The operating rules for calls, texts, email, RESPA, advertising, and AI.

05 — Compliance Guardrails (Operating Rules by Activity)

Prepared 2026-07-22. Figures and citations verified as of this date unless marked otherwise. Purpose: the standing rules Mitchell operates under for every outreach and marketing activity, written so Ready Mortgage Lenders' CCO can read each section and see the guardrail applied. Research backing: research_notes/compliance_outreach.md. Dual-role rules: 04_illinois_licensing_and_dual_role.md. AI operating procedures: 19_ai_stack_and_sop.md.

Framing note the whole document rests on: the manager's shorthand — "B2B calls are treated differently under Do Not Call" — is partially true and dangerously incomplete. The B2B exemption covers only the TSR's DNC-registry provisions. It does not cover the TCPA's autodialer/prerecorded/AI-voice rules, the TSR's misrepresentation rules (removed for B2B by the 2024 amendments), Illinois state law, or CAN-SPAM — and it evaporates when the "business line" is a personal cell phone, which for realtors is the norm.

---

A. Calling realtors (live, manual calls)

Permitted pattern — and the only permitted pattern: manual, human-dialed, live-voice calls, low volume, researched, personalized.

Rules:

1. Hours: 8:00 a.m.–9:00 p.m. local time of the called party (47 CFR 64.1200(c)(1); Illinois mirrors at 815 ILCS 413 — no calls 9 p.m.–8 a.m.). Practically: business hours.
2. Illinois opener script is mandatory (815 ILCS 413/15): immediately state (a) name, (b) "Ready Mortgage Lenders," (c) the purpose of the call, and (d) ask at the beginning whether the person consents to the solicitation ("do you have a minute to talk about how I support your buyers?"). The consent-inquiry nominally targets consumer solicitation and its reach into pure B2B calls is [UNVERIFIED — counsel to confirm scope of 815 ILCS 413], but building it into every script costs nothing and covers the dual-purpose-number risk.
3. DNC scrub anyway. The National DNC Registry protects personal numbers, and realtor cells advertised as business lines are frequently personal numbers; courts have treated substantially-personal-use cells as "residential," and registry presence creates a rebuttable presumption. [PARTIALLY VERIFIED — the ~60%-personal-use line comes from individual district-court decisions, not a rule; risk guidance, not safe harbor.] Operating rule: scrub every number before calling unless it is a verified office landline; if a number is on the registry, treat it as protected absent a documented established business relationship.
4. Absolutely no dialers, no prerecorded messages, no AI voice, no ringless voicemail. TCPA ATDS/artificial-voice rules (47 CFR 64.1200(a)) have no B2B exemption; FCC 24-17 (2024) holds AI-generated/cloned voices are "artificial"; the FCC's 2022 ruling treats RVM to cells as calls. Illinois' autodialer definition (815 ILCS 305) is broader than the post-Duguid federal one, so even a CRM "power dialer" feature is off-limits without specific compliance review. TCPA exposure: $500–$1,500 per call, private class actions.
5. No misrepresentations even on B2B calls. The 2024 TSR amendments (effective 2024-05-16) removed the B2B exemption from the deception prohibitions. No puffed closing speed, no product misstatements — a TSR violation plus UDAAP exposure.
6. Voicemail: a personal voicemail left during Mitchell's own manual call is fine and encouraged — name, company, callback number, quiet hours respected. RVM drops and AI voicemail tools are prohibited (see 4).
7. Any "don't call me" → same-day entry on the suppression list (§E), honored across all channels.

Needs written company sign-off: YES — (1) whether Ready holds a National DNC Registry Subscription Account Number and its scrub cadence; (2) confirmation Mitchell's manual calling falls under Ready's telemarketing policy; (3) a written blanket ban on dialers/RVM/AI voice as company policy; (4) counsel confirmation of 815 ILCS 413/305 scope for B2B calls and any dialer-assist feature in Ready's phone/CRM stack.

---

B. Texting realtors

Texts are "calls" under the TCPA; all of Section A's automation bans apply.

1. 1:1, manual, personalized only. Text only realtors who gave Mitchell the number in a business context or engaged first; document how each number was obtained. No mass-texting platform without compliance approval of the exact system and consent basis (including 10DLC registration).
2. Quiet hours: 8 a.m.–9 p.m. local time.
3. Identify himself and Ready in the message; if a text constitutes mortgage advertising, the §G disclosure rules attach.
4. Opt-out (2025 FCC revocation rules, effective 2025-04-11): revocation by any reasonable means — STOP, QUIT, END, REVOKE, OPT OUT, CANCEL, UNSUBSCRIBE, or any wording clearly expressing the intent; no exclusive-keyword or exclusive-channel requirement is allowed. Legal deadline: honored no later than 10 business days; Mitchell's SLA: same day. One confirmation text acknowledging the opt-out is permitted.
5. Revoke-all: the rule treating one revocation as revoking consent for ALL message types from the sender (47 CFR 64.1200(a)(10)) is delayed to 2027-01-31 — but operate as if it were live now: any opt-out suppresses all channels (§E).

Needs written company sign-off: YES — approval of any texting platform before first use (system, 10DLC registration, consent capture, opt-out automation); confirmation the all-channel suppression policy is company policy.

---

C. Email

CAN-SPAM has no B2B exception (FTC compliance guide, verbatim: "The law makes no exception for business-to-business email"). Penalties up to ~$53,088 per email, and the sender is liable even when a vendor sends.

1. 1:1 personalized, genuinely individual email ("Great meeting you at the open house — here's the turnaround info you asked for") is transactional/relationship content: low risk, no footer required. When in doubt, include the footer.
2. Anything templated, sequenced, or tool-sent is commercial and requires: truthful header/From/reply-to; no deceptive subject lines; identification as an ad; Ready's valid physical postal address; a clear, working opt-out mechanism live for at least 30 days; opt-outs honored within 10 business days (Mitchell's SLA: same day), no fee, no login, no extra info demanded.
3. Emails advertising mortgage products carry the full §G disclosure block (NMLS IDs, nmlsconsumeraccess.org, Equal Housing).
4. Unsubscribes feed the suppression list (§E).

Needs written company sign-off: YES — the exact company email footer (physical address + disclosure block); approval of any email platform/sequence tool before first use.

---

D. Social direct messages (LinkedIn, Instagram, Facebook)

1. Manual and personalized only. No automation, no mass DMs, no contact scraping — banned by platform ToS (LinkedIn enforces aggressively) and by this plan's guardrails regardless.
2. TCPA does not apply to in-platform DMs — but a "DM" actually delivered to a phone number via SMS gateway is a text: §B applies.
3. CAN-SPAM coverage of DMs is unsettled (courts have extended it to some internal social messaging) [PARTIALLY VERIFIED] — operating rule: behave as if it applied. Truthful, identified, honor opt-outs.
4. Advertising rules attach to content: a DM promoting products/rates is a commercial communication under Reg N and an ad under Reg Z/1050.940. Operating rule: keep rate and product claims out of DMs entirely; DMs are for relationship and logistics.
5. "Stop messaging me" → instant, logged to the suppression list (§E).

Needs written company sign-off: YES — Ready's social-media policy for DMs and posts, including archive/retention of business communications.

---

E. Internal suppression list (entity-specific do-not-call system)

Required regardless of B2B status or registry status: 47 CFR 64.1200(d) and 16 CFR 310.4(b)(1)(iii)(A) mandate an entity-specific DNC system — written policy available on demand, training, recording and honoring requests. The 2024 TSR amendments extend recordkeeping (call detail, consent records, scripts, DNC requests) to 5 years.

Specification (one list, all channels — the CRM implements this):

• Retention: 5 years minimum — for the list, consent records, scripts, and call detail.
• One-page written DNC policy on file with Ready; Mitchell trained on it.
• Ads/marketing copies kept 24 months per Reg N (1014.5) — practically, archive everything 5 years with the rest.

Needs written company sign-off: YES — the one-page DNC policy itself, and confirmation the CRM configuration satisfies Ready's recordkeeping obligations.

---

F. RESPA §8 — the rules with realtors

Authority: RESPA §8 (12 U.S.C. 2607), Reg X 12 CFR 1024.14, CFPB RESPA §8 FAQs (Oct. 2020). No thing of value may be given or accepted pursuant to any agreement or understanding — including one established purely by a pattern of conduct — that settlement-service business will be referred. "Thing of value" is expansive: money, discounts, services, meals, trips, opportunities, payment of another's expenses, leads tied to referrals. Penalties are criminal (up to $10k / 1 year) plus civil. There is no de minimis exception — no "$25 rule." 8(c)(2) is not a loophole: payments for actual goods/services are protected only up to fair market value; any excess is a referral payment.

The five traps, as bright lines:

1. "Small stuff" pattern gifts. - DO: give unlimited time, competence, education, responsiveness, and information. - DON'T: coffees, gift cards, tickets, or repeated small gifts to referral sources. A pattern of coffees-for-referrals violates §8.
2. Defraying agent expenses (the open-house trap). - DO: produce his own branded financing-information flyer about his own services and offer it at open houses — that is his marketing. OK. - DON'T: pay for the agent's open-house signs, food, staging, or flyers — even flyers about the listing. Funding the agent's kit defrays the agent's own costs = thing of value. NOT OK. The line: whose expense is paid, and whose services are promoted.
3. Co-marketing above fair market value. - DO: co-market only with prior written compliance approval, paying no more than documented FMV for his own share of the actual advertising service received. - DON'T: overpay "his share" of a Zillow slot, postcard, or ad; FMV is for the marketing service, never for referral proximity.
4. MSAs and per-lead payments. - DO: treat MSAs as off the table entirely absent company-counsel structuring. Lead purchases only at FMV for the lead itself, never conditioned on referrals/closings. - DON'T: pay a realtor per-lead for "their buyers" — that is a referral fee with extra steps.
5. Event-sponsorship escalation. - DO: broad-based, modest, branded, referral-agnostic promotional activity within Ready's caps (pens/mugs/memo pads given broadly; genuinely educational lunch-and-learns open to agents regardless of referral relationship, with non-lavish food). - DON'T: buy tables at brokerage awards dinners, sponsor office parties, golf, tickets, or gifts to top referrers.

Operating rule: because Mitchell wants referrals from everyone he courts, the safe reading is never pay for anything of theirs, ever, without written compliance approval. Every co-marketing idea, kit, event, desk-rental, open-house participation, or lead arrangement goes to Ready compliance in writing BEFORE any commitment.

Needs written company sign-off: YES — every time: each specific co-marketing/MSA/lead/desk-rental/event arrangement individually, with FMV documentation; plus the standing promotional-item program (items, dollar caps, distribution rules) under Ready's RESPA policy.

---

G. Advertising (social posts, flyers, videos, landing pages, product-content emails/DMs/texts)

1. Reg Z 1026.24: advertise only terms actually available. Trigger terms — down-payment amount/percentage, number of payments or repayment period, payment amount, any finance-charge amount — require full disclosure of down payment, repayment terms, and APR (plus variability). Any rate must be stated as APR; a simple rate may appear only alongside and never more conspicuously than the APR. Operating rule: Mitchell never posts a rate, payment, or "as low as" number himself. Rate content comes only from company-approved, dated, fully disclosed materials.
2. Reg N (MAP Rule, 12 CFR 1014): no material misrepresentation, express or implied, in any commercial communication about mortgage credit — 19 categories including fees, rates, savings, likelihood/ease of approval, government affiliation. Covers social posts, DMs, texts, videos. Keep copies of all materially different ads 24 months (1014.5).
3. Illinois — 38 Ill. Adm. Code 1050.940: every mortgage ad (electronic or print, including individual mailings) must clearly and conspicuously include: the NMLS Consumer Access reference (electronic media: verbatim "For licensing information, go to: www.nmlsconsumeraccess.org"), Ready's company NMLS ID, and — whenever an individual MLO is advertised — Mitchell's individual NMLS ID as well. Anti-commingling: his NMLS ID may not appear on non-mortgage (real-estate listing) ads unless mortgage wording appears with equal or greater prominence (see 04 §10).
4. Equal Housing: use the Equal Housing Opportunity/Lender logo, slogan, and statement on everything. The precise mandatory scope for a nonbank per medium is [PARTIALLY VERIFIED] — the operating rule is unconditional use per Ready's standard block.
5. Standard footer for every ad-like item: Mitchell's name; NMLS #[MITCHELL_NMLS]; "Ready Mortgage Lenders, NMLS #[READY_NMLS_1100518 — verify]"; www.nmlsconsumeraccess.org; Equal Housing statement + logo; Ready's required state disclosures. Exact block comes from Ready compliance.
6. Banned claims list (Reg N + UDAAP + plan guardrails): "guaranteed approval," "guaranteed closing," "everyone qualifies," "lowest rates," "no closing costs" (unless literally true as structured and disclosed), fake urgency/scarcity, closing-speed promises without operational verification and compliance approval, implied government affiliation, borrowed experience or reviews (Ready's track record is not Mitchell's), and repeating Ready's own site puffery ("all loan programs in the market," "will get your loan closed!") — never.
7. UDAAP backstop: net impression to the least-sophisticated reader is the test; dodging Reg Z/N technicalities does not help.

Needs written company sign-off: YES — the exact disclosure block per medium (email footer, social bio, flyer, video, landing page); pre-approval process for any rate-bearing material; name/logo usage rules.

---

H. Fair lending in marketing

Authority: ECOA/Reg B, Fair Housing Act, HUD 2024 digital-platform advertising guidance. Marketing-based redlining is proven by pattern, not intent.

1. Even Southland coverage. The wedge (Tinley Park–Oak Forest–Orland Park–Lockport) sits in the racially diverse Chicago Southland. The realtor-partner map, geographic farm, event locations, and ad-geo settings must not systematically skip majority-minority south-suburb communities — that pattern is redlining evidence against Ready even with zero bad intent. Phase-2 expansion (Homewood–Flossmoor–Matteson) supports even coverage; treat it as part of the footprint story, not an afterthought.
2. No protected-class or proxy targeting or exclusion — no age/sex/zip micro-targeting, no drawn exclusion zones, no language-based exclusion (English-only marketing that excludes LEP communities from equivalent outreach draws scrutiny; steering worse products at LEP consumers is a violation).
3. Special ad category is mandatory whenever boosting any housing/credit content on Meta/Google (restricted targeting, broadened geo radii).
4. No lookalike/custom audiences for mortgage ads without compliance approval.
5. Documented geographic rationale: keep a written, business-based statement of why the footprint is what it is (Mitchell lives there, agent-cluster corridor, first-time-buyer price points) and how it is served evenly. Diverse imagery in all creative.

Needs written company sign-off: YES — fair-lending review of the defined footprint and of any paid ad targeting settings before the first boosted post.

---

I. AI and privacy

Full stack and procedures live in 19_ai_stack_and_sop.md; these are the non-negotiables:

1. No NPI in consumer AI tools, ever: no SSNs, bank statements, tax returns, pay stubs, credit reports, applications, account numbers, IDs, or borrower documents. No public AI tool is ever the loan file or customer record — Ready's secure portal and approved systems only.
2. Synthetic or fully anonymized examples only for AI training, scenario drills, and role-play.
3. No AI credit decisions: no model makes or represents an approval, denial, underwriting conclusion, or adverse-action reason.
4. Human review gate: mandatory before publishing any content or sending any personalized financial information. AI-generated messages count as advertising when applicable (§G rules attach).
5. No autonomous posting, mass messaging, or contact scraping; respect website ToS; no bypassing access controls.
6. No AI voice anywhere in outreach (§A.4).
7. Kimi is China-hosted and trains on inputs — public-content-only at most, and expect a company "no." Fannie LL-2026-04 requires seller AI governance — Mitchell's written AI SOP should be presented to Ready as an asset, not hidden.

Needs written company sign-off: YES — Ready's AI-tool policy (approved tools list, data rules), approved data-handling procedures, and acceptance of the written AI SOP in 19_ai_stack_and_sop.md.

---

J. Honest positioning

1. Never imply experience Mitchell does not have. He is new. The claim is new-but-prepared: finance degree (UIUC), disciplined scenario work, documented SLA (acknowledgment within 1 business hour, written guideline-checked scenario brief within 4 business hours, Mon–Fri), transparent process, backed by Ready's experienced team. The same rule covers capabilities: "reviewed with my team" and Saturday coverage are claims about Ready's operations and may not be spoken until verified in writing (v0/v1 rule, files 09 §2.3 and 16 header — added after red-team C4).
2. Ready's institutional record is never his personal record. No appropriating company reviews, closings, or achievements; Birdeye 4.9 is Ready-FL customers, not Mitchell.
3. No closing-speed claims without operational verification and compliance approval.
4. No IHDA positioning until Ready is actually an approved IHDA lender (it is not, as of the 2025-12-18 list) — see the manager agenda.
5. No fake familiarity, no manipulative urgency in any outreach copy; every message honors opt-outs.
6. Truth even when it costs the deal — the 2024 TSR change (§A.5) makes honesty on B2B calls a legal requirement, not just a brand value.

Needs written company sign-off: YES — approval of the standard positioning/bio language and the SLA promise (Ready must confirm operations can support what Mitchell promises); NO additional sign-off needed for the honesty rules themselves — they bind unconditionally.