The questionnaire and scoring system are the desk’s own recommendations. The sources below support specific regulatory, technical and operational statements; they do not validate the score thresholds or establish supplier performance on a buyer’s calls.
- NIST — AI Risk Management Framework Core. Responsibilities, evaluation and monitoring. https://airc.nist.gov/airmf-resources/airmf/5-sec-core/
- NIST — Generative Artificial Intelligence Profile, NIST AI 600-1. Pre-deployment testing and related risk-management considerations. https://nvlpubs.nist.gov/nistpubs/ai/NIST.AI.600-1.pdf
- NIST — Back to the Future: Why Agentic AI Needs a Strong Identity Foundation, 27 August 2026. Agent identity and access limitations. https://www.nist.gov/blogs/cybersecurity-insights/back-future-why-agentic-ai-needs-strong-identity-foundation
- FCC — Declaratory Ruling FCC 24-17. AI-generated voices within artificial/prerecorded-voice restrictions. https://docs.fcc.gov/public/attachments/FCC-24-17A1_Rcd.pdf
- FTC — Complying with the Telemarketing Sales Rule. Covered prerecorded telemarketing, agreements and opt-out requirements. https://search.ftc.gov/business-guidance/resources/complying-telemarketing-sales-rule
- HHS — Guidance on HIPAA & Cloud Computing. Business associate responsibilities and cloud processing of ePHI. https://www.hhs.gov/hipaa/for-professionals/special-topics/health-information-technology/cloud-computing/index.html
- PCI Security Standards Council — FAQ 1210. Sensitive authentication data in audio recordings. https://www.pcisecuritystandards.org/faqs/1210/
- ServiceTitan — AI Voice Agent for Basic Phones and Phones Pro: FAQ. Supplier documentation distinguishing call classification from job records. https://help.servicetitan.com/v1/docs/ai-voice-agent-for-basic-phones-and-phones-pro-faq
- Retell AI — Transfer Call Tool. Supplier documentation of transfer configurations. https://docs.retellai.com/build/single-multi-prompt/transfer-call
- Retell AI — Pricing. Supplier-specific billing boundaries; not a market benchmark. https://www.retellai.com/pricing
- Li, Chen and Wei — Aegis: Towards Governance, Integrity, and Security of AI Voice Agents, February 2026. Research scenarios addressing authentication bypass, privacy leakage and privilege escalation; not proof of any supplier’s production failure rate. https://arxiv.org/abs/2602.07379