Compliance
Here is what we enforce, here is what we do not, and here is where you still own the obligation.
You are going to rely on this page, so it is written to be relied on. Every control below is implemented in the product. Everything we do not do is stated just as plainly, because a compliance page that overclaims is worse than no compliance page at all.
This page describes product behaviour. It is not legal advice, and it is not a substitute for your own counsel.
Enforced in the product
What we do, and can show you
Calling windows are enforced per phone number, in that number's own timezone
The window is derived from the phone number being dialled, not from the contact's mailing address. A lead living in California with a New York mobile is two different windows, and each number is checked against its own before a call is placed.
The federal 8am–9pm window is the floor, and four states are enforced more strictly
Florida, Maryland and Oklahoma narrow the evening to 8pm and cap calls at three. Texas runs 9am–9pm with a later Sunday start. Where a stricter rule is implemented it wins; the federal window is never widened.
STOP is permanent and cross-channel
A STOP on SMS also stops email. It cannot be undone by re-importing a list, it is not reset by a new campaign, and it survives deletion of the contact record — the suppression outlives the data it came from.
Abandoned calls are counted, and the dialer throttles itself
Abandonment is measured continuously against the FCC's 3% cap. When the rate climbs the dialer reduces the number of lines it places rather than letting the rate keep rising. Slower dialing is the designed response.
Every number is scrubbed before dialing, and re-checked at dial time
The scrub runs against your own suppression sources — your internal do-not-call list, contacts you have flagged, and everyone who has ever replied STOP. It runs at dial time rather than trusting the state of the list at import, so a number opted out an hour ago is refused now.
Call recording is off by default
Recording is opt-in per account. Where a call is subject to all-party consent, the disclosure is played before the parties are joined — not after the conversation has already started.
We register your A2P 10DLC brand and campaign and pass the carrier fee through at cost
We do the brand and campaign registration for you. The carrier fee is passed through at cost, roughly $20 — it is a third-party fee that moves, and we do not mark it up.
A TCPA counsel review was completed on 2026-08-08
The review covered the compliance engine, the consent records, the recording disclosure and the data-processing agreement.
Limits — read these before you rely on us
What Iris does not do
These are not caveats added by a lawyer. Each one is something our system genuinely does not do, and claiming otherwise would mislead a buyer who is relying on us.
We do not scrub the National Do Not Call Registry
We scrub every number against your own suppression lists before each call. We are not currently a subscriber to the National Do Not Call Registry, so if your calling program requires a federal DNC scrub you should continue to run one. Where a national check would be reported, our system reports it as not run — deliberately, so that a list which was never nationally scrubbed can never read as if it were.
We do not enforce state telemarketing law, and the state coverage is not complete
At least fifteen states have their own mini-TCPA statutes. Four are implemented: Florida, Maryland, Oklahoma and Texas. A call into any other state is governed by the federal floor alone. The federal floor is a safe default, but it is not that state's own rule, and you should not read our coverage as a map of US law.
Counsel-reviewed does not mean certified for every state
The 2026-08-08 review covered the compliance engine and the consent records. It did not certify coverage of all fifty states, and no part of this page should be read as a legal opinion about your calling program.
We do not promise SMS deliverability outcomes
We register the brand and the campaign, pass the carrier fee through at cost, and enforce the consent and opt-out rules on every message. What carriers then do with your traffic is their decision, and filtering, throughput and delivery are not things we can promise on their behalf.
Calling windows
The four states enforced more strictly than the federal floor
| Where | Window enforced | Extra rule |
|---|---|---|
| Federal floor — everywhere else | 8:00am – 9:00pm | Local time of the number being dialled. This is the only rule applied outside the four states below. |
| Florida | 8:00am – 8:00pm | Maximum three calls |
| Maryland | 8:00am – 8:00pm | Maximum three calls |
| Oklahoma | 8:00am – 8:00pm | Maximum three calls |
| Texas | 9:00am – 9:00pm | Later start on Sunday |
At least fifteen states have their own mini-TCPA statutes. Four are implemented. Calls into the other states run on the federal floor alone, which is a safe default but is not that state's own rule.
Your side of the line
What stays your obligation, whatever we enforce
- The lawful basis and consent records for every list you upload. We enforce opt-outs; we cannot manufacture consent you did not have.
- A federal DNC scrub, if your calling program requires one. We are not a registry subscriber.
- State telemarketing registration, bonding and licensing where your program needs it.
- Whether you turn recording on, and whether you are entitled to record in the states you call.
- The content of your scripts and messages, including any disclosure your industry requires.