Compliance Notice
Last updated: June 24, 2026
Not Legal Advice
This page is provided for general informational purposes only. It does not constitute legal advice, legal guidance, or a compliance program. Veyce makes no representations that the information on this page is complete, current, or applicable to your situation. You are solely responsible for understanding and complying with all laws applicable to your outbound calling campaigns. Consult a licensed attorney before conducting outbound calling campaigns, especially those targeting consumers.
Platform Disclaimer
Veyce is a software tool that provides outbound calling infrastructure. Veyce does not make calls on your behalf, does not control or direct your calling campaigns, does not pre-screen your lead lists, and has no involvement in the content, nature, or targeting of your calls.
All legal and regulatory compliance obligations arising from your use of Veyce are your responsibility alone. Veyce, Inc. and its officers, directors, employees, and agents expressly disclaim any liability for your failure to comply with applicable law, including the TCPA, GDPR, CCPA, CASL, state telemarketing statutes, or any other regulation. You agree to defend, indemnify, and hold harmless Veyce, Inc. from any claims, fines, penalties, or judgments arising from your calling activities, data practices, or use of the Service.
The presence of a feature in Veyce (such as auto-dialing, voicemail drop, or call recording) does not constitute Veyce's representation that use of that feature is lawful in your jurisdiction or for your specific use case.
TCPA Your Responsibility
The Telephone Consumer Protection Act (TCPA), 47 U.S.C. § 227, governs outbound telephone calls in the United States. Violations carry statutory damages of $500–$1,500 per violation and may expose you to class action liability. The following is a general overview only not legal advice.
Key areas of TCPA compliance you are solely responsible for:
- Consent: if you use an automatic telephone dialing system (ATDS) or prerecorded voice to call consumers on mobile phones, federal law generally requires prior express written consent. Consult legal counsel regarding whether Veyce constitutes an ATDS under applicable FCC guidance.
- Calling hours: calls to consumers are generally restricted to 8 a.m. – 9 p.m. in the recipient's local time zone.
- Caller identification: you must identify yourself and the organization you represent at the start of each call.
- National DNC Registry: you must scrub consumer call lists against the National Do Not Call Registry before dialing. Veyce does not perform this scrubbing on your behalf.
- B2B calling: TCPA applies primarily to calls to consumers. Business-to-business calls generally face fewer restrictions, though individual state laws and FTC rules may still apply.
Veyce does not verify that your lead lists are TCPA-compliant, DNC-scrubbed, or consent-backed. You are solely responsible for ensuring your campaigns comply with the TCPA before importing leads or initiating calls through the Service.
Call Recording Your Responsibility
Call recording laws vary significantly by state and country. Failure to comply can result in civil and criminal penalties. The following is general information only not legal advice.
One-party consent states (US): most US states permit recording when at least one party to the call (typically the caller) consents.
All-party consent states (US): California, Connecticut, Florida, Illinois, Maryland, Massachusetts, Michigan, Montana, Nevada, New Hampshire, Oregon, Pennsylvania, and Washington require all parties to consent before a call may be recorded.
If you enable call recording in Veyce, you are solely responsible for obtaining all required consents in every jurisdiction where you place or receive calls. Veyce, Inc. is not liable for any claims, penalties, or damages arising from your failure to comply with applicable call recording laws.
Regardless of jurisdiction, the safest practice is to disclose at the start of every call that the call may be recorded. This disclosure does not guarantee legal compliance consult counsel for guidance specific to your campaigns.
Do Not Call Requirements Your Responsibility
The National Do Not Call Registry (maintained by the FTC) restricts telemarketing calls to registered numbers. You are solely responsible for:
- Registering with and scrubbing against the National DNC Registry (required at least every 31 days for active campaigns)
- Maintaining an internal DNC list and honoring opt-out requests within 30 days
- Adding any person who requests not to be called to your internal DNC list immediately
- Checking applicable state DNC registries, which may impose additional requirements beyond the federal registry
Veyce does not integrate with DNC scrubbing services and does not verify your lead lists for DNC compliance. You must ensure your lists are DNC-compliant before importing them into the Service. Veyce, Inc. is not liable for any penalties or claims resulting from your failure to comply with DNC requirements.
Within Veyce, spreadsheet imports that flag a number as being on the Do Not Call Register are excluded from the calling queue, and you can mark any lead as a status that prevents the dialer from surfacing it in future sessions. This feature is a convenience tool only and does not constitute a complete DNC compliance solution.
Data Privacy Your Responsibility
When you import personal data (names, phone numbers, email addresses, or other contact information) into Veyce, you act as the data controller for that information. Veyce, Inc. acts as a data processor on your behalf.
You are solely responsible for:
- Ensuring you have a lawful basis to collect and process the personal data you import
- Complying with GDPR, CCPA, CASL, PECR, and all other applicable data protection laws
- Providing required privacy notices to individuals whose data you hold
- Honoring individual data subject rights requests for data you control
- Maintaining required records of processing activities and lawful basis for each data set
Veyce makes no representations that your use of the Service complies with any data protection regulation. Veyce, Inc. is not liable for any regulatory investigation, fine, or claim arising from your data practices.
International Calling
If you place calls outside the United States, additional laws apply. You are solely responsible for understanding and complying with all applicable international regulations, including:
- Canada (CASL): Canada's Anti-Spam Legislation restricts commercial electronic messages and requires express or implied consent for marketing communications.
- EU (GDPR): the General Data Protection Regulation applies to personal data of EU residents and requires a lawful basis for processing.
- UK (PECR + DPA 2018): the Privacy and Electronic Communications Regulations govern marketing calls and texts in the United Kingdom.
- Other jurisdictions: many countries impose additional requirements on outbound telemarketing, cold calling, and data processing. You must research and comply with the laws of every jurisdiction where your contacts are located.
Veyce, Inc. makes no representation that the Service is approved for use in any particular jurisdiction. You are responsible for determining whether use of the Service is lawful in your jurisdiction and the jurisdictions of your contacts.
STIR/SHAKEN and TRACED Act Your Responsibility
The FCC's STIR/SHAKEN framework (Secure Telephone Identity Revisited / Signature-based Handling of Asserted information using toKENs) requires voice service providers to authenticate caller ID to combat illegal spoofing. The TRACED Act (2019) codified this requirement into law.
Veyce routes calls through the calling provider you connect Twilio, Telnyx, or LeadConnector/LC Phone. Each of those providers implements STIR/SHAKEN at the carrier level for eligible calls. However, you are solely responsible for:
- Ensuring your connected provider account is configured to comply with STIR/SHAKEN requirements, including obtaining appropriate certification levels (A, B, or C attestation)
- Not spoofing or falsifying caller ID. Caller ID spoofing for deceptive purposes is illegal under the Truth in Caller ID Act and the TRACED Act
- Registering with the FCC's Robocall Mitigation Database if you are a voice service provider or if your use of the Service triggers that requirement
- Displaying accurate caller ID that reflects a number you are authorized to use
Veyce is not a voice service provider it is a software interface to the calling provider you connect. STIR/SHAKEN compliance at the carrier level is your connected provider's and your responsibility. Veyce, Inc. is not liable for any penalties, fines, or enforcement actions arising from your caller ID practices or STIR/SHAKEN non-compliance.
State Telemarketing Laws Your Responsibility
In addition to federal TCPA requirements, many U.S. states have enacted their own telemarketing statutes that impose stricter requirements. The following is a non-exhaustive overview. You are solely responsible for researching and complying with the laws of every state where your contacts are located.
- Florida (FTSA): Florida's Telephone Solicitation Act imposes strict consent requirements for automated or prerecorded calls and texts. Florida has its own private right of action with statutory damages of $500 per call.
- Oklahoma (OTSA): Oklahoma's Telephone Solicitation Act requires separate written consent for automated calls and messages, mirroring federal TCPA requirements but with additional state-level enforcement.
- Washington (CEMA): Washington's Commercial Electronic Mail Act and the Washington Telemarketing Act impose requirements on unsolicited commercial communications and telemarketing calls.
- Texas: the Texas Business and Commerce Code imposes telemarketer registration requirements and restricts certain calling practices.
- All states: most states maintain their own DNC registries and telemarketing licensing requirements. You must check and comply with state-specific registries in addition to the federal National DNC Registry.
Veyce does not monitor, assess, or verify compliance with any state telemarketing law. Veyce, Inc. is not liable for any state-level regulatory action, fine, or civil claim arising from your calling campaigns.
Telemarketer Registration Your Responsibility
The FTC's Telemarketing Sales Rule (TSR) requires certain telemarketing organizations to register before conducting telemarketing campaigns. Additionally, more than 20 U.S. states require telemarketers to register with a state agency and, in some cases, post a surety bond before placing calls.
You are solely responsible for determining whether you are required to:
- Register as a telemarketer or telephone solicitor with the FTC or any state agency
- Obtain a telemarketing license in states where you conduct calling campaigns
- Post a surety bond in states that require it (including, among others, Florida, Georgia, Louisiana, and North Carolina)
- Comply with state-specific disclosure requirements at the start of each telemarketing call (e.g., disclosing purpose of call, product/service being offered, seller identity)
Veyce is a software tool. Veyce, Inc. is not a telemarketer and does not make calls on your behalf. Telemarketer registration obligations, if any, are yours alone.
Biometric Privacy Your Responsibility
Several U.S. states have enacted biometric privacy laws that restrict the collection, use, storage, and sharing of biometric identifiers, including voiceprints. If you use call recording, AI transcription, or voice analytics in connection with Veyce, you may be subject to these laws.
- Illinois (BIPA): the Biometric Information Privacy Act prohibits collecting biometric identifiers (including voiceprints) without written consent. BIPA provides a private right of action with statutory damages of $1,000–$5,000 per violation.
- Texas (CUBI): the Capture or Use of Biometric Identifier Act restricts collection and use of biometric identifiers, including retina/iris scans, fingerprints, voiceprints, and face geometry.
- Washington: Washington's biometric law restricts the enrollment and use of biometric identifiers without consent.
Veyce itself does not collect biometric data. Call recordings are stored in the calling provider account you connect. If you use AI transcription or voice analysis on those recordings, you are solely responsible for ensuring compliance with applicable biometric privacy laws in the jurisdictions where your contacts are located.
If you call contacts in Illinois and use voice recordings or AI-derived voiceprints, consult legal counsel regarding BIPA compliance before doing so. BIPA claims represent one of the most active areas of class action litigation in the United States.
Indemnification Reminder
As stated in our Terms of Service, you agree to defend, indemnify, and hold harmless Veyce, Inc. and its officers, directors, employees, and agents from any and all claims, regulatory actions, fines, penalties, damages, and expenses (including attorneys' fees) arising from:
- Your violation of the TCPA, GDPR, CCPA, CASL, or any other applicable law
- Any regulatory investigation or enforcement action arising from your calling campaigns or data practices
- Any class action or individual claim brought by a call recipient
- Your failure to scrub lead lists, obtain consent, or honor DNC requests
- Your failure to comply with call recording disclosure requirements
- Any claim relating to personal data you imported into or processed through the Service
Questions
This page does not answer questions about your specific legal obligations. For that, consult a licensed attorney. For questions about how Veyce's features work, contact us.