Encryption
Field-level AES-256 encryption for Social Security numbers and payment data, and TLS 1.2 or higher in transit.
Compliance and security
Compliance and security, built in
A collection partner's conduct reflects on your brand. We run our compliance and security programs with that in mind.
Compliance
Your customers are treated as your customers
Compliance is not a department at FCR. It is how every account is worked, every message is written and every collector is trained.
- Compliance Management SystemModeled on the CFPB examination framework: management oversight, a written program, complaint response and internal audits.
- Every law that appliesFDCPA, Regulation F, FCRA and Regulation V, TCPA, EFTA and Regulation E, SCRA, GLBA, the Rosenthal Act, CCPA/CPRA and state law.
- Tested collectorsSemi-annual FDCPA proficiency testing with an 85% minimum. Anyone below is retrained and retested before returning to the floor.
- Counsel-reviewed contentAll letters, emails, texts, scripts and AI prompts are reviewed by our Compliance Officer and approved annually by outside counsel.
- Complaints taken seriouslyEvery complaint is acknowledged within one business day.
- Licensed in 49 statesLicensing is professionally managed and kept current.
Security
Your data, protected
Our collection platform is SOC 2 Type 2 attested and PCI DSS compliant, and undergoes annual third-party penetration testing.
Access control
Multi-factor authentication on every system that touches consumer data.
Breach commitment
We commit to notifying clients within 48 hours of a confirmed breach affecting their data.
Penetration testing
Our collection platform is tested annually by an independent third party.
Trusted people
Every employee passes a background check before joining our team.
Monitored calls
Real-time call monitoring and monthly random audits keep every conversation accountable.
Responsible AI
Technology with people in charge
We use AI voice agents and AI-drafted replies to reach consumers faster and answer them sooner, under rules that keep people accountable.
Disclosed
Consumers are told when they are speaking with an automated agent.
Supervised
AI drafts replies and our agents approve them. AI voice agents hand off to a live agent with full context.
Bounded
AI works only inside approved scripts and the settlement limits you set.
Private
Enterprise AI only. Your data is never used to train models.
Questions from your compliance team?
We are glad to walk your compliance and security reviewers through our programs.