AI Voice Agent for US Fintech

Yes — Caller Digital is a HIPAA/GLBA-aware Business Associate / Service Provider, with SOC 2 Type II annual attestation. The platform is in production at consumer lenders, BNPL platforms, credit unions, and neobanks regulated under federal (CFPB, OCC, NCUA) and state (NY DFS, CA DFPI, etc.) frameworks. Sub-processor inventory is disclosed quarterly. NPI (Non-Public Information) is encrypted at rest with customer-managed KMS keys; cross-border processing is opt-in only. The compliance grid covers FDCPA, TCPA, GLBA Safeguards Rule, Fair Credit Reporting Act (FCRA) for credit-related calls, and state-specific UDAAP frameworks.

Mini-Miranda fires in the opening utterance: "This is an attempt to collect a debt; any information obtained will be used for that purpose. This call is being recorded." The script is registered as a template, fires before any debt-related ask, and the timestamp is captured in the per-call audit row. The 5-day validation notice is automated post-first-contact via SMS or email. Subsequent calls validate against the consent + cease-communication record before dialing. See our /us/use-cases/past-due-collections page for full FDCPA workflow detail.

Native integrations: Stripe, Adyen, Authorize.Net, Plaid Pay, Spreedly. For ACH-only debt products, DTMF capture (PCI-DSS Level 1 compliant) collects routing + account numbers without spoken digits. For card-on-file accounts, the AI confirms a one-time charge via consent-captured authorization (no card data spoken). Payment confirmation is validated within the same call — the AI waits for processor callback (typically 2-8 seconds) before disposition.

Yes. For applications that need real-time bank-account verification or income verification, the AI bridges into Plaid Link mid-call. The flow: AI prompts the applicant to expect an SMS link, fires the Plaid Link URL, walks them through it verbally ("You'll see your bank logos, tap yours, log in normally"), and validates the success callback. Plaid Identity Verification (IDV), Income, Assets, and Liabilities products are supported. Same approach works for Sardine for fraud-score validation.

Standard timeline: 21 business days from contract sign. Week 1: GLBA risk assessment, FDCPA + TCPA script review with your compliance counsel, CRM/LOS integration design, payment-processor connection. Week 2: build + state-licensing grid configuration, AE/agent role-mapping for warm-transfer routing, shadow-mode pilot on 10% volume. Week 3: ramp to 50%, supervisor training on hardship and cease-communication scenarios, audit-trail walkthrough. Week 4: full production with monthly compliance review cadence.