Where are the telephone validation rules declared?

How is a customer’s telephone validated?