Security and compliance
Compliance is a feature, not fine print
MessageAgent is built so that automating customer conversations keeps you on the right side of the rules. AI disclosure, consent capture, opt-out handling, encryption, and clean human handoff are built in.
AI is always disclosed
Every conversation makes clear the customer is chatting with an AI assistant, and a human handoff is one tap away. This aligns with emerging AI-disclosure norms, including the EU AI Act and US guidance.
TCPA consent and opt-out
For SMS, MessageAgent captures prior express consent and honors STOP, UNSUBSCRIBE, and any reasonable opt-out immediately. Consent records are kept so you can demonstrate compliance.
WhatsApp opt-in and templates
For WhatsApp, we capture opt-in and manage approved message templates for messaging outside the 24-hour customer-care window, in line with WhatsApp Business policy.
Human handoff with full context
When a conversation needs a person, the AI escalates with the full thread and context carried over. You define the rules for when it escalates.
Encryption in transit and at rest
Conversations and contact data are encrypted in transit and at rest. Access is scoped to your workspace.
Not a substitute for licensed advice
For regulated contexts such as healthcare and legal, the agent routes, schedules, and answers general questions. It does not give regulated advice, and it hands off to your licensed staff.
Enterprise needs? SSO, a Data Processing Agreement (DPA), and a Business Associate Agreement (BAA) are available on the Enterprise plan. This page is general information about our compliance posture and is not legal advice.