Trust & Compliance

Built to protect your players
and your property.

Sonar is the platform your team uses to reach loyalty players by voice and SMS about the gifts they've already earned. Compliance isn't a feature we bolt on — it's how the platform is designed. Here's exactly how consent, security, and disclosure work, and who's responsible for what.

SOC 2 Type II AI disclosed on every call Clean, permanent opt-out Informational by design
The commitments

Five things that are always true on a Sonar call.

These aren't settings a campaign can switch off. They're enforced in the agent itself and shown to your team as locked rules in the portal.

The AI identifies itself, first

Every call opens by telling the player they're speaking with an automated assistant on behalf of the property. No impersonation, ever.

Opt-out is instant and permanent

A player can opt out mid-call, by text, or by callback. Once they do, they're removed and never contacted again — no talking them out of it.

Gifts are never linked to play

The agent never connects a gift to wagering, spend, points, tier, or qualification. It's a thank-you to a member — a critical line for responsible gaming.

It answers, it doesn't sell

On an informational campaign the agent answers a player's factual question briefly, then returns to the gift. It never pivots a reminder into a sales pitch.

Everything is measured against a control

Reach, confirmation, opt-out, sentiment, and redemption lift are reported against a matched holdout group — proof, not promises.

Real-time language switching

If a player answers in another language, the agent follows and switches back naturally — inclusion built in, not a separate campaign.

Informational vs. promotional

The classification that keeps consent where it belongs.

Every campaign is classified before it runs. The classification decides which consent applies — and the platform holds you to it. You choose; Sonar surfaces the requirement so nothing slips through.

Informational

A reminder about something already earned

Gift pickup reminders, confirmations, and service notices like a closure or an hours change. These run on your standard players-club consent. This is the everyday Sonar call.

Promotional

A reason to visit, spend, or play

Events, offers, come-back messages, drawings. Promotional outreach requires marketing consent — a higher bar. The portal blocks a promotional campaign until you confirm you hold that consent for the list.

Who does what

You operate the platform. We provide it.

Sonar is a tool your team runs — not a service that runs your outreach for you. That distinction protects you, and it's reflected in how responsibilities divide.

Your property owns

  • Consent. The permission to contact your players belongs to you and travels with your player file.
  • Who's contacted. You choose the list, the segment, and the timing for every campaign.
  • Classification. You classify each campaign, and confirm marketing consent for promotional sends.
  • Your content. You define what the host says; you approve every word before it goes live.
  • DNC & opt-outs. You maintain your suppression lists; the platform captures opt-outs for you to honor.

Sonar provides

  • The platform. The dashboards, campaign tools, and voice/SMS infrastructure you operate.
  • Formatting. We shape your own words into a form the AI understands — you stay the author.
  • The guardrails. Disclosure, opt-out, and no-play-linkage enforced in the agent itself.
  • Security. A SOC 2 Type II platform with PII minimization and configurable retention.
  • The measurement. Honest reporting against a holdout control, every cycle.
Security & data

Enterprise-grade, and independently verified.

Sonar runs on a SOC 2 Type II platform. Our live security posture, certifications, and subprocessors are published in our Trust Center — not asserted on a page you can't verify.

AreaHow Sonar handles it
CertificationSOC 2 Type II. Report available under NDA through our Trust Center.
Player dataProcessed only to run your outreach. Never sold. Not used to train models for our benefit or any other client's.
PII minimizationThe platform is configured to minimize personal data exposed to the AI, with PII redaction available. You control which fields you upload.
Data retentionConfigurable retention windows, with automatic deletion when the window expires.
Tenant isolationEach property's data is isolated. One property's data is never accessible to another.
Recording & transcriptsAvailable to you for QA and audit. Two-party-consent disclosure supported where you contact those jurisdictions.
SubprocessorsOur voice/AI infrastructure providers operate under a Data Processing Addendum. Current list published in the Trust Center.
GPS Trust Center

Live certifications, security controls, and subprocessors — maintained continuously, not point-in-time.

View the Trust Center →
For procurement & legal

The questions your compliance team will ask.

Is this telemarketing?
Not when it's classified informational. A gift-pickup reminder about a reward a player already earned is informational outreach, not a sales call — and the agent is built so it can't drift into selling. When a property chooses to run promotional outreach, it classifies the campaign as promotional and confirms marketing consent for that audience before it can send.
Who is responsible for TCPA consent?
The property. Consent to contact your players belongs to you and travels with your player file. Sonar provides the platform, captures opt-outs, and surfaces the right consent requirement for each campaign's classification — but the property owns, warrants, and maintains the underlying consent. This is set out in the Sonar agreement.
What happens when a player asks "anything new going on?"
On an informational campaign, the agent gives a brief, factual answer if it has that fact, then returns to the gift — one sentence, no pitch. It won't list offers, create urgency, or encourage a visit. Promotional curiosity is redirected to the players club. This is enforced in the agent, and shown to your team as a locked rule in the portal.
Does the AI ever tie a gift to gambling?
No. The agent never links a gift to play, wagering, spend, points, tier, or qualification, and won't discuss qualification thresholds at all. A gift is framed as a thank-you to a member. This supports both the informational classification and responsible-gaming requirements, and it's a hard guardrail, not a preference.
Is our player data used to train AI models?
No. Player data is processed only to run your outreach. It is not sold, and it is not used to train models for our benefit or any other client's. Our infrastructure providers operate under a data processing addendum with a no-training commitment; the current subprocessor list is in the Trust Center.
Can you produce a SOC 2 report?
Yes. Sonar runs on a SOC 2 Type II platform. The report is available under NDA through the GPS Trust Center, along with the current control set and subprocessor list.
How do players opt out, and does it stick?
Mid-call, by text reply, or by callback. Opt-out is immediate and permanent — the player is removed and never contacted again. Opt-outs are captured in the platform for the property to honor across its systems.
Do you handle call-recording consent?
The platform supports the required disclosure. The property is responsible for enabling and honoring recording disclosures for the jurisdictions it contacts, including two-party-consent states — the same as any outreach program it runs.
See it for yourself

Compliance you can show your regulator.

We'll walk your team and your compliance reviewer through a live Sonar call — disclosure, opt-out, the guardrails in action — and hand over the documentation your procurement process needs.