Compliance and trust

Every tactic in this playbook depends on one thing: the customer's willingness to keep talking to you. Compliance is how you protect that willingness at scale, and trust is what you earn when customers notice. This chapter explains, in plain English, the rules that govern how dealerships call, text, email, record, disclose and use AI; how consent and opt-outs work; what Guardian enforces automatically; and what humans must still do themselves. Regen supports compliance; it is not legal advice. Your store's counsel sets your policies, and Guardian enforces them.

Trust is the strategy, not the cost

A store that texts at 10 p.m., ignores "please stop", quotes payments without terms or lets an AI pretend to be a person can win a few deals. It also burns its phone numbers, its reputation, its review score and, eventually, its legal budget. The top 1% treat compliance as a selling advantage:

• Customers who feel safe reply more. A clear opt-out in the first message makes people more willing to engage, not less.
• Every unwanted message raises opt-outs and carrier filtering. Respectful pacing keeps the channel open for the customers who want it.
• Honest disclosures prevent the deal that unwinds in the business office, and the complaint that follows it.

Speed, persistence, relevance, respect. Respect is not the soft one. It is the one that keeps the other three legal.

Who owns what

Regen gives you the tools: a consent ledger, opt-out detection, quiet hours by location, screening, logged decisions, exportable records. It does not decide what your policies should be or whether a specific practice is lawful in your state. That is your counsel's job.

• Counsel approves the store's consent language, quiet-hour policy, recording policy, disclosure wording, record retention and how replies at night are treated.
• The dealer principal and GM own the policy and make sure it is configured in the Compliance Center.
• Guardian enforces the configured policy on every send, by every agent and every person, and logs each decision.
• Every person follows the rules in conversations Guardian cannot see, such as a showroom conversation, and never works around a block.

The rules in plain English

This is a general map, not a legal summary. Laws change, and courts and regulators reinterpret them. Check current requirements with counsel.

Calls and texts

Federal telemarketing law treats text messages as calls. Marketing calls and texts sent with automated technology, or calls using an artificial or prerecorded voice, generally require the customer's prior express written consent. Regulators have made clear that AI-generated voices count as artificial voices, so an AI voice call needs the same consent. Telephone solicitations are limited to daytime hours in the customer's local time, and the national Do Not Call registry and your store's own internal do-not-call list must be honored. Customers can revoke consent in any reasonable way, not only by typing one keyword.

Carrier and industry texting standards

Wireless carriers and the industry association that represents them publish messaging principles that business texters are expected to follow: clear consent, an identified sender, opt-out instructions, honoring STOP and similar words, responding to HELP, and avoiding prohibited content. Carriers also require business texting programs to be registered. Breaking these standards gets messages filtered or numbers blocked, which costs you every customer on that number, not just one.

State rules

Many states have their own telemarketing laws, sometimes called mini-TCPA laws. Some define automated systems more broadly than federal law, set narrower calling hours, restrict Sundays and holidays, cap how many messages a contact can receive on the same subject in a day, or give consumers the right to sue directly. A store that follows only the federal rule can still be out of compliance in the customer's state.

Email

Commercial email must identify the sender accurately, use honest subject lines, include the store's physical address and offer a working unsubscribe that is honored promptly.

Honest selling

Federal and state consumer protection law prohibits representations or omissions that are likely to mislead a reasonable customer about something that matters to their decision. For dealerships that means: advertised prices must be available, fees must be disclosed, add-ons must not be represented as required when they are optional, financing claims must be accurate, and vehicle condition must not be misrepresented. Used vehicles carry the federally required window disclosure. Tell customers about open recalls you know of.

Credit and lease disclosures

Truth in Lending rules govern credit disclosures, and Consumer Leasing rules govern lease disclosures. Both control what must appear in the contract and what additional terms must be disclosed when an advertisement mentions a payment, a down payment or other specific terms. In this playbook, every spoken payment comes with its full terms (chapter 11), and no text ever states a payment as fact.

Fair credit and privacy

Every customer gets the same credit process regardless of race, color, religion, national origin, sex, marital status, age or receipt of public assistance. Federal privacy and safeguards rules protect customer financial information at dealerships that arrange financing. Never request a Social Security number by text or email, and never accept document photos by ordinary text. Use secure upload links.

Call recording

Federal law and many states allow a call to be recorded with one party's consent. A number of states require every party to consent. Because you rarely know where the other person is standing, the Regen policy is simple: announce the recording at the start of every recorded call, in every state, every time.

AI disclosure

Some states require businesses to disclose when a customer is communicating with an automated bot in a sales context. Expect more rules like this. The Regen policy goes further than any one state, below.

Consent: get it, record it, respect its limits

Consent is not a box. It is a record of what the customer agreed to, how, when and in what words. The consent ledger stores the source, the page or call, the exact wording shown or said, and the time.

Three things to remember:

1. Consent has a scope. Consent to receive texts about a vehicle inquiry is not consent to receive AI voice marketing calls. Guardian checks the right kind of consent for each channel and purpose.
2. Consent belongs to a number, not a person. Numbers get reassigned. A record from three years ago may now reach a stranger. That is why reassigned-number screening exists.
3. Old leads may not have usable consent. Before Revive works an aged CRM record by text, Guardian checks that consent for that kind of message exists and has not been revoked. Records without it are worked by email where permitted, or not at all.

Capturing consent on an inbound call (human or Voice):

Would it be okay if we text you at this number about your vehicle search? Messages may be automated, and you can reply STOP any time to opt out.

Capturing consent in the showroom:

Can I text you the details and a quick video of the {{model}}? It'll come from our dealership number, and you can reply STOP whenever you like.

Record the answer in the customer's profile at once. A yes said out loud and never recorded does not exist.

Website and lead-form consent. Consent language on forms must be clear, next to the submit button, and not hidden in a link. Counsel approves the wording. Regen stores the exact version of the wording that each customer saw.

Opt-outs in any wording

Customers rarely type STOP in capitals. They write "please stop", "take me off your list", "quit texting me", "not interested, leave me alone", "lose my number", "unsubscribe", "remove me" or "wrong number". Guardian reads every inbound message for intent, not just keywords. An opt-out in any wording stops all marketing to that customer instantly, on every channel, and is recorded in the ledger.

The confirmation (one message, then silence):

You're unsubscribed from {{dealer_name}} marketing messages and won't receive any more. If you ever need us, call {{dealer_phone}}.

What never happens after an opt-out:

• "Are you sure?"
• One last offer.
• A call to "find out why".
• A new campaign that "forgot" the opt-out because it came from a different tool.

Ambiguous messages. "Not right now" or "I'll let you know" is not an opt-out; it is a timing answer, and the right response is respect plus a later check-in. "Stop messaging me so much" is an opt-out. When Guardian is unsure, it treats the message as an opt-out and flags it for a human, who may confirm with the customer only through a plain, single question if store policy allows. When in doubt, stop.

Wrong number. Apologize once, opt the number out, and mark the record so the contact is not retried.

Sorry about that, we'll remove this number right away. Have a good day.

Quiet hours and pacing

Regen's default proactive send window is 9 a.m. to 8 p.m. in the customer's local time. Guardian narrows it wherever a state rule is stricter, including states that restrict Sundays and holidays, and determines the customer's location from their address and their number. If they conflict, the stricter rule wins.

A reply to a message the customer just sent is a conversation, not a proactive send. How Guardian treats replies late at night is set by your counsel-approved policy. Proactive messages never go out in quiet hours; they wait for the window to open.

Guardian also paces sends: it caps how many proactive messages one contact can receive in a day and a week, at the dealer's setting or the state limit, whichever is lower. Two campaigns cannot stack on the same customer on the same morning.

Recording notices

Human, first sentence of a recorded call:

Thanks for calling {{dealer_name}}, this is {{rep_name}}. This call may be recorded for quality and training.

Voice, first sentence of every call:

Hi, this is the {{dealer_name}} AI assistant. This call is recorded so we can help you and improve our service. How can I help?

If a customer objects to recording, stop recording if the system allows and continue, or offer a call back from a person on an unrecorded line, according to store policy.

Disclosures in everyday selling

• Price. The advertised price is honored. Fees are named. Add-ons are optional and priced separately.
• Payment. Spoken with full terms: "[payment] a month for [term] months at [APR]% APR with [down] down, plus tax, title and fees, on approved credit." For leases, add the amount due at signing and the mileage allowance. Never texted as fact.
• Rate. Described as estimated until a lender decides. Never described as the lender's rate if it includes dealer participation.
• Approval. Nobody is approved until a lender says so. "Pre-qualified" describes an estimate, and is explained as one.
• Condition. Describe what the documented record shows: history report, inspection, reconditioning, open recalls. Never guess. If you do not know, say so and find out.

AI disclosure and the human promise

Agents never claim to be human and never sign a message with a person's name. The first message an agent sends in a thread identifies it as the dealership's virtual assistant in one short clause. Voice says it is an AI assistant in its first sentence.

Respond, first message to a new website lead:

Hi {{first_name}}, this is the {{dealer_name}} virtual assistant, working with {{rep_name}}. Thanks for asking about the {{vehicle}}. It's here and available to see. Would today or tomorrow work for a look? Reply STOP to opt out.

Any agent, when asked "Is this a real person?":

I'm the {{dealer_name}} AI assistant. I can help with most questions, and I can get {{rep_name}} for you right now if you'd prefer a person. Which would you like?

The human promise. The customer can always reach a human. Any request for a person goes to a person: immediately during open hours, and with a clear time for a call back after hours. No agent ever argues with that request or tries to keep the conversation.

What Guardian enforces

Guardian is the compliance super intelligence that sits in front of every outbound message and call, from every agent and every human using Regen:

• Consent check by channel and purpose against the consent ledger.
• Opt-out detection in any wording, with instant suppression across all marketing.
• Quiet hours by the customer's location, with the strictest applicable rule.
• Pacing limits per contact per day and week.
• Do-not-call list checks, reassigned-number screening and known-litigator screening.
• Recording notices on every recorded call.
• AI identity: first-message disclosure and truthful answers when asked.
• Content checks that block any text stating a price, payment, rate or approval as fact.
• A logged decision for every send, allowed or blocked, with the reason, exportable for audit.

What humans must still do

An agentic system can enforce rules across thousands of conversations, but it cannot replace judgment or accountability. People must still:

• Have counsel approve consent wording, quiet-hour policy, recording policy, disclosure language and retention.
• Configure the Compliance Center correctly and review it when laws or stores change.
• Record consent captured in person or on a call they placed themselves.
• Follow the disclosure rules in showroom and business office conversations that no system hears.
• Honor any request made in person: "Don't call me" said at the desk is as binding as a text.
• Never ask an agent, or another person, to work around a Guardian block.
• Review Guardian's blocked-send log weekly and fix the cause, not just the message.
• Handle complaints personally and escalate anything that looks like a legal issue to management and counsel.

When something goes wrong

Mistakes happen. What matters is the response.

1. Stop. Pause the cadence, campaign or agent behavior involved.
2. Preserve. Export the logs. Do not edit or delete records.
3. Tell. Notify the GM and the compliance owner the same day; involve counsel where appropriate.
4. Fix the cause. A missing consent check, a wrong time zone, an unclear form. Correct the configuration or the agent's training.
5. Make it right with the customer. Apologize plainly and confirm they will not be contacted again if that is what they want.

How Regen runs this

Guardian enforces your policy on every send, records every decision and stores every consent with its source, wording and time. Respond, Revive and Campaign never send a first message without passing Guardian, and their first messages to a new number carry the opt-out line. Converse and Voice disclose that they are AI and hand to a person on request. Coach scores calls and texts for recording notices, payment disclosures and opt-out handling. Insight reports opt-out rates by cadence and campaign so managers can see where relevance is slipping.

Compliance done by hand is slow and inconsistent: a person checking time zones, scrubbing lists and reading every reply for opt-out intent is an expensive way to still miss things. Guardian does it on every message, which is both safer and a real cost saving. And because aged leads are only worked where consent supports it, the leads Revive brings back to life come back cleanly.

What managers inspect

• The Guardian blocked-send log, weekly: what was blocked, why, and what was fixed.
• Opt-out rate by cadence and campaign; any above target is paused and rewritten.
• A sample of opt-out confirmations: one message, correct wording, no follow-up.
• Coach flags for missing recording notices or incomplete payment disclosures.
• Consent wording on every live form matches the counsel-approved version.
• Every request for a person in the last week reached a person on time.

Targets

• Strong store target: opt-out rate under 2% per cadence or campaign. Top 1% operator target: under 1%. Rationale: low opt-outs mean the messages are relevant and respectfully paced.
• Strong store target: agent quality rate of 90% (reviewed agent conversations handled correctly). Top 1% operator target: 97%+. Rationale: disclosure and hand-off rules are part of what "handled correctly" means.
• Strong store target: every opt-out honored instantly. Top 1% operator target: every opt-out honored instantly, with zero repeat contacts, verified weekly. Rationale: this is the one number where anything less than perfect is a failure.
• Strong store target: Guardian's blocked-send log reviewed every week. Top 1% operator target: reviewed weekly, with every repeated cause fixed at the source within 7 days. Rationale: blocks are symptoms; fixing causes is what keeps the channel healthy.