Compliance
Loyalty points are money, and a member services line is where they are most exposed. Every statement below is one we can evidence. Powered by CX Assist, Loyalty Assist carries the platform's full compliance stack.
- Card payments to PCI DSS Level 1
- Paid tier upgrades, points purchase and card fees are taken inside the member's call. Card details are never stored and never passed to the AI.
- Hosted in the United Kingdom
- The AI and all platform infrastructure are hosted in the United Kingdom. Member data processed during a call stays in the United Kingdom.
- Information security
- SOC 2 Type II and ISO 27001:2022. Attestations and certificates are available to your security and procurement teams under NDA.
- Our own carrier position
- Calls are carried on our own telephony infrastructure, giving us direct responsibility for caller identity integrity and UK originating-call compliance.
- Outbound within consent
- Outbound contact runs only within the consent base your programme holds, screened against TPS and CTPS before dialling. Opt-outs are written back to your platform during the call.
- UK GDPR and POPIA
- We act as processor under your instructions, with a data processing agreement in place before any member data is accessed.