Compliance Vault

Verbatim disclaimers, consent language, and legal checklists — the armor for every launch. Everything here requires review by a licensed attorney in your state before use. Not legal advice.

Universal Marketing Compliance

TCPA Consent Language (all opt-in forms — separate UNCHECKED checkbox)

By checking this box, I consent to receive marketing calls and text messages from [Company Name] at the phone number provided, including messages sent via automated dialing systems. Consent is not a condition of purchase. Message and data rates may apply. Reply STOP to opt out. Reply HELP for assistance. View our Privacy Policy and Terms of Service.

IMPLEMENTATION RULES:
→ Never pre-check the box
→ Store consent timestamp, IP address, and form version
→ Use a consent verification platform (TrustedForm, ActiveProspect)
→ Honor opt-outs within 10 business days
→ No texts before 8 AM or after 9 PM recipient's local time
→ Violations: $500–$1,500 per text, no class action cap

CAN-SPAM Email Footer (every marketing email)

[Company Name] | [Physical Street Address] | [City, State, ZIP]
You're receiving this email because you opted in at [source].
To unsubscribe, click here: [unsubscribe link]

REQUIREMENTS PER EMAIL:
→ Accurate FROM name and email address
→ Honest subject line — no deception
→ Physical mailing address visible
→ Working unsubscribe honored within 10 business days
→ No harvested addresses

FTC Testimonial Disclaimer (below every testimonial/case study)

Results may vary. This client's results depended on their specific situation. Your results will vary based on your individual circumstances. [If compensated/affiliated: This testimonial was provided by a compensated client/partner.]

FTC ENDORSEMENT RULES (updated 2024):
→ Non-typical results MUST be disclosed as non-typical
→ Paid/incentivized reviews MUST disclose compensation
→ Employee/partner testimonials MUST disclose the relationship
→ AI-generated testimonials/faces: NEVER acceptable
→ Systematic suppression of negative reviews violates CRFA
→ FTC Review Rule (effective Oct 21, 2024): fake reviews = civil penalties per violation

FTC Affiliate Disclosures (3 formats)

PAGE (above the fold):
Disclosure: [Your Name/Company] earns a commission if you purchase through links on this page. This doesn't affect our analysis. We only recommend services we believe are legitimate and compliant.

SOCIAL POST:
#ad — I partnered with [Company] to share their [service]. As always, all opinions are my own. [Link to disclosure policy]

EMAIL:
Note: This email contains affiliate links. I may earn a commission if you sign up through my link.

Data Privacy Notice (GLBA businesses — tax & credit)

Your information is protected under the Gramm-Leach-Bliley Act and our Written Information Security Program (WISP). We do not sell your personal information. See our Privacy Policy for complete details.

GLBA SAFEGUARDS RULE REQUIREMENTS (documented, not just implemented):
→ Written Information Security Program (WISP)
→ Designated security coordinator
→ Annual risk assessment
→ Breach notification procedures
→ Encryption in transit and at rest
→ MFA on all systems with client data
→ Vendor agreements with security requirements