Prove consent. Honor every opt-out.
Compliance isn’t only about the vendor you pick — it’s about what you can produce when somebody asks. Shape gives your team the tooling: trackable opt-in evidence on every lead, opt-outs per channel, validation before you make contact, and a direct line to your DNC.com account.
- Capture the proof. Opt-in time, IP address, consent language, and certificate stored on the record.
- Respect every request. Separate opt-outs for calls, texts, emails, and automation — or a full opt-out.
- Scrub before you contact. Email and phone validation, plus your own DNC.com account connected.
Trusted by 100,000+ customers since 2009.
Consent & opt-outs
Dana White — consent language, IP 198.51.100.24, and timestamp saved to the record.
Every opt-in, with the evidence attached.
A TCPA complaint doesn’t ask whether you meant to have consent. It asks you to produce it. Shape’s trackable opt-in fields capture the evidence at the moment somebody submits a form, and keep it on the lead record where you can actually find it again.
That means the timestamp the opt-in happened, the IP address it came from, the exact consent language displayed at the time, and a consent certificate tied to the record. Because the wording is stored per contact, editing your form next quarter doesn’t quietly rewrite what an earlier lead agreed to.
It lives with the lead rather than in a separate compliance system, so anyone reviewing the account sees the same evidence, and it travels into lead management and reporting alongside everything else you know about that contact.
- Opt-in date and time, down to the second.
- The IP address the consent came from.
- The exact consent language shown at the time.
- A consent certificate tied to the record.
Opt-outs on every channel, and clean data before you make contact.
Consent isn’t one switch. Shape tracks it per channel, and checks the contact details before your team spends time on them.
One request, the right scope
Somebody who doesn’t want phone calls may still want your email. Shape records the opt-out at the level the person actually asked for.
- Call opt-out
Flags the record so calling campaigns skip it.
- Text opt-out
Excludes the contact from SMS sends and text automation.
- Email opt-out
Suppresses the contact from email sends and drips.
- Automation opt-out
Keeps them out of automated sequences while your team can still reach out directly.
- Full opt-out
One flag covering every channel at once.
Validate before you dial
Bad numbers and dead addresses cost your team time and add risk. Shape checks them, and connects to the scrub list you already pay for.
- Email validation
Check an address is real before it enters a send.
- Phone validation
Check a number before your team spends a dial on it.
- DNC.com integration
Connect your own DNC.com account so scrubbing runs against your subscription.
- Consent on file
See at a glance whether a record has documented opt-in behind it.
Compliance tooling only helps if it sits where the work happens. Consent and opt-out flags live on the lead record, so lead management, automation, and texting all read from the same source of truth.
Your tooling is only as sound as what it runs on.
Independently audited, encrypted, and access-controlled.
The features above sit on infrastructure built for regulated teams. Data is encrypted in transit and at rest, access is role-based down to the field level, and account activity is logged — so the evidence you collect is held somewhere you can defend.
See role-based access →Shape handles A2P registration for business texting, which keeps messages compliant and improves deliverability.
See Text Messaging →Set up with someone who has done it before.
Consent fields, opt-out rules, and your DNC.com connection get configured during implementation — not left for you to work out afterwards.
An implementation specialist sets up your opt-in fields, opt-out rules, and validation during onboarding.
24/7 AI answers, product experts by phone or email, and an account manager for the life of the account.
Live weekly sessions and role-based courses, so the team using these fields understands why they matter.
Compliance questions, answered
What compliance tools does Shape give my team?
Trackable opt-in fields that capture the timestamp, IP address, consent language and a consent certificate for TCPA; opt-outs for calls, texts, emails and automation plus a full opt-out; email and phone validation; and a DNC.com integration that connects your own account. All of it sits on a platform that is SOC 2 audited, HIPAA aligned and PCI compliant.
How does Shape help with TCPA consent?
A complaint doesn’t ask whether you meant to have consent — it asks you to produce it. Shape’s opt-in fields record the evidence at the moment of submission and store it on the lead record, so it is there when someone asks for it months later.
What exactly gets captured with an opt-in?
The opt-in date and time, the IP address it came from, the exact consent language displayed at that moment, and a consent certificate tied to the record. Because the language is stored per record, editing your form later doesn’t change what an earlier contact actually agreed to.
Can someone opt out of one channel but not others?
Yes. Shape records opt-outs separately for calls, texts, emails and automation, so a contact who doesn’t want phone calls can still receive email if that is what they asked for. There is also a full opt-out that applies across every channel at once.
Does Shape connect to DNC.com?
Yes. You can connect your own DNC.com account, so scrubbing runs against the subscription you already pay for rather than a separate list you have to reconcile.
Does Shape validate emails and phone numbers?
Yes — both email validation and phone validation are available, so your team can check that contact details are real before spending time on them or sending to them.
What standards does Shape itself meet?
Shape is SOC 2 audited, HIPAA aligned and PCI compliant, with encryption in transit and at rest, role-based access down to the field level, and activity logging across the account.
What is 10DLC, and does Shape handle it?
10DLC is the registration standard for business (A2P) texting. Shape manages your registration and opt-out handling, which keeps messages compliant and improves deliverability. See Text Messaging.
Does this mean Shape is giving me legal advice?
No. Shape provides the tooling and the records to support your own compliance program — what you collect, how you use it, and which rules apply to your business are decisions for you and your counsel.
See the compliance tooling in your own workflow.
A walkthrough of opt-in capture, channel-level opt-outs, validation, and the DNC.com connection — using the way your team actually collects leads.
“This software has been a game changer. We’re a few months in and already more productive and more organized than ever before! Alex has gone above and beyond in our onboarding process helping us make this powerful tool our own. For a tech novice who needs his hand held sometimes I have been comfortable with each step of the process.”
Benjamin KonoMy Smart Team