This is a privacy product, so the interesting part is not the feature list. It is what the system refuses to do.
Your destination number is encrypted at rest
The number your calls forward to is sealed with authenticated encryption, and the key lives outside the database. Someone who obtained a copy of the database alone could not read it.
Unauthorised callers are told nothing
Seven different reasons a call might not connect all produce one identical response. There is no status to probe, no timing difference to measure, and no error that distinguishes a real account from an imaginary one.
One attempt per call
Enforced at the database, not in the application. A second attempt on the same call is refused even when the digits are correct.
Codes are shown once
When a code is issued it is displayed to you and then stored one-way. Nobody at The Syndicate Group can look it up, read it back to you over the phone, or be socially engineered into revealing it. There is no administrative screen anywhere that displays a code.
Guessing is detected and stopped
Repeated failures from the same caller, and unusual volumes across the service, both trigger automatic blocks. When a block is in force the caller still hears exactly the standard refusal — being blocked is not something an attacker gets told either.
No recording, no transcription
Call recording is off and there is no automated transcription. This is a design decision, not a setting we have left unconfigured.
Spend and duration ceilings
Every account carries a maximum call length and a daily minute ceiling. There is deliberately no “unlimited” option, because an abused number must not be able to generate open-ended cost.
Where calls are carried
Voice is carried over a regulated commercial carrier network. The platform is built so the carrier can be changed without changing how your number, your codes or your routing behave.