Revenue safeguards
Treat permission, provenance, inference, communication, and forecast as separate controls.
A single lead score or campaign setting cannot govern the legal, privacy, data-quality, fairness, relationship, and commercial consequences of the workflow. Each boundary needs its own accountable owner and evidence.
- Jurisdiction and contact authority
- Qualified owners determine applicable marketing and privacy rules, lawful basis or consent, sender and instigator responsibilities, business-versus-individual treatment, channel conditions, notices, opt-out, suppression, and recordkeeping. Automation only enforces the approved policy.
- Source and enrichment provenance
- Record where every field came from, why it may be used, whether it is observed or inferred, when it was obtained, which provider terms apply, how confidence and conflicts are represented, and when it must expire or be removed.
- Scoring and fairness boundaries
- Define the decision a score supports, evaluate it against a human-reviewed outcome, examine error and treatment across relevant groups, expose the evidence and unknowns, monitor drift, and preserve override and appeal where consequential.
- Approved communication
- Use an authorized sender, accurate identity and subject, approved claims, channel and frequency limits, relationship context, working preference controls, reply detection, and immediate stop behavior. A drafted message is never proof that contact is permitted.
- Commercial state authority
- Opportunity stage, value, probability, forecast, pricing, terms, and commitment remain attributable to authorized people or exact business rules with explicit evidence. Generated enthusiasm or engagement signals cannot update them silently.
- Security and misuse
- Restrict source and CRM access, isolate untrusted inquiry and web content from instructions, validate model output, cap tool privileges and message volume, protect exports, review third parties, and detect scraping, enumeration, impersonation, injection, and account abuse.