01 Company and product
Company and product
Plumma gives an enterprise one contract and one API to reach the network checks mobile operators publish, such as SIM swap and number verification, across several operators and countries.
IllustrativeThe incorporation year and headcount are estimates.
Company
Company facts
| Item | Detail | Status |
|---|---|---|
| Legal name | Plumma S.r.l. | Confirmed |
| Registered office | Via Corsini 21, Fellicarolo, 41021 Fanano (MO), Italy | Confirmed |
| Operating office | Via Provinciale 175/B, Crespellano, 40056 Valsamoggia (BO), Italy | Confirmed |
| VAT and company register | IT04209450362, REA MO-451932 | Confirmed |
| DUNS | 508729115 | Confirmed |
| Incorporated | 2025 | Illustrative |
| People | Six, of whom two founders full time | Illustrative |
| Industry status | GSMA Open Gateway channel partner since May 2026, a status held by more than sixty companies | Confirmed |
The problem
What the product addresses
Banks and payment companies confirm most transactions with a one-time code sent by SMS. The code proves that someone received the message. It does not prove that the phone line is the one the account was opened with, or that the SIM card was not moved to a new device the day before. In Italy, CERTFin and ABI Lab report that 96% of fraudulent transactions in 2026 passed strong customer authentication.
Mobile operators hold the data that would catch many of these cases, for example the date of the last SIM change. Under the GSMA Open Gateway programme they now publish it as APIs, on a shared specification called CAMARA. Using them is still hard for an enterprise that operates in more than one country: each operator needs its own contract, its own technical integration and its own invoice, and versions of the specification differ between operators.
How it works
One request, four steps
Authenticate
The client sends one request with one key, whatever country the phone number is in.
Route
Plumma chooses which operator or supplier answers, by the client's rule: fastest, cheapest or most complete.
Normalise
Differences between operators and specification versions are handled by Plumma, so the answer has the same format every time.
Record
Each answer states which operator served it, with an identifier the client can use in an audit.
Commands
Status in Italy
Status per operator path. TIM Italia is the anchor operator in production.
SIM SwapWhen the SIM behind a number last changed.
LiveNumber VerificationWhether the device making the request is on that number.
LiveKYC MatchWhether account details match the registered holder of the line.
LiveAge VerificationWhether the holder is above an age threshold.
LiveDevice LocationWhether the device is inside a given area.
LiveDevice StatusWhether the line is reachable and active.
LiveQuality on DemandReserved bandwidth for a session.
In buildScam CheckWhether the line shows signs of abuse.
In buildTechnology
Stack
| Layer | Technology |
|---|---|
| Services | Node.js and TypeScript on AWS, more than one region |
| Standard | CAMARA OpenAPI 3.0, OAuth 2.0 with consent |
| Data | PostgreSQL, Redis and InfluxDB; consent records stored in the EU |
| Interfaces | Developer portal and client console |
| Infrastructure | Terraform, API Gateway, Lambda and EC2 |
Targets: 99.99% uptime, under 500 ms per request, integration in under ten working days. Public documentation is at plumma.it/docs.
Roadmap
Plan funded by this round
| Quarter | Milestone |
|---|---|
| Q4 2026 | Head of partner relationships hired |
| Q1 2027 | Two aggregator supply agreements signed |
| Q2 2027 | Commercial launch |
| Q3 2027 | Prices published on the website |
| Q4 2027 | Routing record in production at a client; first buying cohort opens |