TRAI & DLT Compliance
What UpVoot does for you — and what remains your responsibility as a DLT-registered entity.
Outbound voice calling in India is regulated by TRAI (Telecom Regulatory Authority of India) under the TCCCPR framework. UpVoot is designed to make compliance straightforward, but certain obligations remain with you as the principal entity.
What UpVoot handles automatically
| Requirement | How UpVoot handles it |
|---|---|
| AI disclosure | Every call begins with a mandatory AI disclosure spoken by the agent: "This call is from an automated AI voice assistant." You may customise the phrasing in your system prompt as long as the intent is clear. |
| Audio watermarking | Agent audio is watermarked at the synthesis layer per TRAI's AI voice guidelines. |
| Data residency | Call metadata and transcripts are stored in your database, which you may provision in India. The voice pipeline runs on servers located in India. No data is transmitted to servers outside India unless you explicitly choose a non-Indian region for your database. |
| DPDP Act classification | UpVoot acts as a Data Processor under the Digital Personal Data Protection Act 2023. Your organisation remains the Data Fiduciary. |
Your responsibilities
| Responsibility | Details |
|---|---|
| DLT registration | You must be registered on the DLT platform (TRAI) as a principal entity before initiating any commercial outbound calls. UpVoot connects to your telephony carrier — it does not hold a DLT registration on your behalf. |
| Header registration | Your CLI (Caller Line ID) and message headers must be registered on the DLT platform. Your telephony provider (Exotel, Airtel IQ, etc.) injects these headers into the call — UpVoot does not modify CLI. |
| Consent collection | You must have valid consent from recipients before initiating promotional or service calls. UpVoot stores call transcripts that can serve as a record, but does not manage a consent registry. |
| NDNC scrubbing | Numbers registered on the National Do Not Call registry must be excluded from your call lists. Your dialling platform or campaign manager is responsible for NDNC scrubbing — UpVoot does not perform this check. |
| Call time windows | Outbound calls may only be made between 09:00 and 21:00 IST. Your campaign scheduler is responsible for respecting these windows. |
Data Processing Agreement
As a Data Processor under DPDP Act 2023, UpVoot will execute a Data Processing Agreement (DPA) with enterprise customers on request. Email legal@upvoot.com to request a DPA.
Audit trails
Every call is logged in your UpVoot account with:
- Start time and duration
- Full transcript
- API key used (for identifying which agent handled the call)
- Call status and termination reason
These logs are stored in your Neon PostgreSQL database and are exportable at any time. Retain logs for a minimum of 90 days as recommended by TRAI guidelines.