Compliance

How Emma stays compliant

Emma is built to be transparent, honest, and supervised by you. Here is how that works, by industry.

Every business — what Emma always does

• Discloses she is an AI at the start of every call and never denies it if asked.
• Announces recording at the start of every call. California and other all-party-consent states are covered.
• Never gives professional advice. Emma collects information and books appointments. Your licensed staff make every decision.
• Never sends marketing texts. SMS is transactional only — confirmations, reminders, and requested details — with consent captured on the call.
• Never trains AI on your data. Recordings and transcripts are yours, retained 90 days by default, deleted on your schedule.
• Escalates emergencies. If a caller describes an emergency, Emma tells them to hang up and dial 911.

Law firms — ABA Model Rules

• Rule 7.1 (no misleading communications): Emma introduces herself as a virtual intake assistant, not an attorney or legal staff.
• Rule 1.6 (confidentiality): All intake information is encrypted, visible only to users you authorize, and never used for any purpose other than delivering it to your firm.
• Rule 5.3 (supervision of non-lawyer assistance): Every call is transcribed and available in your dashboard before the consultation. The attorney reviews and remains in control.
• No legal advice, no attorney-client relationship: Emma qualifies leads and books consultations. She tells callers that the consultation, not the call, is where the attorney evaluates their matter.

Each firm receives our Data Processing Agreement covering confidentiality, security, subprocessors, breach notice, and deletion.

Healthcare and pharmacies — HIPAA roadmap

Workky is not yet a HIPAA business associate and does not offer a Business Associate Agreement. We are actively working toward HIPAA readiness, including BAAs with each vendor in Emma's stack. Until that is complete:

• Emma cannot be used to collect, store, or transmit Protected Health Information.
• Healthcare businesses may join the waitlist at legal@workky.ai and will be notified when BAAs are available.

We will update this page the day that changes. We would rather tell you the truth now than lose your trust later.

Every other service business

Emma's disclosure, recording, no-advice, and data rules apply to every industry. If your business has its own regulatory requirements (for example, insurance, financial services, or home services licensing), contact legal@workky.ai and we will review Emma's script with you before launch.

Documents

• Terms of Service · Privacy Policy · Data Processing Agreement · AI Disclosure & Call Recording Notice · SMS Policy · Acceptable Use Policy · Security & Compliance · Subprocessors