Every compliance claim Hostcomm makes on this site is listed below with its issuer, its identifier and the date it was validated. Where a document can be published, it is linked. Where it can only be shared under NDA, that is said plainly rather than implied.
Last reviewed 2 September 2026. Reviewed quarterly, and within five working days of any certification change.
Four certifications and registrations, each independently verifiable at the issuer.
Predictive dialling is lawful in the UK, and it is bounded. The boundary is a published figure. The controls below are the ones you set to stay the right side of it.
The maximum proportion of live calls that may be abandoned, measured per campaign over any 24-hour period, under Ofcom’s statement of policy on persistent misuse. An abandoned call must play an information message within two seconds, and a called number that abandons must not be dialled again by the same campaign for 72 hours except with a live agent.
Source: Ofcom, persistent misuse of an electronic communications network or service. Hostcomm provides the controls and the audit trail; the settings you run and compliance with them remain yours.
The platform can calculate abandoned calls the way Ofcom defines it rather than by the US metric. It is enabled in system settings and then switched on per campaign, so a UK campaign is measured against the UK rule.
Set a target abandon rate on the campaign and the pacing adjusts the dial ratio to hold it, rather than reporting the breach afterwards.
A per-campaign setting, in hours, that stops a number which received an abandoned call being redialled automatically. Set it to 72 hours to match Ofcom.
Abandoned calls play a recorded message identifying the caller and giving a number to opt out. Ofcom requires it within two seconds of the call being answered.
AMD is available and its use is logged. Ofcom expects the detection decision inside two seconds and counts AMD false positives toward the abandoned call rate, so on tight campaigns the right answer is sometimes to turn it off.
A valid, dialable presentation number on every outbound call, answered during normal business hours. Rotating or withheld CLI breaches both Ofcom rules and UK carrier terms.
Lists are screened against the Telephone Preference Service and its corporate equivalent at load time or through the API, so opted-out numbers are not dialled.
Where calls are transcribed or scored, that inference runs in AWS London on open-weight models via OnshoreAI. Recordings are not sent to a US AI provider to be read.
These are settings, not defaults. A dialler shipped with US metrics will happily run a UK campaign and report a compliant-looking drop rate calculated the wrong way. Hostcomm configures the UK calculation, the lockout time and the abandon target with you at onboarding, and the resulting rates, AMD decisions and opt-out requests are logged and exportable — the record you need if Ofcom asks.
“UK hosted” means different things at different vendors. Here is what it means here.
Both are available to anyone evaluating Hostcomm. Neither is published, because both describe assessed scope and infrastructure.
The signed AoC for Report on Compliance, Service Providers, PCI DSS v4.0.1, validated by Securious on 17 July 2026. It sets out the assessed scope and the underlying infrastructure, so it is shared under NDA rather than published. Ask and it is usually with you the same day.
Under NDA — request itThe DPA, including the sub-processor list, the security schedule and your retention schedule. Available before contract, not after — send it to your DPO while you are still evaluating.
Pre-contract — request it