BUILT FOR THE US ARM MARKET
DTI DebtTechIndex

Ranked on published facts

Top 10 Compliance: 9 products ranked

By Kai Greenspan, Founding Editor · Last updated: October 14, 2026

This list ranks what each vendor states on its own public pages against 8 core facts for this shelf, in the published order below, then seven evidence pages. It measures disclosure, not quality: nothing here says a product works, a control operates, or a customer is satisfied. Only the top ten positions are listed; equal counts share a position, and every vendor tied for tenth is included. Positions labeled Sponsored, where present, are paid for through a vendor membership, sit apart from the list, and never change it. Apply communication, consent, licensing and regulatory controls before and after contact.

Facts last read: October 14, 2026. Method: ranking policy.

Compare across vendors: published prices (1 of 13 on this shelf publish one)

The 8 core facts for this shelf, in order

  1. 1Enforces Regulation F frequency and time-window rules before contact. A yes needs the rule named as enforced. 12 CFR 1006.14(b); 1006.6(b); tenders: compliance 5 of 14.
  2. 2Manages TCPA consent and revocation. A yes needs consent capture and revocation stated. 47 CFR 64.1200.
  3. 3Runs complaint management, including CFPB complaint handling. A yes needs complaint handling stated. buyer: 4 of 14 tenders; survey: 29% of agencies dispute over 4% of accounts.
  4. 4Integrates with named collection systems or dialers. A yes needs at least one named. buyer: integrations 8 of 14 tenders.
  5. 5Publishes prices with figures, or a fee structure with figures. A yes needs a figure on the vendor's own site. buyer: 14 of 14 tenders price the bid; cost control the top survey concern.
  6. 6Names a security audit or certification it holds: SOC 2 Type II, PCI DSS, ISO 27001 or HIPAA. A yes needs the audit or certification named in text on the vendor's own site. buyer: 10 of 14 tenders; data security the second survey concern.
  7. 7Publishes API documentation or states data export. A yes needs a public developer page, or export stated as a product function. buyer: 5 of 14 tenders, three reviews; kept on a shelf only where the reading finds at least one vendor stating it.
  8. 8Names a US collection agency customer. A yes needs a customer named with its US location or its collections business stated. ruled 8 September: named US customer in this market, last.

Order matters: two vendors with one fact each are ordered by whose fact comes first here. Besides the core facts, each vendor is checked for seven evidence pages: a product page naming the product; a security page naming a certification in text; public API documentation; an uptime or service level figure; prices with figures; a page naming a US customer in this market; a page naming its integrations one by one.

The list, ranked

  1. 1 Gryphon ONE for Collections by Gryphon.ai 5/8core facts on its own site 3/7evidence pages found
    Core facts Gryphon ONE for Collections states on its own site
    Enforces Regulation F frequency and time-window rules before contactManages TCPA consent and revocationRuns complaint management, including CFPB complaint handlingIntegrates with named collection systems or dialersPublishes prices with figures, or a fee structure with figuresNames a security audit or certification it holds: SOC 2 Type II, PCI DSS, ISO 27001 or HIPAAPublishes API documentation or states data exportNames a US collection agency customer
    StatedStatedNot statedStatedNot statedStatedStatedNot stated

    Enforces Regulation F frequency and time-window rules before contact. Compliance monitoring Automatically block infringing communications based on call frequency, legal calling hours, curfews, and wireless restrictions to maintain FDCPA compliance. (gryphon.ai, read October 14, 2026)

    Manages TCPA consent and revocation. Manage customer preferences, opt-outs, and established business relationships (EBRs) to ensure compliant outreach. (gryphon.ai, read October 14, 2026)

    Integrates with named collection systems or dialers. Genesys Cloud, Salesforce, Pega, Google Cloud, and NiCE (gryphon.ai, read October 14, 2026)

    Names a security audit or certification it holds: SOC 2 Type II, PCI DSS, ISO 27001 or HIPAA. Compliance ISO/IEC 27001:2022 SOC 2 Type 1 (trust.gryphon.ai, read October 14, 2026)

    Publishes API documentation or states data export. GRC System Alignment Export control results, findings, and evidence into enterprise GRC platforms to support compliance audit and risk workflows. (gryphon.ai, read October 14, 2026)

    Not publicly stated on the pages readruns complaint management, including CFPB complaint handling; publishes prices with figures, or a fee structure with figures; names a US collection agency customer.

    Evidence pages founda product page naming the product; a security page naming a certification in text; a page naming its integrations one by one.

  2. 2 Sedric by Sedric 3/8core facts on its own site 4/7evidence pages found
    Core facts Sedric states on its own site
    Enforces Regulation F frequency and time-window rules before contactManages TCPA consent and revocationRuns complaint management, including CFPB complaint handlingIntegrates with named collection systems or dialersPublishes prices with figures, or a fee structure with figuresNames a security audit or certification it holds: SOC 2 Type II, PCI DSS, ISO 27001 or HIPAAPublishes API documentation or states data exportNames a US collection agency customer
    Not statedNot statedNot statedStatedNot statedStatedNot statedStated

    Integrates with named collection systems or dialers. Open API integration with Five9, NICE, Genesys, Aspect, and most CRM platforms is supported. (www.sedric.ai, read October 14, 2026)

    Names a security audit or certification it holds: SOC 2 Type II, PCI DSS, ISO 27001 or HIPAA. SOC 2 Type II. Explainable AI. Built for regulated finance (www.sedric.ai, read October 14, 2026)

    Names a US collection agency customer. LJ Ross Associates ~9s Post-call wrap-up, below the 13-sec target (www.sedric.ai, read October 14, 2026)

    Not publicly stated on the pages readenforces Regulation F frequency and time-window rules before contact; manages TCPA consent and revocation; runs complaint management, including CFPB complaint handling; publishes prices with figures, or a fee structure with figures; publishes API documentation or states data export.

    Evidence pages founda product page naming the product; a security page naming a certification in text; a page naming a US customer in this market; a page naming its integrations one by one.

  3. 3 MyPreferences by PossibleNOW 2/8core facts on its own site 2/7evidence pages found
    Core facts MyPreferences states on its own site
    Enforces Regulation F frequency and time-window rules before contactManages TCPA consent and revocationRuns complaint management, including CFPB complaint handlingIntegrates with named collection systems or dialersPublishes prices with figures, or a fee structure with figuresNames a security audit or certification it holds: SOC 2 Type II, PCI DSS, ISO 27001 or HIPAAPublishes API documentation or states data exportNames a US collection agency customer
    Not statedStatedNot statedNot statedNot statedStatedNot statedNot stated

    Manages TCPA consent and revocation. Revocation of consent to automatically opt-out of hierarchical consents (www.possiblenow.com, read October 14, 2026)

    Names a security audit or certification it holds: SOC 2 Type II, PCI DSS, ISO 27001 or HIPAA. Our successful completion of a SOC 2 Type II examination demonstrates that our company and our products have clear guidelines and proven procedures for managing customer data as it relates to security, availability, and confidentiality. (www.possiblenow.com, read October 14, 2026)

    Not publicly stated on the pages readenforces Regulation F frequency and time-window rules before contact; runs complaint management, including CFPB complaint handling; integrates with named collection systems or dialers; publishes prices with figures, or a fee structure with figures; publishes API documentation or states data export; names a US collection agency customer.

    Evidence pages founda product page naming the product; a security page naming a certification in text.

  4. 4 IPACS® by Provana 2/8core facts on its own site 1/7evidence pages found
    Core facts IPACS® states on its own site
    Enforces Regulation F frequency and time-window rules before contactManages TCPA consent and revocationRuns complaint management, including CFPB complaint handlingIntegrates with named collection systems or dialersPublishes prices with figures, or a fee structure with figuresNames a security audit or certification it holds: SOC 2 Type II, PCI DSS, ISO 27001 or HIPAAPublishes API documentation or states data exportNames a US collection agency customer
    Not statedNot statedStatedStatedNot statedNot statedNot statedNot stated

    Runs complaint management, including CFPB complaint handling. Complaints Management Centralize all complaints and track corrective actions (provana.com, read October 7, 2026)

    Integrates with named collection systems or dialers. TCN Provana works together with TCN to supplement each other’s Contact Center offerings, and integrate Provana’s advanced and fully managed speech analytics solution. (provana.com, read October 7, 2026)

    Not publicly stated on the pages readenforces Regulation F frequency and time-window rules before contact; manages TCPA consent and revocation; publishes prices with figures, or a fee structure with figures; names a security audit or certification it holds: SOC 2 Type II, PCI DSS, ISO 27001 or HIPAA; publishes API documentation or states data export; names a US collection agency customer.

    Evidence pages founda page naming its integrations one by one.

  5. 5 The Blacklist Alliance by The Blacklist Alliance 2/8core facts on its own site 2/7evidence pages found
    Core facts The Blacklist Alliance states on its own site
    Enforces Regulation F frequency and time-window rules before contactManages TCPA consent and revocationRuns complaint management, including CFPB complaint handlingIntegrates with named collection systems or dialersPublishes prices with figures, or a fee structure with figuresNames a security audit or certification it holds: SOC 2 Type II, PCI DSS, ISO 27001 or HIPAAPublishes API documentation or states data exportNames a US collection agency customer
    Not statedNot statedNot statedStatedStatedNot statedNot statedNot stated

    Integrates with named collection systems or dialers. Compatible with industry leading software Convoso Google Cloud Plura AI (blacklistalliance.com, read October 14, 2026)

    Publishes prices with figures, or a fee structure with figures. $850 /month (blacklistalliance.com, read October 14, 2026)

    Not publicly stated on the pages readenforces Regulation F frequency and time-window rules before contact; manages TCPA consent and revocation; runs complaint management, including CFPB complaint handling; names a security audit or certification it holds: SOC 2 Type II, PCI DSS, ISO 27001 or HIPAA; publishes API documentation or states data export; names a US collection agency customer.

    Evidence pages foundprices with figures; a page naming its integrations one by one.

  6. 6 Servicing Intelligence Platform by NeuAnalytics 2/8core facts on its own site 1/7evidence pages found
    Core facts Servicing Intelligence Platform states on its own site
    Enforces Regulation F frequency and time-window rules before contactManages TCPA consent and revocationRuns complaint management, including CFPB complaint handlingIntegrates with named collection systems or dialersPublishes prices with figures, or a fee structure with figuresNames a security audit or certification it holds: SOC 2 Type II, PCI DSS, ISO 27001 or HIPAAPublishes API documentation or states data exportNames a US collection agency customer
    Not statedNot statedNot statedNot statedNot statedStatedStatedNot stated

    Names a security audit or certification it holds: SOC 2 Type II, PCI DSS, ISO 27001 or HIPAA. NeuAnalytics holds SOC 1 Type II, SOC 2 Type II, ISO 27001, ISO 27002, and PCI DSS 4.0 certifications. (www.neuanalytics.com, read October 14, 2026)

    Publishes API documentation or states data export. Distribute on your terms: scheduled SFTP drops, direct API access, or one-off pulls through the GUI. (www.neuanalytics.com, read October 14, 2026)

    Not publicly stated on the pages readenforces Regulation F frequency and time-window rules before contact; manages TCPA consent and revocation; runs complaint management, including CFPB complaint handling; integrates with named collection systems or dialers; publishes prices with figures, or a fee structure with figures; names a US collection agency customer.

    Evidence pages founda security page naming a certification in text.

  7. 7 DNC.com by Contact Center Compliance 1/8core facts on its own site 2/7evidence pages found
    Core facts DNC.com states on its own site
    Enforces Regulation F frequency and time-window rules before contactManages TCPA consent and revocationRuns complaint management, including CFPB complaint handlingIntegrates with named collection systems or dialersPublishes prices with figures, or a fee structure with figuresNames a security audit or certification it holds: SOC 2 Type II, PCI DSS, ISO 27001 or HIPAAPublishes API documentation or states data exportNames a US collection agency customer
    Not statedNot statedNot statedStatedNot statedNot statedNot statedNot stated

    Integrates with named collection systems or dialers. Seamless integrations We also provide real-time updates and enterprise-level integrations with platforms you’re already using like Salesforce, Five9, Genesys, ActiveProspect, VICIDial, and Mitel. (www.dnc.com, read October 14, 2026)

    Not publicly stated on the pages readenforces Regulation F frequency and time-window rules before contact; manages TCPA consent and revocation; runs complaint management, including CFPB complaint handling; publishes prices with figures, or a fee structure with figures; names a security audit or certification it holds: SOC 2 Type II, PCI DSS, ISO 27001 or HIPAA; publishes API documentation or states data export; names a US collection agency customer.

    Evidence pages founda product page naming the product; a page naming its integrations one by one.

  8. =8 dPlat by DebtNext Software 1/8core facts on its own site 1/7evidence pages found
    Core facts dPlat states on its own site
    Enforces Regulation F frequency and time-window rules before contactManages TCPA consent and revocationRuns complaint management, including CFPB complaint handlingIntegrates with named collection systems or dialersPublishes prices with figures, or a fee structure with figuresNames a security audit or certification it holds: SOC 2 Type II, PCI DSS, ISO 27001 or HIPAAPublishes API documentation or states data exportNames a US collection agency customer
    Not statedNot statedNot statedNot statedNot statedStatedNot statedNot stated

    Names a security audit or certification it holds: SOC 2 Type II, PCI DSS, ISO 27001 or HIPAA. DebtNext Software is proud to announce that we have successfully achieved SOC 2 Type II attestation, verified by our third-party auditing firm (debtnext.com, read September 30, 2026)

    Joint positionShares this position: equal on every count.

    Not publicly stated on the pages readenforces Regulation F frequency and time-window rules before contact; manages TCPA consent and revocation; runs complaint management, including CFPB complaint handling; integrates with named collection systems or dialers; publishes prices with figures, or a fee structure with figures; publishes API documentation or states data export; names a US collection agency customer.

    Evidence pages founda security page naming a certification in text.

  9. =8 Numeracle by Numeracle 1/8core facts on its own site 1/7evidence pages found
    Core facts Numeracle states on its own site
    Enforces Regulation F frequency and time-window rules before contactManages TCPA consent and revocationRuns complaint management, including CFPB complaint handlingIntegrates with named collection systems or dialersPublishes prices with figures, or a fee structure with figuresNames a security audit or certification it holds: SOC 2 Type II, PCI DSS, ISO 27001 or HIPAAPublishes API documentation or states data exportNames a US collection agency customer
    Not statedNot statedNot statedNot statedNot statedStatedNot statedNot stated

    Names a security audit or certification it holds: SOC 2 Type II, PCI DSS, ISO 27001 or HIPAA. SOC 2 Type I Certified ISO 27001:2022 (www.numeracle.com, read September 30, 2026)

    Joint positionShares this position: equal on every count.

    Not publicly stated on the pages readenforces Regulation F frequency and time-window rules before contact; manages TCPA consent and revocation; runs complaint management, including CFPB complaint handling; integrates with named collection systems or dialers; publishes prices with figures, or a fee structure with figures; publishes API documentation or states data export; names a US collection agency customer.

    Evidence pages founda security page naming a certification in text.

The numbers are positions computed from the facts above at build time, not scores. A position marked = is shared. These positions measure what each vendor publishes on its own website; they are not a judgment of quality. Full category page: Compliance.

Compared on the record fields

Every product in the list above is compared on the record fields. This table is a comparison, not the ranked list.

Product Vendor US-market grade Tier Pricing Last checked
Gryphon ONE for Collections Gryphon.ai Confirmed or official US-relevant page A Not publicly stated unless the cited page says otherwise October 12, 2026
Sedric Sedric Confirmed or official US-relevant page A Not publicly stated unless the cited page says otherwise October 12, 2026
MyPreferences PossibleNOW Confirmed or official US-relevant page A Not publicly stated unless the cited page says otherwise October 12, 2026
IPACS® Provana Confirmed B Not publicly stated October 12, 2026
The Blacklist Alliance The Blacklist Alliance Confirmed B Published: Standard subscription $850 a month, scrubs beyond 250,000 billed at $0.01 each, on the official packages page October 12, 2026
Servicing Intelligence Platform NeuAnalytics Confirmed B Not publicly stated October 12, 2026
DNC.com Contact Center Compliance Confirmed or official US-relevant page A Not publicly stated unless the cited page says otherwise October 12, 2026
dPlat DebtNext Software Confirmed B Not publicly stated October 12, 2026
Numeracle Numeracle Confirmed B Not publicly stated October 12, 2026

Disclosure

Every vendor is listed free. DebtTechIndex earns money from vendor memberships that route qualified buyer inquiries and from positions labeled Sponsored. A sponsored position on this page is marked with the word Sponsored, sits outside the ranked list, and carries a sponsored link attribute. Payment never changes a fact, a date, a core set, an order rule, a state, or the comparison table. See how we make money and the ranking policy.