Certifications & Compliance

HIPAA & TCPA Compliant Text Messaging Standards

Our compliance documentation is built to answer the questions IT security teams at healthcare, education, and government organizations ask. Speed up your procurement review with ready-to-share security documentation.

TCPA Compliance for Text Messaging

The Telephone Consumer Protection Act (TCPA) governs all commercial text messaging. FRANSiS includes built-in TCPA compliance tools: opt-in/opt-out management, consent tracking,  message frequency controls, quiet hours enforcement, and complete audit trails. Stay compliant without manual processes.

Certifications Icon
Security Documentation

Detailed security documentation is available for your IT team's review during procurement.

Check Icon
Available
Certifications Icon
HIPAA Compliant

BAA provided within 48 hours — no legal delays blocking your implementation.

Check Icon
Compliant
Certifications Icon
FERPA Compliant

Built-in student data protections satisfy district and state compliance requirements.

Check Icon
Compliant
Certifications Icon
Access Controls

Role-based permissions, audit logging, and least-privilege access for every user.

Check Icon
Included
Security Features

The Security Infrastructure Your Compliance Team Requires SMS for nonprofits

Comprehensive security controls designed to protect your most sensitive data and satisfy the strictest regulatory requirements, including HIPAA and TCPA.

Feature Card Icon
End-to-End Encryption

All data encrypted in transit and at rest using AES-256 encryption standards.

Feature Check
TLS 1.3 for data in transit
Feature Check
AES-256 for data at rest
Feature Check
Regular key rotation
Feature Card Icon
Access Controls

Role-based access control with multi-factor authentication and SSO support.

Feature Check
Multi-factor authentication
Feature Check
SSO integration (SAML, OAuth)
Feature Check
Granular permissions
Feature Card Icon
Audit Logging

Comprehensive logging and monitoring of all system activities and data access.

Feature Check
Complete audit trails
Feature Check
Real-time monitoring
Feature Check
Exportable logs
Feature Card Icon
Network Security

Multiple layers of network protection including DDoS mitigation and firewalls.

Feature Check
DDoS protection
Feature Check
Web application firewall
Feature Check
Network segmentation
Feature Card Icon
Regular Testing

Continuous security testing including penetration tests and vulnerability scans.

Feature Check
Annual penetration testing
Feature Check
Automated vulnerability scans
Feature Check
Bug bounty program
Feature Card Icon
Disaster Recovery

Comprehensive backup and disaster recovery built for high availability.

Feature Check
Daily automated backups
Feature Check
High-availability infrastructure
Feature Check
Geo-redundant storage
Buyer checklist

What Security Reviewers Ask About a Texting Vendor

Procurement and IT security teams tend to ask the same questions about any platform that handles sensitive conversations. Here are straight answers.

Will you sign a Business Associate Agreement?

Yes. A BAA is available for healthcare organizations and school-based health programs that handle protected health information.

How is our data protected?

Data is encrypted in transit with TLS 1.3 and at rest with AES-256. Access is role-based with multi-factor authentication and SSO support, and system activity is captured in exportable audit logs.

How do you handle texting consent?

Built-in TCPA tools cover opt-in and opt-out management, consent tracking, message frequency controls, and quiet-hours enforcement, with a complete audit trail.

Who owns the data?

You do. We never sell or share your information with third parties, and complete data deletion is available on request. See our Privacy Policy and Terms of Service.

Evaluating HIPAA texting options? Compare HIPAA compliant SMS platforms side by side, or talk with our team about your security review.

Data Protection

Complete Data Protection, Security & Privacy Rights government SMS

Six layers of protection from enterprise data centers to individual privacy rights- designed to satisfy healthcare, education, and government security and compliance requirements.

Protection Header Icon
Infrastructure Security
Data Protection Icon
Secure Data Centers

Enterprise data centers with physical security, redundant power, and climate control.

Data Protection Icon
Network Isolation

Isolated networks and VPCs with strict access controls and monitoring.

Data Protection Icon
Automated Updates

Regular security patches and updates automatically with zero downtime.

Protection Header Icon
Data Privacy
Data Protection Icon
Data Ownership

You own your data. We never sell or share your information with third parties.

Data Protection Icon
Data Residency

Control where your data is stored with multiple geographic region options.

Data Protection Icon
Right to Delete

Complete data deletion capabilities with verification upon request.

Start Your Security Review Today

Schedule a technical deep dive with our security team or download comprehensive documentation instantly.

Trust Indicator Icon
Encryption, Access Controls & Audit Logging | Protecting Sensitive Data for Healthcare, Education & Government