauthenticationregimesotherthanthose describedinthisSectionDforservicesitprovidestoitsbusinesscustomersthathavebotha dedicatedaccountrepresentativeandacontractthatspecificallyaddressestheCompany's protectionofCPNI. E. Notification of CPNI Security Breaches (1)ItistheCompanyspolicytonotifylawenforcementofabreachinitscustomers CPNIasprovidedinthissection.TheCompanywillnotnotifyitscustomersordisclosethe breachpubliclyuntilithascompletedtheprocessofnotifyinglawenforcementpursuantto paragraph(2). (2)Assoonaspracticable,andinnoeventlaterthanseven(7)businessdays,afterreasonable determinationofthebreach,theCompanywillelectronicallynotifytheapplicableUS governmentagenciessuchastheFederalBureauofInvestigation. (a)Notwithstandingstatelawtothecontrary,theCompanywillnotnotifycustomersor disclosethebreachtothepublicuntil7fullbusinessdayshavepassedafternotification toapplicableUSgovernmentagencies,exceptasprovidedinparagraphs(b)and(c). (b)IftheCompanybelievesthatthereisanextraordinarilyurgentneedtonotifyany classofaffectedcustomerssoonerthanotherwiseallowedunderparagraph(a),inorder toavoidimmediateandirreparableharm,itwillsoindicateinitsnotificationandmay proceedtoimmediatelynotifyitsaffectedcustomersonlyafterconsultationwiththe relevantinvestigationagency.TheCompanywillcooperatewiththerelevant investigatingagencysrequesttominimizeanyadverseeffectsofsuchcustomer notification.

(c)Iftherelevantinvestigatingagencydeterminesthatpublicdisclosureornoticeto customerwouldimpedeorcompromiseanongoingorpotentialcriminalinvestigation ornationalsecurity,theCompanywillcomplywithsuchagencyswrittendirectives, includingdirectivesnottosodiscloseornotifyforaninitialperiodofupto30days,and extendedperiodsasreasonablynecessaryinthejudgmentoftheagency. (3)AftertheCompanyhascompletedtheprocessofnotifyinglawenforcementpursuant toparagraph(2),itwillnotifyitscustomersofabreachofthosecustomersCPNI. (4)Recordkeeping.TheCompanywillmaintainarecord,electronicallyorinsomeother manner,ofanybreachesdiscovered,notificationsmadetotheUSSSandtheFBIpursuantto paragraph(2),andnotificationsmadetocustomers.Therecordwillinclude,ifavailable,dates ofdiscoveryandnotification,adetaileddescriptionoftheCPNIthatwasthesubjectofthe breach,andthecircumstancesofthebreach.TheCompanywillmaintaintherecordfora minimumof2years.

(5)Strictcontrolsareinplaceinvolvingresponsestolawenforcementagenciesthatservethe Companywithvalidlegaldemands,suchasacourtorderedsubpoena,forCPNI.TheCompany willnotsupplyCPNItoanylawenforcementagencythatdoesnotproduceavalidlegal demand.