Aventura, Florida · serving clients across the United States (305) 404-9404Toll-free (800) 767-8566Emergency? Get a call within 1 hour
Multinational services Illustrative engagement

A company of 2,500 employees in several countries on one voice, fax and SMS platform, integrated with its ERP

A multinational services company with about 2,500 employees in several countries, a leader in its segment, running SAP S/4HANA.

Scale
2,500 employees, several countries, one ERP, a local carrier in each country
Engagement
Design, pilot and phased rollout over about a year, then continuous operation

The challenge

Each country had its own phone provider, its own fax machines and texting on personal phones. Customers could not reach the right team from one number, nobody could see a customer's calls next to their orders, and call recording was handled differently in every office. The company wanted one communications platform, connected to its ERP and run by the same team that managed its IT and security, without losing a single published number.

The company had grown across borders, and its communications showed it. Each country bought phone service locally, kept fax machines where trading partners still demanded them, and let sales and service staff text customers from personal phones. A customer who called the wrong country was transferred by hand or lost. Nobody could see a customer's calls next to the orders they were about. The company's ERP, SAP S/4HANA, held the business record but none of the conversations about it. The goal was one platform, one set of numbers where possible, and every call, fax and text tied to the record it concerned.

The Clayton Communicator became the single platform for voice, fax and SMS. Regional points of presence keep calls close to the people on them, and session border controllers connect to a local carrier in each country over SIP trunks, with failover between carriers. The session border controllers do the unglamorous work: they secure the signaling, hide the internal network, convert between carrier and company equipment and enforce limits that stop toll fraud, such as caps on international destinations. Microsoft Teams Phone sits on top for staff who work in Teams, with calls routed through Direct Routing, so staff use the tool they already know.

Number porting was the delicate part, so it was done in phases. First, an inventory of every number and who answers it, including fax lines and old numbers on carrier contracts nobody remembered. Then, country by country, letters of authorization and port requests, grouped by carrier, with test calls on each wave and a rollback plan for every cutover window. Main numbers and fax numbers moved at the quietest hours, and the old service stayed in place until the new one had carried real traffic. Some numbers took longer because of local carrier rules, so the schedule was built around the slowest, not the fastest.

Integration with SAP made the platform useful beyond the phone. A call from a known customer opens the account, order and open delivery on the agent's screen. A fax is filed against the document it answers, and a text confirms a delivery window and records the reply on the order. Rules about recording differ by country. In the European Union, for example, recording a call generally needs a lawful basis and notice to the people on it under data-protection and privacy law, and some sectors have recording duties of their own. Recording was therefore switched on only where required, with the announcement, retention period and access rules set per country with the company's counsel. This case describes general principles, not legal advice.

The managed IT and cybersecurity teams run the platform with the rest of the environment: one monitoring view, one access model, one incident process. Toll-fraud alerts, call-quality reports and fax and text delivery rates arrive in the same monthly report as patching and backups. The modeled result is a company that presents one face to customers in every country, files every conversation against the business record it belongs to, keeps recordings only where and as long as the local rule says, and has one team to call when something breaks. This is an illustrative engagement with modeled outcomes.

What our team delivered

  • The Clayton Communicator as one platform for voice, fax and SMS, with regional points of presence so calls stay local and quality stays steady
  • Number porting in phases, country by country, with an inventory of every number, letters of authorization, test calls and a rollback for each cutover window
  • Session border controllers and SIP trunks to local carriers, with failover between carriers and toll-fraud limits on international dialing
  • Integration with SAP S/4HANA so a call, fax or text attaches to the customer, order or delivery, with click-to-call from the ERP
  • Call recording where required, with consent announcements, retention and access rules set per country, and Microsoft Teams Phone for staff who work in Teams
  • Managed IT and cybersecurity coverage of the whole platform: monitoring, access control and a single incident process

Result

Modeled outcome: one directory and one set of numbers across the company, faxes and texts filed against the right business record, recordings kept only where they are required and for as long as the local rule says, and one team answering for voice, IT and security. This is an illustrative engagement, a modeled result and not a compliance certification or legal advice.

Get this for your company

Related services with fixed prices and a written scope.

Managed IT and security (MSP)

One monthly price per team member: help desk, device management, patching, backup monitoring and security basics.

Onboarding starts within 10 business days

$100 per team member, per month

Details

Initial assessment of public endpoints

What an attacker can see and reach from the internet: your domains, mail, websites, remote access and cloud exposure.

Report within 5 business days of kickoff

$1,000 per assessment

Details

Show 3 more

Clayton Communicator seat

Business voice, e-fax and text messaging for each user, with Microsoft Teams integration, from one service and one bill.

Live within 10 business days; porting takes longer

$32 per user, per month

Details

E-fax, HIPAA-ready

Send and receive faxes from email or a web portal, with encryption and access logs. For practices and offices that still must fax.

Live within 5 business days

$19 per fax number, per month

Details

Managed security monitoring

Endpoint detection and response watched by our analysts, priced per device.

Agents deployed within 7 business days

$18 per endpoint, per month

Details

After you purchase, we contact you within 1 hour, any time of day or night, to start onboarding.

No payment is taken online. When we call you within the hour we confirm the scope and send an invoice (ACH, card or crypto).

One private network on four continents

Every site talks directly to every other site over WireGuard, so traffic never detours through a hub. Each business unit gets its own overlay, and IPsec tunnels carry traffic to partners and carriers.

One private network on four continentsFive company sites in Europe, Asia, South America and North America are joined by a full mesh of WireGuard tunnels running over UDP with Noise IK key exchange and ChaCha20-Poly1305 encryption. Each pair of sites has two parallel tunnels, one per business-unit overlay, Finance and Operations. Two sites also connect through IPsec IKEv2 tunnels with ESP and AES-GCM to a partner network and to a carrier MPLS network. Packets flow in both directions on every tunnel. FrankfurtEuropeSingaporeAsiaTokyoAsiaSão PauloSouth AmericaMiamiNorth AmericaFinance overlayOperations overlayIPsec tunnelPartner networkIPsec IKEv2Carrier networkIPsec IKEv2WireGuard · UDP · Noise IK · ChaCha20-Poly1305IPsec · IKEv2 · ESP with AES-GCM

Super Intelligence data flow

Every request is classified by sensitivity, so confidential data stays on models inside your walls while routine work can use the best frontier AI.

Super Intelligence data flowEmail, documents, phone calls, ERP and CRM records and sensor data enter a secure gateway that classifies each request by sensitivity. Sensitive requests are answered by local models inside the firewall, internal ones by a private cloud, and general ones by frontier models from leading US AI labs. Results flow back into ERP, CRM, dashboards and to people.SOURCESGATEWAYMODEL TIERSYOUR SYSTEMSEmailDocumentsPhone callsERP / CRMSensorsSecuregatewaysorts bysensitivityLocal modelsIn your firewallPrivate cloudYour own tenantFrontier modelsleading US AI labsERPCRMDashboardsPeopleSensitive: stays localInternal: private cloudGeneral: frontier model

Every sign-in, verified

Staff sign in once, but behind the scenes the device, the identity, a phone approval and your access policy are all checked before any app opens, and strangers are turned away.

Every sign-in, verifiedDiagram of user authentication. A user signs in; the device is checked for MDM and Intune compliance; the identity provider, Active Directory or Entra ID, verifies the account; an MFA push is approved on the user's phone; conditional access evaluates the policy; and access is granted to email, ERP and files. On a second pass, a sign-in from an unknown device in a new location is blocked by the conditional access policy. VERIFIED SIGN-INUserSigns inDevice checkMDM · IntuneIdentityAD · Entra IDMFA pushPhone approvalConditionalaccessPolicy checkEmailERPFilesUnknown deviceNew locationApprove?Blocked

Do you know if your company is safe?

Speak with a security engineer today. The first assessment call is free and confidential.

CallFree assessment