Account Settings

Account Settings

Account Settings is the home for everything org-wide: your business profile and billing address, who receives invoices, security policy (2FA, voice cloning, recording retention), emergency-call notification recipients, account documents, SARA AI skills, and privacy controls.

Navigate via the sidebar: Account → Settings, or open it from the organization switcher in the top-left. The page is owner-oriented — any user who can open it can view most tabs, but only owners can save changes.

Video

Watch on YouTube ↗

Screenshot

The identity card at the top shows your organization name, URL slug, and account ID (the CUS… badge — quote this when contacting support).

The seven tabs are deep-linkable: bookmark /account/settings#security (or any of company, invoicing, security, emergency, documents, ai-skills, privacy) and the page opens on that tab.

Company

Your organization’s billing/profile address, contact details, timezone, and industry. This drives invoices, tax jurisdiction, and carrier-side compliance forms.

Caution

This is not your E911 emergency address. Emergency dispatch addresses are registered per phone number (Phone Numbers → number → E911 tab) and per Nova location. The Company address is your business/billing address only.

Field	Notes
Address Line 1	Type-ahead autocomplete — pick a suggestion to autofill city, postal code, and country.
Address Line 2	Optional (suite, unit, floor).
City / State / Postal Code	The State/Province dropdown follows the selected country; changing country clears the state so a stale region can’t be saved.
Country	Affects which carriers can serve your numbers and which tax rates apply.
Business Phone	Free-form contact number for your business (not a DID).
Website	Must be a full URL (https://…). Bare domains are rejected.
Timezone	Used for invoice timestamps, audit-log display, and scheduled reports.
Industry	Helps route compliance forms (e.g., 10DLC brand registration) to the right templates.

A sticky bar at the bottom shows “No unsaved changes” until you edit something; click Save changes to persist or Cancel to revert.

Changing your organization name

The organization name is not directly editable — renames touch billing, tax, and carrier records, so they are support-reviewed:

1. Click Request Name Change in the identity card.
2. Enter the new name and a reason.
3. Click Submit Request — this opens a support ticket you can track under Support.

Invoicing

(Owner-only.) Up to 5 email addresses that receive invoices and billing emails. Type an address and press Enter or comma to add it as a chip; click the ✕ on a chip to remove it. Click Save to apply. If the list is empty, billing email goes to the account owner.

Security

Personal two-factor authentication

Every user manages their own TOTP enrollment here. Click Enable 2FA, scan the QR code with an authenticator app, enter the 6-digit code, and store the backup codes somewhere safe.

Organization MFA policy (owner-only)

When the switch is on, every user in the organization must have 2FA. It applies to people who are already signed in, not only at the next sign-in:

• Switchboard: members without 2FA are signed out on their next action and set it up when they sign back in.
• Pulse: members without 2FA stay signed in, but Pulse shows a setup screen and they can’t keep using the app until they finish. Pulse asks for their account password first. If they have no password (for example, they signed in with a QR code), they use Forgot password on the Switchboard sign-in page to set one, sign in, and set 2FA up there. An administrator can also help.

You must turn on 2FA for your own account before you can require it for everyone. Turning the switch off makes 2FA optional again. Nobody’s enrollment is deleted.

IP access control (owner-only)

This control lives on My Profile → Access control, not on this page. It limits which networks can use your account. In whitelist mode, only IP addresses in your whitelist can use it. In blacklist mode, the listed addresses are blocked. The rule applies to every request, including people who are already signed in, Pulse, and switching into your organization. A blocked request shows “Access from this network isn’t allowed by your organization’s security settings.”

SIPSTACK refuses a change that would block the address you’re making it from. Add your current IP address to the whitelist first, then make the change again. A rule with an expiry date stops applying when it expires.

Rules accept IPv4 and IPv6. Enter a single address (203.0.113.7, 2001:db8::1) or a range in CIDR form (203.0.113.0/24, 2001:db8::/48). If your network uses both IPv4 and IPv6, add a rule for each, because a request is checked against the address it actually arrives from.

Voice cloning policy (owner-only)

The switch shows the allow state. Turn it off to hard-stop new voice-clone creation across the org — Voice Studio wizard and all API paths — regardless of plan allowance. Existing clones keep working in IVR, voicemail, and queue announcements. Every change is recorded in the audit log.

Call recording retention (owner-only)

How long call recordings are kept before automatic deletion while your account is active: Plan default, 7, 14, 30 or 90 days, 1 year, or Keep forever. If nobody on your account has chosen, you are on the plan default. Call recordings are not deleted automatically on the plan default yet; we will email account owners at least 30 days before the plan default starts applying to call recordings. This setting applies to call recordings. Voicemail, recordings in your media library, and AI voice agent call summaries follow your plan’s default period. AI voice agent recordings follow your plan’s default, or this setting if it is shorter. When a deletion period applies, the deletion job runs daily at 03:30 UTC. When your account closes, recordings are deleted within 30 days whatever you choose here.

Emergency

(Owner-only writes.) Org-level fallback recipients for 911-dialed notifications, required by FCC RAY BAUM’s Act §506(b): when anyone in your organization dials 911, SIPSTACK notifies the contacts listed here so someone at your business knows it happened.

• Email recipients — the active notification channel. Add at least one address (or per-location recipients on each Nova location); until one exists you cannot assign extensions to a location.
• SMS recipients — numbers are saved in E.164 format (+14165551234) but SMS dispatch is not yet active; rely on email for now.
• Recipients added on a specific Nova location override these org-level fallbacks for that location.
• Changes save immediately on Add/Remove — there is no separate Save button on this tab.

Canadian accounts also see the E911 acknowledgment panel (CRTC TC2005-21/TC2017-77): when VoIP 911 limitations were last acknowledged, by whom, and when annual renewal is due.

Documents

Receipts and uploaded documents for the account. Legal receipts — signed cancellations, port-out LOAs — are tamper-evident and retained immutably. Click Upload to attach your own documents (contracts, tax certificates, etc.).

AI Skills

(Owner-only writes.) Controls what the SARA assistant may do on behalf of your organization — searching contacts, opening tickets, looking up invoices, configuring PBX settings, and more, grouped by product. All skills are enabled by default; toggle any off to remove it from SARA’s capabilities across chat, portal, and voice channels, then save with the sticky bar.

Privacy

(Owner-only writes.) Data-handling controls:

• Where your data lives — region/data-residency summary for your media and PBX data.
• Data export — request a ZIP of all your account data (GDPR/CCPA data-subject rights). One request per 24 hours; you get an email when the export is ready.
• Audit log — control whether page-view browsing trails are captured. Logins, signed compliance actions, and admin events are always recorded.

Troubleshooting

Symptom	Cause / fix
Website field rejects my entry	The validator requires a scheme — use https://example.com, not example.com.
Can’t edit the organization name	Renames are support-reviewed. Use Request Name Change in the identity card.
Invoicing / MFA / Emergency controls are read-only	These are owner-only. Ask an account owner to make the change.
A teammate changed something and I don’t see it	Click the Reload icon (top-right). Data is otherwise cached for about a minute.
Can’t assign an extension to a Nova location	Add at least one emergency notification recipient (Emergency tab) or a per-location recipient first — the platform blocks the assignment until one exists.