Truthful Marketing Standard
NexCall should market measurable capabilities such as answering calls, capturing details, supporting appointment requests, and sending summaries. It should not claim guaranteed revenue, guaranteed compliance, or guaranteed human-level accuracy without evidence.
Security Posture
The application uses practical security controls to protect sensitive setup details, validate inputs, reduce abuse, and limit unnecessary access. These controls support safer operations but do not equal third-party security certification.
Regulated Industries
Healthcare, legal, financial, insurance, debt, education, children's data, employment, housing, and other regulated use cases may require additional contracts, consent flows, vendor terms, audit trails, retention settings, and professional review before launch.
No Default Certification Claims
Unless a signed agreement specifically says otherwise, NexCall does not claim HIPAA compliance, SOC 2 certification, ISO certification, PCI compliance, GDPR compliance, CCPA compliance, legal practice compliance, medical practice compliance, or financial services compliance.
Client Review Required
Each client is responsible for approving business-specific scripts, approved answer content, handoff rules, recording notices, appointment rules, and customer-facing claims before the AI receptionist goes live.
Human-in-the-Loop
For sensitive or high-risk conversations, the recommended operating approach is automated intake with human follow-up. The assistant should capture context and route the conversation rather than pretending to be a licensed professional.