top of page
HighPath Logo_3.1_Wh.png

Consent & Compliance Policy

SMS & VoIP Overview
Powered by Genversation.ai
This document provides a clear overview of how Genversation.ai manages SMS and VoIP communications in accordance with federal regulations, including the Telephone Consumer Protection Act (TCPA), the Children’s Online Privacy Protection Act (COPPA), and the Health Insurance Portability and Accountability Act (HIPAA). It is designed to support customer and partner reviews during procurement, security assessments, and implementation planning.

Genversation.ai powers branded, compliant conversational services across verticals, including:

  • HighPath.ai (Education & Career Planning)

  • PulseGen.ai (Healthcare & Mental Health)

  • Additional partner programs in development
     

All communications are structured, goal-driven, non-promotional, and sent only to users who have opted in.

 
TCPA Compliance Overview
All SMS and VoIP communications through Genversation.ai are classified as transactional or informational per 47 CFR § 64.1200(a)(1)(iii) and FCC Report and Order FCC 03-153 (paras. 113–117).

To comply with TCPA, Genversation.ai:

  • Collects consent explicitly at the time of user enrollment

  • Does not send promotional or telemarketing content

  • Enables users to opt out at any time by replying STOP

  • Logs and timestamps all opt-ins and opt-outs

  • Follows local time restrictions for message delivery
     

Twilio Products Used

  • Twilio Verify: Secure opt-in and user authentication

  • Twilio Messaging Services: Sender ID and routing management

  • Twilio Consent API (Beta): Auditable opt-in flows

  • A2P 10DLC Registration: All messaging is registered with U.S. carriers for compliance
     

 
HIPAA Compliance for Healthcare Communications
In healthcare environments like PulseGen.ai, Genversation.ai aligns with HIPAA guidelines when handling protected health information (PHI):

​

  • Members are notified of SMS/VoIP risks and give explicit consent

  • Messages include minimum necessary data and exclude sensitive diagnoses

  • All infrastructure is hosted in HIPAA-eligible AWS environments

  • Business Associate Agreements (BAAs) are maintained with Twilio and covered entities

  • All access to messages is role-restricted and auditable
     

 
COPPA Compliance
Genversation.ai does not knowingly collect personal information from children under 13 without verified parental consent.


Key safeguards include:

  • Age screening during onboarding

  • Service is paused for users under 13 until consent is provided

  • Minimal data is collected from minors

  • Privacy policy is written in plain, parent-accessible language

  • For K–12 partners or youth-facing programs, we offer COPPA-compliant workflows.

 
Consent-Based Messaging
Only opted-in Members receive communications through Genversation.ai platforms. Consent includes:

  • Description of message purpose and frequency

  • Clear language that participation is voluntary

  • Immediate opt-out functionality via STOP

  • No messages are sent to individuals who have not enrolled and consented.

 
Protecting PII and PHI in AI Workflows
Genversation.ai includes a proprietary (Patent Pending) privacy layer called GenGuard℠, designed to protect user privacy in AI-driven experiences.


GenGuard℠ Functionality

  • Automatically detects and redacts PII and PHI before sending data to large language models (LLMs)

  • Enforces role-based rules to limit data visibility

  • Ensures only de-identified or anonymized data is passed to AI systems

  • Maintains an auditable trail of all LLM interactions

  • This system enables the safe and scalable use of AI in regulated industries.

 
Data Security and Hosting
All Genversation.ai services are hosted on Amazon Web Services (AWS) using secure, scalable infrastructure.

  • TLS 1.2+ encryption for data in transit

  • Role-Based Access Control (RBAC)

  • SOC 2, ISO/IEC 27001, and GDPR compliance (via AWS and Twilio)

  • Daily backups, audit trails, and breach monitoring
     

 For Customer Security Teams
Upon request, Genversation.ai can provide:

  • Architecture diagrams

  • Consent flow documentation

  • A2P registration and Twilio attestation

  • Security policies and supporting materials
     

For further inquiries or documentation, contact:
support@genversation.ai

bottom of page