Home / Compliance

Compliance

The mandate, turned into an API call.

Disclosure and consent rules for AI voice aren't coming — they're in force. NoAICalls maps each control to the obligation it satisfies, and gives you the evidence to prove it.

The forcing function

Disclosure is already law in the places that matter.

2019 · CA
California Bot Disclosure Law

Automated agents interacting with people must disclose that they are bots. The first US bot-transparency statute.

Feb 2024 · US
FCC ruling on AI voices

The FCC confirmed AI-generated voices count as "artificial" under the Telephone Consumer Protection Act — prior consent required for calls that use them.

2024–25 · US states
State disclosure laws widen

Utah and a growing set of states enacted AI-disclosure requirements for consumer-facing automated communication.

2 Aug 2026 · EU
EU AI Act, Article 50

The duty to tell people they are interacting with an AI system applies from 2 August 2026. Penalty tier for breaches: up to €15M or 3% of worldwide annual turnover.

Note: under the May 2026 Digital Omnibus provisional agreement, only the Article 50(2) machine-readable marking obligation for generative systems already on the market received a grace period to 2 December 2026. The interaction-disclosure duty NoAICalls addresses proceeds on 2 August 2026. Regulations evolve — confirm current obligations with counsel.

Control mapping

Each obligation, and the control that meets it.

ObligationWhat it requiresNoAICalls control
ObligationAI interaction disclosure
What it requiresPeople must be told when they're talking to an AI system.
NoAICalls controlAutomatic disclosure at call start
ObligationConsent to record / use AI voice
What it requiresPrior consent for recording and for artificial-voice calls (TCPA / FCC).
NoAICalls controlConsent Engine + ledger
ObligationAudit & recordkeeping
What it requiresDemonstrable evidence of disclosures and consents on request.
NoAICalls controlImmutable Conversation Ledger
ObligationIdentity / anti-impersonation
What it requiresAssurance the agent is who it claims to be.
NoAICalls controlSigned Voice Passport
ObligationRight to a human
What it requiresA meaningful path to human assistance.
NoAICalls controlHuman Escalation, armed by default
ObligationData protection (GDPR / privacy)
What it requiresLawful, least-privilege handling of personal data.
NoAICalls controlResidency controls + scoped access

This mapping is provided for orientation and is not legal advice. Applicability depends on your jurisdiction, use case, and role (provider vs deployer). NoAICalls supports your compliance program; it doesn't replace counsel.

Evidence

Export on demand.

Signed, timestamped records for any session — disclosures, consents, policy checks — ready for an auditor or a regulator.

Frameworks

Mapped, not marketed.

Controls tied to TCPA, FCC guidance, and EU AI Act Article 50, with the mapping maintained as rules evolve.

Residency

Where your data lives.

Region pinning for EU and US deployments, with subprocessor transparency under enterprise agreements.

Get ahead of it

Be compliant before the deadline, not after.