Compliance

Compliance isn’t a promise.
It’s enforced in code.

Quiet hours, consent, disclosures, do-not-call. Not policies your team has to remember — gates every call and text passes through before it leaves.

Fails closed

A do-not-call check error blocks the send. It is never risked.

9am–8pm

Automated calls in the lead’s own timezone. Never on Sunday.

One STOP

Closes the thread, cancels drips, confirms from the same number.

Exportable

Every block, opt-out, and consent record on one audit trail.

Bring us your compliance checklist. We’ll show you where each line is enforced.

Watch the demo

Outreach lands in the legal window — the lead’s window. Automated calls fire 9am–8pm in the lead’s own timezone, never Sunday. Texts wait for daytime too. Out-of-window work defers to the next legal morning — it never just sends.

Your AI introduces itself as an AI. Set your disclosure once, agency-wide, and it opens every AI call — spoken before anything else. When a human call is recorded, both parties hear the consent disclosure first.

The dialer paces to you — not a statistical model. First human wins, extra lines are released before anyone hears silence, and any abandoned call gets your recorded callback message with a press-1 opt-out. All of it tracked in your metrics.

One STOP shuts it all down. Conversation closed, drips cancelled, DNC written, confirmation sent from the same number — automatically. A spoken opt-out to the AI is honored the same way.

Every send passes one do-not-call gate. If the check itself errors, the message is withheld — the system never gambles on an illegal contact. Every block and pass is logged, and imports are scrubbed against your list on entry.

Your book, protected. The data side of the same discipline.

Encrypted in transit and at rest

Traffic moves over TLS and data lives on encrypted managed infrastructure.

Your book is walled off

Tenant isolation is structural — no other agency on the platform can reach your leads, recordings, or records.

Recordings stay private

Call recordings are never on a public link. Playback uses signed, expiring URLs.

PII stays out of error tooling

Customer details are scrubbed before any error report leaves the system.

Privacy requests honored

CCPA do-not-sell and data-deletion requests are processed with a retained audit record.

Registered sender identity

Carrier (A2P) brand and campaign registration is handled for you — you text as a legitimate, registered sender.

Email sends in the legal window

Marketing email fires only during the lead’s allowed contact hours in their timezone — the same enforced quiet-hours window as your texts.

Unsubscribe honored, senders verified

Every marketing email carries one-click unsubscribe and a postal address, and sends from your own DKIM-verified domain. Opt-outs, bounces, and spam complaints are suppressed before the next send.

Prove your leads are compliant. When a lead, a carrier, or a lawyer asks — you have the record.

A consent record on every lead

Source, exact opt-in language with a tamper-evident fingerprint, timestamp, and the proof file — retrievable lead by lead.

Imports scrubbed on entry

Numbers you’ve suppressed are stripped from every CSV, manual add, and vendor feed before they can re-enter outreach.

Compliance state where agents work

DNC and opt-out badges on the lead, plain warnings when a lead is manual-only, one-click suppress.

A deliberate attestation step

Enabling AI voice on an imported batch requires your recorded consent attestation — a checkpoint, not a one-click blast.

An audit trail you can hand over

Who suppressed which number, why, and when — plus proof every send was checked. Export it for a carrier, an auditor, or counsel.

Run outreach you can defend. Not rules your team remembers — gates the platform enforces.

Orion enforces these safeguards automatically, but nothing on this page is legal advice. Carriers and states layer their own rules — when in doubt, ask your compliance counsel.