Compliance posture
Threadbay plugs an outcome-priced AI agent into the phone system, calendar, and CRM a small practice already pays for. This page is plain-English business guidance on the consent, disclosure, and robocall posture the agent ships with — split into three regulatory areas (TCPA, state AI disclosure, FCC robocall) and four verticals per area (dental, legal, home services, medspa). Not legal advice. The agent never replaces counsel; site-specific compliance, scope-of-practice lines, and the consent language that lives on your forms and your website remain the practice’s responsibility.
1 · TCPA consent
The Telephone Consumer Protection Act requires express written consent before any autodialed or prerecorded voice call or text goes to a wireless number, and the consent disclosure itself has to meet the FCC's E-sign rule. Threadbay's posture is prior-relationship-first: the agent answers inbound before it ever initiates outbound, books the appointment, runs only TCPA-safe confirmation and reminder cadences against leads the practice has already captured, and never blasts a third-party list. The seam — the opt-in language that lives on the practice's intake form, recall form, and website — stays the practice's responsibility.
Dental
A solo practice sees three call shapes that never carried explicit marketing consent — the after-hours post-op question at 7:48 PM, the new-patient form that landed at 11 PM with the carrier half-typed, and the recall list that needed to fill a 2 PM cancellation by lunchtime. None of those callers handed the practice express written consent for an outbound cadence; they rang in once and left a message. Posture: the agent answers inbound first, books and confirms in one touch, and only runs an outbound SMS or voice cadence against patients who already handed express written consent on the form. Seam: the opt-in language that lives on the recall form, the new-patient form, and the website.
Legal
A solo firm — family law, estate planning, immigration, or PI — sees three shapes where the firm IS the source of the contact but no marketing consent was ever signed: a Friday-night matter that lands at 8 PM with the office closed, an intake that rings in mid-hearing while the attorney is unavailable, and a retainer sent Monday that is unsigned by Friday. Posture: the agent runs only on confirmed inbound first, books the consultation, sends only the reminder cadence the firm has already opted into, and never runs an outbound cold sequence against a name pulled off the open web. Seam: the conflict-check scope — the agent never contacts a lead the firm has not captured.
Home services
An HVAC, plumbing, electrical, or landscaping operator sees three shapes where the homeowner is the source but no express consent was signed: the burst-pipe emergency at 10:12 PM, the quote request the estimator never got back to by 5:47 PM, and the weekend overflow that lands fifty calls deep in voicemail by Monday morning. Posture: the agent runs only on confirmed inbound first, books the dispatch, confirms the estimate, and only runs an outbound SMS or voice cadence against homeowners who already handed express written consent on the quote form or the intake. Seam: the trade-specific consent text on the quote form and the website.
Medspa
A solo medspa, aesthetic, IV therapy, or weight-loss and skin-care practice sees three shapes where the prospective patient is the source but no express consent was signed: the Botox-curious caller at 8:30 PM, a “Book a free consult” form unworked for weeks, and a finished-laser patient whose aftercare, 48-hour complication check, and same-day rebook window never went out. Posture: the agent runs only on confirmed inbound first, books the consult, runs the post-treatment follow-up cadence the patient already opted into, and never runs an outbound sequence against a name scraped off a public list. Seam: consent language that lives on the consult form, the post-treatment form, and the website.
2 · State-level AI disclosure
California, Colorado, Illinois, and a widening list of states require that callers know they are speaking with an AI before any other substantive question lands — the opening disclosure is no longer optional, and the language is in the agent's script, not in an end-of-call rider. Posture: the agent identifies itself as the practice's AI assistant as the first sentence of every call, the same opener carried on every outbound cadence touch, and the disclosure verb is hyphened to the vertical as a label (the practice's AI assistant, the firm's AI assistant, the company's AI assistant). No caller — prospect, patient, or counsel — ever wonders whether they reached a person. Seam: state-specific disclosure variation locked into the script, not loaded by the operator mid-call.
Dental
Every call opens with “Hi, this is the practice's AI assistant…” before any qualifying question. The same opener is replicated on every outbound recall touch and SMS reminder, so a patient never guesses whether they reached the front desk between hygiene appointments or the AI that keeps the recall cadence honest. The opening disclosure is the same script line for every state the practice is licensed in — no per-state variation the front desk has to remember mid-call.
Legal
Every call opens with “Hi, this is the firm's AI assistant…” before matter-type collection — crime, contract, family, estate — so the prospective client never wonders whether the voice on the other end of the line is a person at the firm or the intake that takes the matter to the firm. Outbound retainer follow-ups carry the same disclosure on every cadence touch. The same opener holds across California, Colorado, Illinois, and any state where the firm takes matters; no state-specific catch the paralegal has to load at call start.
Home services
Every call opens with “Hi, this is the company's AI assistant…” in the trade's voice — HVAC, plumbing, electrical, landscaping — before any quote permission is asked. The “did I just talk to a person or a machine” question resolves before the homeowner commits the job site address. Same opener on the appointment-confirmation and review-request cadence. State-level disclosure variation is held in the script layer, not in the dispatcher's hand.
Medspa
Every call opens with “Hi, this is the practice's AI assistant…” and the post-treatment voice-and-SMS cadence carries the same disclosure on every outbound touch — the aftercare check at hour 24, the 48-hour complication check, the same-day rebook window. State-level variation in disclosure language is locked into the script so a California-regulated caller hears the same opener a Texas caller does, and the disclosure lands before any procedure-specific question, not after.
3 · FCC robocall posture
The FCC's TCPA-implementing rules and the TRACED Act require accurate caller-ID, time-of-day limits, immediate opt-out on “stop,” and call-duration and ring-time discipline at the carrier wire. Posture: the agent ships with accurate caller-ID through the practice's trunk carrier, ring-time limits pre-set to the practice's hours of operation, immediate opt-out on “stop” via SMS and voice, and the cadence ends on the same line a “stop” reply arrives. Where the FCC's wire-side hygiene stops, the practice's state-specific rules pick up — that seam is yours, not the agent's.
Dental
The recall and confirmation cadence goes over Twilio with accurate caller-ID, ring-time limits set to the practice's local hours (no 9 PM Sunday dental reminder, no 6 AM weekday reminder before the practice opens), immediate opt-out on “stop” via SMS and voice, and the cadence ends the moment the patient replies. The same wire-side discipline holds during the post-op check window — accurate caller-ID, ring-time discipline, opt-out honored on the same line.
Legal
The retainer follow-up cadence goes over Twilio with accurate caller-ID, ring-time limits set to the firm's hours (no 10:30 PM Friday retainer chase, no Sunday reminder before the office re-opens), immediate opt-out on “stop” via SMS and voice, and the cadence ends on the same line a “stop” reply arrives. Wire-side discipline is the same across every matter type — family, estate, immigration, PI — and no outbound cadence ever runs against a name pulled off the open web.
Home services
The quote and dispatch cadence goes over Twilio with accurate caller-ID, ring-time limits set to the operator's hours (no 11 PM Sunday estimate reminder after the dispatch is closed for the night), immediate opt-out on “stop” via SMS and voice, and the cadence ends the moment the homeowner replies. Wire-side discipline is the same across every trade — HVAC, plumbing, electrical, landscaping — and the carrier wire keeps the audit trail referenced on the /privacy stance.
Medspa
The post-treatment and same-day rebook cadence goes over Twilio with accurate caller-ID, ring-time limits set to the practice's hours, immediate opt-out on “stop” via SMS and voice, and the cadence ends the moment the patient replies. State-level variation overlays the FCC wire-side hygiene — California, Colorado, Illinois, Texas — but the cadence stops the same line a “stop” reply arrives regardless of the disclosure state's specifics.
Have a specific compliance question?
If a scenario on your end doesn’t match the posture above — state-specific AI-disclosure language, a TCPA edge case, a scope-of-practice line a regulator has flagged — write to us at threadbay@polsia.app and we’ll come back with what the agent ships with today and what stays on your side. Pair this with the privacy stance on /privacy — same posture, different lens.