The Floor · compliance governance
The gate has no bypass parameter. That's the feature.
Prompts can be overridden. The Floor can't. Every outbound touch — call, text, any cadence — passes one governance gate. It runs every check, every time, and it cannot be skipped: not by an admin, a supervisor, an API flag, or us. When it can't decide, it holds. Unknown means no.
consent_attestationbasis ≥ prior_express_written✓
suppressionopt-out · DNC · lead status · email list✓
quiet_hoursclaimant-local · strictest-of(federal, state)✓
frequency_capsper-channel + cross-channel windows✓
no short-circuit · all checks run · all results logged
The checks
Four checks. Run in full. Written down.
The gate never short-circuits: every check runs on every touch so the audit record shows the complete picture, pass or hold.
consent_attestation
Consent attestation
Every touch carries an attested consent basis, ranked against the minimum the touch requires — outbound dialing demands prior express written consent, not a vibe.
Consent is your obligation under the TCPA; the gate makes it impossible to forget. What it can't do is create consent you never obtained — that stays with your intake practices.
suppression
Suppression & DNC
Opt-outs, Do-Not-Call flags, suppressed lead statuses, and suppressed email addresses all block the touch — a STOP recorded on any channel is honored across every channel.
A claimant who said stop is a closed question. There is no re-enrollment path around a suppression record.
quiet_hours
Quiet hours, cited
Touches fire only inside the claimant's local calling window — the stricter of the federal 8am–9pm rule and the claimant's state statute, including Sunday rules.
The state table is maintained with citations (Fla. Stat. §501.616, Tex. Bus. & Com. §301.051, and the rest) so your compliance counsel can audit the rule, not just the outcome. Unresolvable timezone? The touch holds.
frequency_caps
Frequency caps
Rolling windows cap attempts per channel and across channels, per claimant.
Persistence is a strategy; harassment is a cause of action. The cap is the difference, enforced.
Fails closed
Most systems, when data is missing, default open and apologize later. The Floor holds the touch, logs the reason, waits for a human. The only overrides that exist are admin-only, individually attested, append-only logged — and they can relax timing and caps. Never consent. Never suppression. From anyone.
The record
An audit trail built to be challenged.
Every call event and gate decision is appended to a SHA-256 hash chain, per call, serialized so races can't reorder history. Verification is an endpoint, not a promise: run it any time, and if a record were ever altered, it names the exact broken link. Tamper-evident, not immutable — the difference is that you can check it yourself.
Read this part too
What The Floor is not
Not a compliance guarantee — your consent practices and program stay yours. Not legal advice — the citations are there so your counsel can check our homework. And never an add-on: every plan gets the same floor. Charging extra for compliance is someone else's business model.
The full disclosures live on Trust & security.
Thirty minutes. Watch it refuse a call.
We'll run a live call, work a sample docket, and show you the system refusing a call it shouldn't make.