H
    Hestur
    Financial ServicesSOC 2 · TCPA · FDCPA · FCA · GDPR

    AI for Financial Services — Built for Regulators.

    Voice AI and workflow automation for insurance, banking, lending, and debt collection. TCPA, FDCPA, FCA, and GDPR compliance is a system property, not a training exercise.

    37%

    Higher renewal rate

    Insurance portfolios with AI-powered outreach vs. manual follow-up

    SOC 2

    Type II aligned

    Security controls documented, tested, and auditable

    70–80%

    IVR deflection

    Routine account inquiries resolved without a human agent

    100%

    Script compliance

    TCPA, FDCPA, and Mini Miranda adherence on every regulated call

    What we build

    Six financial workflows with compliance built in.

    Insurance Policy Renewal Automation

    Outbound AI agents contact policyholders 60, 30, and 7 days before renewal — answering coverage questions, processing renewal confirmations, and flagging lapse risk to human brokers. The 37% renewal lift comes from catching fence-sitters who never return calls but respond to a patient, knowledgeable AI at a convenient hour.

    Compliance

    State insurance code compliance, do-not-call list integration

    37% higher renewal rate

    Claims Intake & Status

    First notice of loss calls handled entirely by AI — FNOL data collected, claim number issued, next steps communicated. Claimants can call back for status updates at any hour and get real-time information from your claims management system without holding for an agent.

    Compliance

    Call recording for compliance. PII minimisation in transcript storage.

    65% of FNOL calls handled without human agent

    Debt Collection — FDCPA & Mini Miranda

    Outbound collection calls with mandatory Mini Miranda disclosure at call start, do-not-call list checking before every dial, payment arrangement proposals with supervisor escalation for exceptions, and full call recording with timestamp markers for FDCPA audit. The AI does not threaten, does not make false representations, and does not call outside permitted hours — enforced by the system, not by agent discipline.

    Compliance

    FDCPA compliance, TCPA consent verification, state-specific restrictions

    Zero FDCPA violations by design, not by training

    Fraud Detection During Calls

    Real-time fraud signals during inbound authentication: voice biometric comparison against enrolled profile, behavioural anomaly detection (unusual request sequence, atypical geography), and automatic escalation to human fraud specialist when risk score exceeds threshold. The caller is authenticated silently — no "press 1 to confirm" friction.

    Compliance

    Biometric data handling per state law (IL BIPA, TX, WA). Consent at enrollment.

    3× faster fraud escalation vs. agent-based detection

    Loan Status & Payment Processing

    Borrowers call for loan status, payment due date, payoff quotes, and payment processing. The AI authenticates via knowledge-based authentication or voice biometrics, reads live loan data from your LOS, and processes payments via your payment processor integration. Escalation to underwriting or loss mitigation when the borrower raises hardship.

    Compliance

    TRID disclosure requirements, payment confirmation regulatory language

    80% of routine loan inquiries resolved without agent

    Regulatory Disclosures & Confirmations

    Outbound calls to deliver required regulatory disclosures — adverse action notices, rate change notifications, product modifications — with confirmation capture and audit trail. Every call logged with disclosure text version, timestamp, caller acknowledgment, and agent name (the AI identifies itself as a virtual agent per applicable FTC guidance).

    Compliance

    FCRA adverse action, TILA change-in-terms, RESPA disclosures

    Auditable disclosure record on 100% of calls

    Regulatory coverage

    The frameworks we build for. Not aspirationally.

    Every constraint below is implemented as a system control — not a training guideline. If a rule says "do not call after 9 PM local time," the system will not place the call.

    TCPA

    US — all outbound calls & texts

    Prior express written consent verification, calling hours enforcement (8 AM – 9 PM local), STOP request processing within 10 business days, DNC list scrubbing before every dial batch

    FDCPA

    US — debt collection

    Mini Miranda at call start, prohibition on false representations, forbidden hours enforcement, validation notice trigger, harassment detection and call termination

    Mini Miranda

    US — debt collection calls

    Scripted disclosure read at start of every call: "This is an attempt to collect a debt and any information obtained will be used for that purpose." Timestamped in call log.

    FCA / MiFID II

    UK / EU — financial services

    AI agent disclosure at call start, call recording retention (5–7 years per regulation), suitability assessment language restrictions, complaint logging and escalation

    GDPR / CCPA

    EU / California — data subjects

    Lawful basis documentation for each call, data minimisation in transcript storage, right-to-erasure workflow for call records, data transfer agreements with sub-processors

    SOC 2 Type II

    Security / availability controls

    Encryption at rest and in transit, access control logging, vendor sub-processor agreements, incident response procedures, penetration test schedule

    Objections we hear from compliance teams

    "Regulators will eat us alive."

    We hear this exact phrase. Here is how we answer it.

    "The AI will violate TCPA and we'll face class action."

    TCPA controls are enforced at the infrastructure level — not by agent training. Calling hours are hard-coded. Consent records are verified before the dial is placed. DNC scrub happens at call time, not batch. STOP requests halt all outbound immediately. These are system invariants, not policies.

    "An AI can't handle the nuance of our regulatory requirements."

    We don't use AI for regulatory judgment — we use it for routing, data collection, and scripted execution. The compliance language is hard-coded. The LLM handles the conversation. Anything requiring compliance interpretation goes to a human.

    "Regulators will audit our AI calls and find violations."

    Every call generates an immutable audit record: full transcript, audio recording, disclosure text version confirmed, timestamp, caller identity verification result, and escalation decision. The audit trail is built for the examiner, not the engineer.

    The renewal opportunity

    37% higher renewal rate with proactive AI outreach.

    Most insurance policy lapse happens not from dissatisfaction but from inertia — the policyholder forgot, got busy, or didn't see the renewal notice. An AI agent that calls 60 days, 30 days, and 7 days before renewal — answers coverage questions patiently, available at 7 AM or 10 PM — converts fence-sitters who never return calls to brokers.

    The 37% lift is from an insurance client portfolio where we ran a 12-week parallel test: AI-outreach policies vs. existing manual follow-up. The AI didn't win because it was smarter. It won because it showed up consistently, at the right time, with the right patience.

    Ready to automate with compliance built in?

    30-minute call. We scope the use case, identify applicable regulatory frameworks, and confirm technical feasibility. Most financial services PoCs deploy in 3–4 weeks.