One platform, every part of the call lifecycle
From the first SIP INVITE to the final ledger entry, Klicko owns the whole path — connectivity, routing, media, recording, billing and visibility — so your team builds product, not plumbing.
Connect once, through whatever your customers already use
Klicko exposes SIP over UDP, TCP and TLS for carriers and PBXs; a secure WebSocket transport for browser-based calling with short-lived, never-reused credentials; a bidirectional real-time media streaming protocol built for voice AI and transcription platforms; and a versioned REST API with signed webhooks for everything else.
- IP-authenticated trunks or credential-based SIP endpoints
- Browser calling with no permanent password ever sent to a browser
- NAT traversal for callers on restrictive networks
- Codec and DTMF mode negotiated per connection
Routing decisions you can explain, replay and roll back
Every inbound and outbound call is matched against versioned routing policies — by tenant, destination, source, time schedule, region, cost, live provider health and more. Policies are drafted, published and rolled back like code, and every decision is attached to the call record.
- Visual, drag-and-drop routing builder alongside a structured form editor
- Automatic sequential failover, or fork to multiple destinations
- Caller-ID rewriting and ownership enforcement
- Route simulation shows the outcome before you publish
Isolation that holds up to a real security review
Tenants, projects and environments are enforced at every layer — database row-level isolation, tenant-qualified storage paths, and permission checks on the server, never just in the UI. A cross-tenant request never leaks whether a resource even exists.
- Permission-code model, not hard-coded roles
- API keys scoped to a tenant, project and permission set
- Encrypted secrets and non-guessable resource identifiers
- Every sensitive action recorded in an audit trail
Recording that survives a storage outage
Media is captured with packet-loss detection and spooled to durable local storage before it's ever encrypted, checksum-verified and uploaded to long-term storage — so a temporary outage in your storage backend never blocks a live call, and never silently drops a recording.
- Caller/callee dual-channel, mixed mono or stereo
- AES-256 encryption at rest, checksum-verified on upload
- Configurable retention policy, with legal hold support
- Every playback and download is access-audited
A ledger, not a balance column
Real-time reservations back an immutable, reconciled financial ledger — calls are authorized against available credit before they connect, metered as they run, and settled exactly once on completion, whether prepaid or postpaid.
- Prefix-based rate plans with effective-dated versions
- Concurrent-call and destination-country limits
- Low-balance and hard-suspension thresholds
- Retry-safe settlement — never double-charged
See problems before your customers report them
A real-time operations view shows active calls, signaling response codes, registration health, and per-provider call quality — answer-seizure ratio, post-dial delay, jitter and packet loss — alongside route-evaluation traces for any call you need to debug.
- Live dashboard of active and recent calls
- Per-carrier health checks and automatic failover triggers
- On-demand signaling and media trace capture, scoped and time-limited
- Full decision trail attached to every call record
Customer setup that proves calls work before activation
The environment onboarding wizard moves a customer from connectivity details to carrier setup, DID assignment, route creation and a real test call before production calling is activated.
- Validate connectivity before live traffic is allowed
- Run a real test call through the configured route
- Audit the activate step and any admin override
- Keep development, staging and production environments isolated