Compliance
Compliance is built in by default. This page is the high-level summary — for the legally-binding version, see our Privacy Policy and Terms of Service.
TCPA (Telephone Consumer Protection Act)
The TCPA regulates auto-dialed calls and texts to consumers. Growth Wingman handles inbound calls (the customer initiated, so consent is implied) and outbound follow-ups based on consent you collected at intake.
Your responsibility: make sure your customers gave consent before you initiate outbound contact. Our default workflows only auto-text customers who:
- Initiated contact themselves (responding to their inquiry)
- Provided their number on a form with explicit opt-in
- Are existing customers within the past 24 months (established business relationship)
We never auto-dial cold numbers.
A2P 10DLC
When your wingman sends SMS, those messages route through Growth Wingman’s A2P-registered 10DLC trunk. We handle:
- Brand registration with The Campaign Registry (TCR)
- Campaign vetting per use case (transactional, customer-care, marketing)
- Compliance audits with the major US carriers
When you sign up, you inherit our brand registration for your tenant — you don’t have to register separately. Bring your own brand is also supported on enterprise plans.
AI disclosure
California’s Bot Disclosure Law (SB 1001), Florida’s similar regulation, and pending laws in 12+ states require AI assistants to identify themselves to callers/texters. Your wingman opens every call with: “Hi, this is [Name], an AI assistant for [Your Business].”
You can customize the assistant name and business name. You cannot remove the AI-disclosure phrase. This is a liability bright-line — for both of us.
Two-party consent recording
Eleven US states require all parties to consent to call recording: California, Connecticut, Delaware, Florida, Illinois, Maryland, Massachusetts, Michigan, Montana, New Hampshire, Pennsylvania, Washington.
Your wingman geo-detects the caller’s state from their area code and:
- In two-party states: includes a recording disclosure (“This call may be recorded for quality. Continue if that’s okay.”)
- In one-party states: records by default without explicit disclosure
Best-effort, not legal guarantee — area-code geo-detection is imperfect and some callers use number portability across states. If you operate primarily in two-party states or handle regulated work, you can configure your wingman to disclose recording globally (always-on disclosure).
SMS opt-out (STOP / HELP)
Every outbound SMS thread includes opt-out instructions. We honor STOP, STOPALL, UNSUBSCRIBE, CANCEL, END, QUIT immediately and persist opt-outs across the customer’s lifetime with you. HELP returns brand information and your support contact.
What you need to do
- Don’t import contact lists you don’t have consent for. If you upload past customers, only do so for those who’ve explicitly opted in to follow-up communications.
- Don’t change the AI-disclosure phrase. If you do, you’re operating outside our compliance umbrella.
- Don’t initiate outbound campaigns to numbers without consent. Use our reactivation workflows, which only contact customers with established business relationship.
- For regulated industries (medical, legal, financial), additional rules apply. HIPAA, GLBA, and state consumer-protection laws may impose stricter requirements. Contact [email protected] for industry-specific guidance.
Reporting an issue
If you think your wingman did something non-compliant — say, called a number on the National Do Not Call list, or didn’t disclose AI properly — email [email protected] immediately. We’ll review the call, investigate root cause, and either fix the configuration or refund the violation.