The Agency Selling You an AI Receptionist Did Not Build It

One white-label vendor's pitch page, written for the agencies that resell it, puts the proposition plainly: "Your clients will see your brand everywhere", "Every screen, URL, and email goes out under your name...never see AI Frontdesk", and "You own the relationship." The page says nothing about who owns the phone number, who owns the call data, or what becomes of a reseller's clients if the reseller stops paying.

That is the product. Not the AI receptionist, the concealment. And it is entirely legitimate: white-labelling is a normal way to sell software, and plenty of the agencies doing it are competent people running real businesses.

The problem is that the buyer cannot see the layer, so cannot ask about it. This article is the set of questions the layer makes necessary, with the sources behind each one. We have applied all of them to ourselves at the end.

Key takeaways

• You do not own your phone number. In the UK, numbers are allocated by Ofcom to providers. What you have is a right to port, not a property right.
• That right runs to the "Switching Customer", defined as the party to the contract with the provider. If the agency holds that contract, the agency holds the right.
• Ofcom's General Condition C7.6(b) keeps portability available for at least a month after the customer terminates, and C7.6(c) bars direct charges for the port itself.
• Vapi's terms say plainly that "nothing is being sold to you". Retell's prohibit reselling its outputs as a standalone service. Neither commits anything to an agency's end customer.
• On GoHighLevel, a client cannot move their own sub-account. The agency has to do it, and the terms give the agency a veto.

Who actually owns your phone number?

Nobody sells you a phone number, because UK numbers are not property. Ofcom allocates number ranges to communications providers, and providers assign numbers to customers. What a customer gets is a regulated right to take the number to another provider, which is a different and weaker thing than ownership.

This matters because the opposite is marketed at you. One UK provider's page states: "You own your phone numbers. Not the provider. You." followed immediately by "Under Ofcom regulations, your numbers are portable." The second sentence is right and the first one is not, and the two are doing different jobs.

Treat "you own your number" as a comfort phrase. The question that decides anything is narrower: who is the provider's customer of record, and can that person move the number?

Do you have the right to port it away?

If you are the provider's customer, yes, and the right is more generous than most buyers realise. Ofcom's General Conditions of Entitlement, in the unofficial consolidated version in force from 22 April 2025, put the customer-facing duty in Condition C7.6. Three parts of it are worth knowing verbatim.

C7.6(a) requires providers to "provide Number Portability on reasonable terms and conditions to any Switching Customer who so requests".

C7.6(b) requires them to provide it "for a minimum of one month after the date of termination by the Switching Customer of the contract", unless the customer expressly agrees otherwise when they terminate. Note the words "by the Switching Customer". The month runs from a termination you initiated.

C7.6(c) requires that "no direct charges are applied to the Switching Customer for the provision of Number Portability". A fee for the port itself puts the provider in contravention of a general condition. Early termination charges are a separate matter and remain permitted elsewhere in C7.

Where B3 fits

A related condition, B3, is the one requiring providers to co-operate with each other on porting. It is a wholesale duty triggered by a request from another provider, so it is the plumbing behind C7 rather than the right you exercise.

What if the agency is the one with the contract?

Then the right may not be yours, and everything else in this article follows from it. The General Conditions define a "Switching Customer" primarily as a "Subscriber", and a Subscriber is "any End-User who is party to a contract with a provider of Public Electronic Communications Services". Party to the contract. If your agency signed with the carrier and you signed with the agency, the agency is the subscriber.

The definition has a second limb, which extends to an end-user seeking portability after their contract has terminated under C7.6(b), so this is not a total dead end. But the primary route runs through whoever signed.

What the porting handbooks say

UK porting documentation is unusually blunt about the consequence. VoiceHost's porting handbook states that "Reseller or Wholesale porting from one service provider to another service provider is not supported, as number portability exists for subscribers/end-users wishing to change provider only." Telnyx's UK page adds the mechanical problem: "A reseller does not have a CUPID code", and if your provider is a reseller "you will need to contact them directly to obtain the name of the underlying carrier and/or their CUPID code." Neither page says what happens if the reseller simply declines to tell you.

The honest uncertainty

Whether your agency is legally a communications provider, making you its subscriber with a real porting right against it, is not settled. Two things make it genuinely arguable: an "Interpersonal Communications Service" is defined around exchange between persons, which sits awkwardly with a machine answering, and section 32(4) of the Communications Act 2003 attributes provision to whoever has "direction or control", which could put the role with the underlying carrier instead.

We are not going to tell you the answer, because nobody has tested it for AI answering services. We are going to tell you it is a reason to be the account holder yourself.

The four questions to put in writing

Ask these before signing, and keep the reply. Each one maps to something above.

1. Are you the communications provider of record for my number, and am I your subscriber? If not, who is?
2. What is the underlying carrier's name and CUPID code?
3. If I leave, who signs the Letter of Authorisation, and will you sign one on request?
4. Whose account holds the number, the recordings and the transcripts, and what is your process for handing them over?

A competent agency answers all four in a paragraph. An evasive answer to question one is the answer.

What do the platforms say about you?

Nothing, mostly. We read the public terms of the four voice platforms an agency is most likely to be building on, and none of them commits anything to the reseller's end customer. The consistent structure is that the platform contracts with the account holder only.

Platform	What its public terms say
Vapi	Licence is "non-transferable, non-assignable, non-sublicensable"; "nothing is being sold to you". No occurrence of reseller, white label or sub-account
Retell AI	Prohibits customers from "resell[ing], redistribut[ing], or mak[ing] available AI-generated voice outputs as a standalone product or service"; licence is for "personal or internal business purposes"
Bland	Documentation and terms carry no reseller, white-label, agency or sub-account concept; sold direct
GoHighLevel	Documents rebilling and reselling explicitly, and the sub-account is shown only the agency's price

Retell is the interesting case. Its terms restrict resale, and it also runs a documented partner programme with a reseller category, publishing no terms on asset ownership or on what happens to a client if the partner leaves. Both things are true at once, which is exactly the ambiguity a buyer cannot see from outside.

One figure to discard while you are here. The widely repeated claim that Synthflow charges around $2,000 a month for a white-label reseller package is not published by Synthflow. Its pricing page says "Enterprise contracts start at $30,000 annually", and a text extraction of the page returns no occurrence of "white", "agency" or "reseller". The $2,000 figure appears only in third-party comparison posts, several written by competing vendors.

What does the agency actually pay?

Less than you, which is normal, but the mechanics are worth seeing because they determine what you can audit. GoHighLevel's help documentation separates two things. Rebilling is "Charging the HighLevel Price to the Sub-Account, allowing you to recover costs or even make a profit." Reselling is offering services "to your Sub-Accounts at a marked-up price", where "The HighLevel Price is charged to the Agency Card. Then the Agency Stripe charges the Agency Price to the Sub-account."

Either way, what you see is the agency's number. HighLevel also publishes fixed-rate rebilling for AI, describing it as: "You continue to pay HighLevel based on actual token consumption, but your sub-accounts see a simple, consistent line item on their invoices regardless of how token usage varies behind the scenes."

That is not sharp practice, it is a margin, and every reseller in every industry takes one. It does mean your invoice is not evidence of anything about usage, so do not treat a per-minute figure on it as a cost you can benchmark.

Can you move your account if the agency will not?

On GoHighLevel, no. Its own documentation confirms that a client cannot initiate the transfer of their own sub-account; the agency must do it. Its terms of service, last updated June 2026, give the agency a veto over the transfer, with a narrow escape hatch requiring several conditions together.

There is a live feature request on HighLevel's public ideas board, posted 9 November 2025 with a follow-up comment on 16 December 2025 and no recorded official response, asking for a route when an agency goes out of business and is no longer reachable. The poster describes the scenario rather than reporting being stuck in it, so read it as an unmet need rather than an incident.

Scope that finding properly. This is one CRM platform's sub-account mechanism, not a general law of AI receptionists. It is here because a large share of UK agencies in this market build on it.

What happens if the agency stops paying?

The number becomes exposed on a clock you cannot see. Twilio's terms give it a contractual right to reclaim numbers after 90 days of account suspension, with no notice required. The right crystallising is not the same as automatic reclamation, but it is the agency's arrears that start the timer, not yours.

A GoHighLevel implementation agency has published its own account of the exit sequence when an agency cancels: sub-accounts "immediately lose access to contacts, conversations, calendars, automations, and funnels", phone numbers "are deleted 14 days after cancellation" while clients "are still charged for them during this period even though they do not work", and data remains inaccessible for 90 days before permanent deletion. Two caveats: it is a vendor's blog rather than platform documentation, and the 14-day item covers "phone numbers and A2P 10DLC campaigns", where A2P 10DLC is a US-only registration regime. Treat the shape as instructive and the specifics as unverified for the UK.

Who is responsible for the caller's data?

You are, most likely, and that surprises people who assumed they had outsourced it. Under UK GDPR the controller decides the purposes and means of processing. The ICO's test is a list of overarching decisions, and its own phrasing is that "if you make any of these decisions, it is likely that you are a controller". You chose to record calls and why, so the callers' data is your responsibility, and the agency and the platform sit beneath you as processors.

Three consequences follow, all checkable against a contract you already have or should ask for. A law firm or clinic carries this obligation whether or not anyone mentioned it during the sale.

The three contract terms to look for

Article 28(3) mandates specific contract terms. The ICO sets out eight mandatory terms plus four descriptive elements, twelve items in total, and Article 28(9) requires the contract to be "in writing, including in electronic form". A one-page agency agreement is unlikely to contain twelve.

Sub-processors need your authorisation. Article 28(2) requires prior specific or general written authorisation before a processor engages another processor. The agency putting your calls through a platform is exactly that, and Article 28(4) keeps the agency "fully liable to the controller for the performance of that other processor's obligations".

The exit term is Article 28(3)(g). The contract must say that at the end of it the processor will, at your choice, delete or return the personal data. It is a term the contract must contain rather than a right that exists without one, which is precisely why you check for it before signing.

Being a processor is not a hiding place either. In March 2025 the ICO fined Advanced Computer Software Group Ltd £3,076,320, reduced from a provisional £6.09m under a voluntary settlement, over failings affecting 79,404 people. Advanced was processing that data on behalf of its customers.

Do you have anyone to complain to?

Possibly not, and it depends on your headcount. Ofcom's alternative dispute resolution scheme is open to consumers and to small businesses below an employee threshold, currently set at ten. Above it, a business is outside the scheme and left with ordinary contractual remedies. Since 8 April 2026 the waiting period before escalating to ADR is six weeks. Guides still saying eight weeks predate that change.

There is precedent for the regulator caring about this. Ofcom fined Cloud M Limited £50,000 for failing to provide number portability, plus £5,000 for failing to provide information, and required £1,000 in compensation. Two caveats: the contraventions were of GC18, the pre-October-2018 numbering condition, and the figures come from contemporaneous trade reporting because Ofcom's own case page is not machine-readable.

The same test, applied to us

It would be cheap to write all of that and not answer it. So, plainly: DeskCaller is the provider of record for numbers we supply, and we will confirm in writing that you are our subscriber. We will name the underlying carrier and its CUPID code on request. We sign the Letter of Authorisation when a customer leaves, and we do not charge for the port, because C7.6(c) says we cannot.

Recordings and transcripts are yours. We act as processor for them, our contract carries the Article 28(3) terms including delete-or-return at your choice, and we name our sub-processors. If we ever want to train a model on your calls, that is a separate conversation with a separate agreement, for reasons set out in the clinic guide.

If you are being sold by an agency rather than by us, ask them the four questions anyway. A good agency will not mind. That is roughly the same test as the one in the twelve-call checklist, pointed at the contract instead of the phone line.

Frequently asked questions

Can an agency legally refuse to release my number? It depends on whether you are its subscriber. If you are, General Condition C7.6(a) obliges it to provide portability on reasonable terms, and C7.6(c) bars a direct charge for doing so. If the agency is a reseller and you are a customer of its customer, UK porting documentation is explicit that reseller-to-reseller porting is not supported, and you will need the underlying carrier's identity and CUPID code, which the reseller holds. Get the answer to that in writing before you need it, not after.

Is white-labelling itself a problem? No. It is a normal software distribution model and the agency often adds real value in setup, local knowledge and support. The problem is asymmetry of information: the pitch pages are written for agencies, and they sell invisibility as a feature. Nothing in this article says do not buy from an agency. It says know what you are buying and from whom.

We are a limited company with 20 staff. Does ADR help us? Not on the current threshold, which sits at ten employees. Above it you are outside Ofcom's ADR scheme and your remedies are contractual, which is an argument for reading the exit terms before signing rather than after. Check your own position against Ofcom's current rules, since the threshold and the waiting period have both been revisited recently.

What single thing should I check tonight? Find out whose name is on the account that holds your phone number. Not the invoice, the account. If you cannot answer that from documents you already have, email your provider and ask, and keep the reply.