Compliance

Built on regulatory foundations

Every action, communication, and workflow in ResolveIQ is designed around Texas Finance Code Chapter 391 and aligned FDCPA practices. Compliance isn't a feature — it's the operating system.

Texas Compliance

Chapter 391 — Texas Finance Code

ResolveIQ operates exclusively within the bounds of Texas commercial collection law. Every system, workflow, and communication is designed around the requirements of the Texas Finance Code, Chapter 391.

Licensed Operations

All collection activities are conducted in strict compliance with Texas state licensing requirements. Operator credentials and agency registrations are maintained and audited regularly.

Communication Timing

Outbound communications are scheduled and executed within legally compliant time windows. The system prevents outreach outside permitted hours and respects all timing restrictions.

Written Notice Requirements

Required notices and disclosures are automatically generated and included in all initial debtor communications. Document versioning ensures every version meets current regulatory requirements.

Fee & Interest Limits

All assessed fees, interest calculations, and cost recovery claims are computed within statutory limits. The system prevents the generation of demands exceeding legally permitted amounts.

391 Texas F.C.

Texas Finance Code, Chapter 391

The Texas Finance Code Chapter 391 regulates the business of debt collection in Texas. It establishes licensing requirements, communication rules, documentation standards, and prohibited practices for commercial collection agencies operating within the state.

ResolveIQ's platform embeds Chapter 391 requirements into every automated workflow, communication template, and system rule — ensuring every action taken on an account meets current statutory obligations.

Federal Alignment

FDCPA-aligned practices for commercial context

While the FDCPA applies primarily to consumer debt, ResolveIQ applies its core principles to all commercial collection activities — providing a higher standard of conduct and legal defensibility.

No Misleading Representations

All communications — AI-drafted or operator-initiated — are reviewed to ensure no false statements of amount, legal status, or consequences of non-payment are included.

Accurate Identity Disclosure

Every communication clearly identifies ResolveIQ Recovery Group as the collecting entity. No obscured identities, third-party impersonation, or undisclosed agency relationships.

No Abusive Contact Practices

Frequency caps on outreach, no contacting debtors at inconvenient times, and automatic throttling prevent patterns that could constitute harassment under any applicable standard.

Validation & Verification

Before any collection activity begins, account ownership and obligation validity are verified. Disputes received are acknowledged, logged, and investigated before further contact.

Third-Party Contact Restrictions

Communication with debtor employers, attorneys, or third parties is conducted only within permitted circumstances and documented in the account audit trail.

Written Dispute Rights

All debtors receive clear written notice of their right to dispute obligations. Disputes trigger an automatic hold on collection activity pending investigation.

Audit Trail

Communication logging and audit trails

Every outbound communication is captured with full metadata — immutable, timestamped, and accessible for regulatory review or dispute resolution at any time.

Immutable audit log per account

Each account maintains a complete, tamper-evident record of every communication — including those generated by automated workflows. No communication is ever lost or overwritten.

The audit trail includes sender identity, recipient, timestamp, communication channel, content summary, and outcome status. Available for export in standard formats for legal proceedings or regulatory audits.

Recent Communication Log — Example Account
2026-06-08 09:12 Initial demand letter — Email Delivered
2026-06-10 14:45 Compliance review — Operator approval Approved
2026-06-10 15:02 Settlement offer — Email + SMS Delivered
2026-06-12 08:30 Reminder — Payment portal link Opened
2026-06-15 10:00 Dispute received — Email Investigation
Oversight Controls

AI oversight and operator controls

Automated systems enforce compliance rules, but operators retain full visibility and override authority at every step. AI assists — humans decide.

Automated Compliance Checks

Every communication template is validated against Chapter 391 requirements before activation. The system prevents dispatch of content that violates timing, disclosure, or fee rules — even if triggered by an automated workflow.

Human Approval Gates

AI-drafted communications above configurable thresholds or involving sensitive scenarios (attorney contact, dispute response, payment plan setup) require explicit operator approval before dispatch. No automated actions bypass human review.

Compliance Score Tracking

Account-level compliance scores reflect communication history, dispute rate, cease-communication flag status, and regulatory flag incidents. Scores are reviewed by compliance officers and factored into workflow prioritization.

Audit Log Access

Every operator action is logged with timestamp and attribution. Compliance and legal teams have read-only access to full account histories for regulatory review, dispute investigation, or litigation support.

AI Oversight Summary

  • AI-drafted communications are suggestions, not final actions — operator review required for all non-routine outbound
  • Compliance rules are enforced programmatically — the system will not dispatch non-compliant communications regardless of workflow configuration
  • AI flags accounts with elevated dispute risk for compliance review — not escalation to aggressive contact strategies
  • Cease-communication flags trigger immediate halt of all automated outreach — manual override only
  • Funding pathway eligibility checks include mandatory compliance review step — AI recommendation is one input, not the final decision
Dispute & Cease Protocols

Dispute tracking and cease-communication protocols

When a debtor disputes an obligation or requests communication cease, ResolveIQ's system responds immediately and completely — with full audit trail documentation of the action taken.

Dispute response workflow

Disputes received via any channel — email, debtor portal, written correspondence — are immediately logged, acknowledged, and routed for investigation. Collection activity pauses pending resolution.

1

Dispute received and acknowledged

System logs the dispute with full documentation. Operator receives notification. Automated outreach paused for this account.

2

Account placed on investigation hold

Account status updates to "Dispute Investigation." No further automated communications dispatched. Human review assigned.

3

Documentation verified

Original obligation documentation, contract terms, and prior payment history reviewed. Findings documented in account record.

4

Resolution communicated

Debtor and creditor notified of investigation outcome. If dispute is valid, account is closed or adjusted. If invalid, collection resumes with documented justification.

Cease Communication Protocol

When a debtor formally requests communication cease — via written notice, debtor portal submission, or attorney contact — the system enforces an immediate, unconditional halt on all outbound communications from that account.

  • All automated email/SMS sequences stop instantly
  • Workflow automations for that account suspended
  • Cease request logged with timestamp and source
  • Operator notified for legal review and next steps
  • Account flagged in compliance dashboard
Data Security

Documentation and data security standards

Account data, communication records, and financial information are protected by enterprise-grade security measures and access controls — aligned with financial services data handling standards.

Encrypted Data Storage

All account data, debtor information, and financial records are encrypted at rest using AES-256 encryption. Database credentials and API keys are managed through environment variables — never in source code or configuration files.

Role-Based Access Controls

System access is scoped to role — admin, collector, client, debtor. Each role has explicit read/write permissions on the minimum data required for their function. Access logs are maintained for all data interactions.

Audit-Ready Documentation

Every system action is logged with timestamp, operator attribution, and outcome. Exportable audit trails support regulatory reviews, litigation holds, and compliance audits — without manual record reconstruction.

Payment Card Security (PCI DSS)

Payment processing is handled exclusively through Stripe — a PCI DSS Level 1 compliant payment processor. ResolveIQ does not store, process, or transmit raw card data. No card numbers, expiry dates, or CVV codes are retained in our systems.

Secure Debtor Portal

Debtor-facing payment portal sessions are authenticated and encrypted. Session tokens expire after inactivity. Payment links are single-use or time-limited. No debtor data is exposed in URLs or logs.

Data Retention & Disposal

Account records are retained per legal requirements and deleted according to documented retention schedules when obligations are resolved. Data disposal is logged and verified — no orphaned records.

Compliance is the foundation

Every feature in ResolveIQ is designed to operate within the law — not as a workaround, not as an afterthought. That's how we protect you and your clients.