C
CellMateAI
Legal & Compliance
Legal & Business Formation Guide

Compliance & LLC Formation

Operating in the correctional communications space requires careful attention to federal and state regulations. This guide covers everything you need to operate CellMateAI legally and professionally.

Disclaimer: This is informational guidance, not legal advice. Consult a licensed attorney before operating in your jurisdiction.

Step 1: Form Your LLC

Before signing any facility contracts or accepting payments, you need a legal business entity. An LLC protects your personal assets and is required for most B2B contracts.

1

Choose Your State

$90 filing fee

Delaware and Wyoming are the most business-friendly states for LLCs. Delaware is preferred for future VC investment.

File online at Delaware Division of Corporations
2

File Articles of Organization

$50–$150/year for registered agent

Register your LLC with the state. You'll need a registered agent in the state of formation.

Use a registered agent service (Northwest, Registered Agents Inc.)
3

Get an EIN

Free

Employer Identification Number from the IRS. Required for bank accounts, taxes, and contracts.

Apply free at IRS.gov — takes 5 minutes online
4

Open a Business Bank Account

Free

Keep business and personal finances separate. Required for facility contracts and investor due diligence.

Mercury Bank is ideal for startups — no fees, great API
5

Draft an Operating Agreement

$99–$500

Defines ownership percentages, decision-making authority, and what happens if a partner leaves.

Use a lawyer or LegalZoom for a basic operating agreement
6

Get Business Insurance

$50–$200/month

General liability + E&O (Errors & Omissions) insurance. Required for facility contracts.

Next Insurance or Hiscox for startup-friendly coverage

Step 2: Regulatory Compliance

Prison communications are heavily regulated. These are the key compliance areas you must address before operating.

CIPA Compliance

Communications Assistance for Law Enforcement Act

Required
  • All calls must be logged and available to law enforcement upon valid legal request
  • Facility administrators must be able to access call records
  • No encryption that prevents lawful interception
  • User consent notice must be played at the start of each call
FCC Regulations

Federal Communications Commission — Prison Phone Rules

Required
  • Rate caps for intrastate calls: $0.21/min (prisons), $0.31/min (jails)
  • No mandatory flat fees or ancillary service charges without consent
  • Billing transparency: itemized statements required
  • Refund policy for unused prepaid balances
HIPAA Considerations

Health Insurance Portability and Accountability Act

Recommended
  • Mental health conversations may constitute PHI (Protected Health Information)
  • Implement minimum necessary standard for data access
  • Business Associate Agreements (BAA) with cloud providers
  • Incident response plan for potential data breaches
State-Specific Laws

California, Texas, Florida, New York

Varies by State
  • CA: CCPA data privacy rights apply to inmate family members
  • TX: Texas Penal Code §38.11 — contraband phone restrictions
  • FL: Florida Statute §944.47 — unauthorized communications
  • NY: NY Correction Law §623 — phone access requirements

Step 3: Privacy & Terms Requirements

Your Privacy Policy and Terms of Service must cover these specific areas for prison communications platforms.

Privacy Policy must disclose call recording and monitoring
Terms of Service must include content moderation policies
COPPA compliance — no users under 13
Data retention policy — how long call logs are stored
Right to deletion — process for removing user data
Cookie consent banner for EU visitors (GDPR)
California Privacy Rights notice (CPRA/CCPA)
Security measures disclosure (encryption, access controls)

Step 4: Facility Contract Requirements

Before signing a facility contract, you'll need these documents and certifications in place.

LLC Certificate of Good Standing

Issued by your state — proves your LLC is active and in compliance.

General Liability Insurance

Minimum $1M per occurrence. Most facilities require this before signing.

Data Security Policy

Written policy covering how call data is stored, accessed, and protected.

Background Check Policy

Policy for vetting employees who have access to inmate data.

Call Recording Disclosure

Script for the consent notice played at the start of each call.

Uptime SLA

Service Level Agreement guaranteeing system availability (99.9% recommended).

Need Help Getting Started?

Our team can connect you with lawyers who specialize in prison communications compliance and help you navigate the facility contract process.

Questions? Chat with AI 🤖

CellMateAI Assistant

AI-powered · Always online

Hey! 👋 I'm the CellMateAI assistant. I can answer questions about our service, pricing, how to subscribe, or how to partner with us as a facility. What's on your mind?

Enter to send · Shift+Enter for new line