Compliance

TCPA calling hours

Federal TCPA forbids calls before 8am or after 9pm in the called party's local time. We enforce this per-lead based on the contact's timezone field — not your account timezone. If a lead's timezone is missing, we fall back to the area code.

States with stricter rules (e.g. WA: 8am-8pm) are enforced where applicable.

FCC abandon-rate

FCC caps "abandoned" calls (consumer picks up, you hang up before connecting) at 3.0%. We auto-pause campaigns at 3.5% to keep a buffer, and log a campaign.compliance_paused audit event + webhook. Resume only after manual review.

Two-party consent states

These states require BOTH parties to consent to recording: CA, FL, IL, PA, WA, MD, MA, NH, OR, NV, CT. We auto-inject a recording-disclosure prompt at the start of every call where either the agent's number OR the lead's number is in one of those states.

The wording can be customised under Settings → Compliance → Recording disclosure; we ship a TCPA-attorney-reviewed default.

DNC

Internal DNC list (Sidebar → DNC) is checked before every outbound call. Add numbers manually, import in bulk, or rely on the in-call opt-out: if a lead says "stop calling," we flag the contact in real-time, never call them again, and log the timestamp + recording timestamp in the audit trail.

National DNC registry: required by FTC rules for telemarketing. Plug your SAN (Subscriber Account Number) into Settings → Compliance → DNC and we'll automatically scrub against the national list.

HIPAA mode

Available on Enterprise plans only. When enabled:

• No call recording (zero PHI capture).
• 30-day max retention on transcripts.
• BAA signed before activation.
• Audit log retention extended to 6 years.

Contact sales to enable.

GDPR (Articles 17 + 20)

Self-service from Settings → Privacy. Download your data as JSON (Article 20) or request deletion (Article 17) — 30-day grace period, can be cancelled before the purge runs.