Platform Compliance
Compliance-aware communication: what EaseDial provides and what your team configures
EaseDial provides encryption, recording controls, access management, and audit logging that organizations configure as part of compliance-aware communication workflows. Compliance obligations vary by industry and region — this page explains what the platform provides and what your team is responsible for.
Compliance tools
Compliance tools in EaseDial
Call Recording Controls
Configure which queues, agents, and call types are recorded. Recording can be paused during sensitive interactions (e.g., payment collection).
Recording Access Controls
Role-based access determines who can play, download, or delete recordings. Access events are logged.
Consent Notice Playback
Configure an automated notice played to callers at the start of recorded calls. Requirements vary by jurisdiction.
Audit Logging
Admin console activity — configuration changes, user provisioning, access events — is logged and available for review.
Data Retention Configuration
Set retention periods for recordings and transcripts aligned with your organization's data retention policy.
Encryption in Transit
All calls encrypted with TLS/SRTP. Data in transit is protected against interception.
Industry compliance considerations
Industry compliance considerations
The following information is educational. It describes the types of compliance considerations organizations in each industry typically face. It is not legal advice. Organizations should consult qualified legal and compliance counsel for requirements specific to their industry, jurisdiction, and use case.
Healthcare
HIPAA requirements for PHI in communications. Recording access controls, encryption, and BAA considerations.
See Healthcare solutions →Financial Services
MiFID II, Dodd-Frank, and regional requirements for communication recording and retention.
See Financial Services solutions →Contact Centers
TCPA (US), PECR (UK), and regional regulations for outbound dialing. DNC list compliance, abandonment rate controls, consent for recording.
Shared responsibility
What EaseDial provides vs what your team is responsible for
EaseDial provides
- ✓ Encryption controls
- ✓ Recording tools
- ✓ Access management
- ✓ Audit logging
- ✓ Consent playback capability
Your organization is responsible for
- ● Assessing applicable regulations
- ● Configuring platform controls accordingly
- ● Maintaining compliance documentation
- ● Consulting qualified legal counsel
Related
Related resources
Frequently asked questions
Is EaseDial HIPAA compliant?
EaseDial provides security controls — encryption in transit, role-based access, and recording access controls — that organizations can configure as part of a HIPAA-compliant workflow. Organizations using EaseDial in healthcare contexts should assess their specific HIPAA obligations and consult qualified compliance counsel. EaseDial does not make blanket HIPAA certification claims.
Is EaseDial GDPR compliant?
EaseDial's platform is designed with data protection controls that support GDPR compliance implementations — including call recording controls, data access management, and encryption. Organizations handling EU personal data are responsible for their own GDPR compliance assessment and configuration. EaseDial recommends consulting qualified legal counsel for GDPR requirements specific to your use case.
What compliance tools does EaseDial provide?
EaseDial provides: call recording with access controls, configurable recording consent notice playback, role-based access control, audit logging for admin actions, and configurable data retention. These tools support compliance workflows — organizations are responsible for configuring them appropriately for their regulatory environment.
Who is responsible for ensuring call recording consent?
Recording consent requirements vary by jurisdiction. In two-party consent states and countries, both parties must be notified that a call is being recorded. EaseDial supports configurable consent notice playback at the start of calls — organizations are responsible for determining the consent requirements applicable to their jurisdiction and configuring the platform accordingly.
What is a Business Associate Agreement (BAA)?
A BAA is a contract between a covered entity (healthcare organization) and a service provider that handles protected health information (PHI). Healthcare organizations that handle PHI and use EaseDial should contact our sales team to discuss BAA requirements for their specific configuration.
How does EaseDial support PCI DSS considerations?
Contact centers handling payment card data over the phone have specific PCI DSS requirements. EaseDial provides call recording pause/resume capability — allowing agents to pause recording during payment card collection. Organizations should consult a qualified PCI DSS assessor for requirements specific to their environment.
Questions about compliance configuration?
Talk to our team about recording controls, access management, and industry-specific compliance considerations for your use case.