Industry-leading security standards and regulatory compliance built into every message. From HIPAA to TCPA, we've got you covered.
Published policies that govern how Tells operates its platform.
Yes. Every campaign on Tells is reviewed for TCPA compliance before going live. The platform enforces opt-in records, STOP and HELP keyword handling, time-of-day restrictions per state, and quiet hours. Audit trails are kept per message.
Tells is SOC 2 Type II in progress, expected to complete in 2026. All customer data is encrypted at rest and in transit. Access to production systems is logged and audited.
Tells handles 10DLC brand and campaign registration, Short Code lease through CSCA (US Short Codes Registry), and Toll-Free verification on behalf of customers. Our compliance team responds to carrier reviews and remediates campaign issues without exposing customers to direct carrier communication.
The recipient is immediately and permanently opted out of all messaging from that brand. The opt-out is honored automatically without requiring action from the sender. Subsequent campaign sends to that number are blocked by Tells at the platform layer.
Yes. Tells maintains both a per-brand opt-out list and a platform-wide do-not-contact list for known abusive numbers, litigators, and TCPA-flagged numbers. Both lists are checked before every send.
Message content is retained per customer policy, typically 7 years for compliance audit purposes. Customers can request earlier deletion of specific recipient records or full account purge on contract termination.