TCPA compliance software is a stack, not a product

Shop for TCPA compliance software and you will meet vendors implying one subscription makes outbound calling lawful. That product does not exist. What working teams run is a stack of four tool categories — consent management, DNC and litigator scrubbing, calling-hours enforcement, and dialer-level controls — each mapped to a specific federal rule, with real money on the line: $500 per violating call, up to $1,500 for willful or knowing conduct, under 47 U.S.C. § 227(b)(3), plus FTC penalties of up to $53,088 per Telemarketing Sales Rule violation as of 2026. This page maps the four categories, prices the pieces that publish prices, and is plain about where Enzo sits: a dialer with compliance-supporting features — not a scrubbing service, not a substitute for counsel.

A dialer is a tool — the dialer itself is compliant, but TCPA compliance depends on user behavior. Enzo does not scrub lists against the national or state DNC registries; run every list through a third-party scrubbing service first. Enzo provides campaign-level internal DNC (per-campaign only). Have a TCPA attorney review your program.

The four TCPA compliance solutions, mapped to the rules

Every tool in the category answers to a federal rule; the rest of the page walks each row of this map.

Consent management: records first, software second

For autodialed or artificial/prerecorded-voice telemarketing to cell phones — and prerecorded telemarketing to residential lines — federal law requires prior express written consent (PEWC): a written agreement, bearing the signature of the person called, clearly authorizing that marketing to a designated number, under 47 C.F.R. § 64.1200(f)(9). A live, manually dialed cold call needs no prior consent under federal law, subject to DNC and calling-hours rules.

Recent turbulence matters here, because much consent tooling was built for a rule that died. The FCC’s one-to-one consent rule never took effect: the Eleventh Circuit vacated it on January 24, 2025 in Insurance Marketing Coalition v. FCC, and the FCC deleted the language from its rules effective August 29, 2025 — so bundled multi-seller consent on lead-gen forms is again permissible under federal law, though state mini-TCPA laws may impose stricter consent requirements of their own.

What is fully in effect is the revocation rule (since April 11, 2025): consumers may revoke consent in any reasonable manner — replies like “stop,” “quit,” “end,” “revoke,” “opt out,” “cancel,” or “unsubscribe” count per se — and you must honor it within ten business days, under 47 C.F.R. § 64.1200(a)(10). The related “revoke-all” provision is waived until January 31, 2027 and under active FCC reconsideration — check FCC.gov before building anything on it.

Judge consent software on two abilities: producing the signed agreement for any number in seconds, and pushing a revocation to every active suppression list inside ten business days. A disciplined CRM field can pass that test; a platform that fails it is decoration.

DNC scrubbing and litigator screening: the companies that do what dialers don’t

Scrubbing is the piece most often mistaken for the whole category, and it lives outside the dialer. Three layers:

The National DNC Registry. Every seller needs its own subscription and Subscription Account Number (SAN) — and under 16 C.F.R. § 310.8 it is a violation to call any number in an area code you have not subscribed to, even numbers not on the registry. The safe harbor requires scrubbing against a registry version obtained no more than 31 days before any call, per 16 C.F.R. § 310.4(b)(3)(iv) and 47 C.F.R. § 64.1200(c)(2)(i)(D). State lists stack on top — Texas, Florida, and others sell their own quarterly files. Full mechanics and workflow: the DNC scrubber guide.

Litigator lists. Private commercial suppression files of numbers linked to serial TCPA plaintiffs and their attorneys. Be clear-eyed: no statute or FCC/FTC rule requires them, no safe harbor attaches, and screening against one does not make an unlawful call lawful — it only cuts the odds of dialing a professional plaintiff. Vendors and trade-offs: the TCPA litigator list page.

The Reassigned Numbers Database. The one scrub with its own FCC safe harbor: under 47 C.F.R. § 64.1200(m), a caller that queried the most recent RND update, got a “no” (not permanently disconnected) response, and called in reliance on it avoids liability for reaching a reassigned number. Entry pricing is modest — 1,000 queries for $8 a month under the schedule effective April 28, 2025.

What TCPA compliance companies charge

The published numbers, as of July 2026. Registry fees adjust every October 1, and vendor figures are the vendors’ own.

If a compliance vendor will not publish a number, budget for it being higher than you hoped — the same rule we apply to dialers.

Calling-hours enforcement: the cheapest TCPA tool is a schedule

Federal rules prohibit telephone solicitations before 8 a.m. or after 9 p.m., local time at the called party’s location, under 47 C.F.R. § 64.1200(c)(1) — the caller bears the burden of determining that local time, and there is no weekend or holiday exception. Area code is not location: a 212 number can ring in California, and a wave of quiet-hours lawsuits built on exactly that gap hit federal dockets in 2025.

The enforcement tool is not sophisticated software — it is campaign scheduling used with discipline. Enzo lets you set dialing windows per campaign; the operator’s job is to set them to the prospect’s plausible time zones, not the office clock. Several states set stricter hours than the federal window — verify each state you call into, and where you have not verified a state rule, run the federal default of 8 a.m. to 9 p.m.

Dialer-level controls: where Enzo fits — and where it doesn’t

Federal law is specific about the in-house piece. Under 47 C.F.R. § 64.1200(d), a caller must maintain a written do-not-call policy, train personnel on it, record requests at the time they are made, honor them within ten business days, and keep honoring each request for five years. That is workflow, and the dialer either supports it or fights it.

What Enzo brings to that workflow: campaign-level internal DNC — mark a contact DNC and they stay excluded from that campaign even if they reappear in another uploaded list. The mark is per-campaign only and does not carry across campaigns, so keep the master suppression file outside the dialer and re-apply it to every new campaign. Around it: campaign scheduling for hours discipline, CSV import and list management for clean scrubbed files, optional call recording, and whisper, barge, and dashboards so a manager can catch a bad habit before a plaintiff does. Pricing is published in full at /pricing.

What Enzo deliberately does not do: scrub against national or state registries, screen litigator databases, store consent records, or offer legal advice. One contested corner belongs to counsel: whether a predictive dialer is an autodialer depends on the court as of July 2026 — after Facebook v. Duguid, most federal courts hold that dialing stored lead lists falls outside the ATDS definition, but the Second Circuit has read it more broadly. The TCPA-compliant dialer page covers how dialer choice interacts with that question.

Assembling the stack: a working checklist

• Subscribe first. A SAN in the seller’s own name at telemarketing.donotcall.gov, covering every area code you dial.
• Scrub everything, on a calendar. National registry inside 31 days, state lists where they apply, litigator screen if you have chosen one — before any list touches a dialer.
• Keep consent retrievable. Signed PEWC records for any autodialed or prerecorded marketing, filed against the phone number, producible on demand.
• Route opt-outs to one master file. Into suppression within ten business days, held five years, re-applied to every new campaign — because campaign-level DNC marks do not travel.
• Schedule by the prospect’s clock. 8 a.m.–9 p.m. at the called party’s location, tighter where states are stricter or time zones are uncertain.
• Re-verify the moving parts. Registry fees adjust every October 1; the revoke-all waiver runs to January 31, 2027 and could change; penalty figures adjust most Januaries. Put the re-check on the scrub calendar.

The honest shape of the category: four tool layers, a handful of published prices, and a lot of process. Buy scrubbing and consent from companies built for them, run hours and internal DNC as discipline inside your dialer, and be suspicious of anything marketed as compliance in a box. To see campaign-level DNC, scheduling, and supervision inside a real calling workflow, book a free discovery call — 20 minutes, and if Enzo is not the fit, we will say so.

Not legal advice. This guide is general information for outbound calling teams, not legal advice. Rules change and apply differently by state, industry, and call type — confirm your program with qualified telemarketing compliance counsel.

Statutes and figures from 47 U.S.C. § 227, 47 C.F.R. § 64.1200, 16 C.F.R. Parts 310 and 1.98, the FTC’s published FY2026 fee schedule, the Federal Register, reassigned.us, and vendor-published pricing pages, as of July 2026. Company names are trademarks of their owners.