Compliance
One compliance boundary, not four.
Voice, SMS, documents and AI inside a single platform — so there is one boundary to review, one vendor to assess and one set of controls to evidence.
Standards
SOC 2
EcoLink operates to SOC 2 controls, and those controls have been reviewed by independent SOC 2 compliance assessors engaged by agencies evaluating us.
HIPAA
Where HIPAA-regulated data is in scope, under a signed Business Associate Agreement.
PCI-DSS
Where cardholder data is in scope, under a signed PCI addendum.
We describe this as compliance, not certification — and where a certification belongs to a partner, we name the partner rather than borrowing it. Phone service runs on RingCentral’s platform, which carries RingCentral’s own independently audited certifications, published in the RingCentral Trust Center.
In practice
TCPA-aware messaging. Consent handling built into how texts are sent, not bolted on afterward.
Two-party recording compliance. Recording rules applied by default rather than left to the agent.
PII and PHI redaction in AI transcripts, automatically.
E911 location compliance on the phone service.
Encrypted calls and video, single sign-on, role-based access.
Documentation
Calls and notes stored against the client account, so a compliance review reads the record rather than reconstructing it. That is the difference between an audit that takes an afternoon and one that takes a week.