For clients running a vendor review, and for regulators: how Key 2 Recovery is licensed and the rules we follow.

Licensed to collect nationwide

Key 2 Recovery, Inc. is licensed to collect nationwide. We hold a collection license or registration in every state that requires one. Many states don't issue a license number at all, so the list of numbers below is short; it is not a list of the only states where we can collect. Copies of any state license or registration are available on request. Key 2 Recovery, Inc. is incorporated in Ohio, with its principal office at 251 W. Garfield Rd., Suite #289, Aurora, OH 44202. State license numbers issued to us include:

California10615-99 (Department of Financial Protection and Innovation)
ColoradoCAR-1000349
ConnecticutCCA-1153773
Illinois017.021433
Washington603-332-585

Rules we follow

  • The Fair Debt Collection Practices Act and Regulation F
  • State collection laws, including California's Rosenthal Act
  • The Telephone Consumer Protection Act for calls and texts
  • The ACA Code of Ethics
  • PCI/DSS standards for card payments

Consumer notices, including dispute and validation rights, are on our Disclosures and Disclaimers page.

Issuing an RFP or running a vendor review? Send it to info@key2recovery.com and we'll respond with what your review requires.

Contact our team

Security, independently audited

Key 2 Recovery's security controls and card-payment handling are checked by outside auditors, not just by us.

SOC 2 Type 2An independent CPA firm examined our security controls over a nine-month period, September 16, 2025 to June 1, 2026, against the AICPA Trust Services Criteria for Security. Its report, dated June 10, 2026, found the controls suitably designed and operating effectively, with no exceptions noted.
PCI DSS v4.0.1: CompliantA full assessment as a service provider (SAQ D), with a PCI Qualified Security Assessor. Our Attestation of Compliance was signed June 10, 2026.

How card payments are protected

Card details are entered on pages hosted by a PCI DSS-validated payment gateway, which captures, encrypts and processes them. Our systems never receive or store full card numbers, only a token and the last four digits.

Documents available for vendor review

  • SOC 2 Type 2 report (may require a nondisclosure agreement)
  • PCI DSS Attestation of Compliance
  • State collection license copies

Send RFPs and document requests to info@key2recovery.com, or call 888.402.5392.

Request documents

Security audits and professional memberships

  • SOC 2 Type 2 audited
  • PCI DSS compliant
  • ACA International member
  • Key 2 Recovery, Inc. BBB Business Review
  • COHEAO member
  • NACUBO member
  • NYSOBBA member
  • FABSAA member
  • THEBO member
  • Ohio Bursars Association member
  • KASRO member
  • ACA International, the Association of Credit and Collection Professionals. We follow its Code of Ethics.
  • COHEAO, the Coalition of Higher Education Assistance Organizations
  • NACUBO, the National Association of College and University Business Officers
  • NYSOBBA, FABSAA, THEBO, the Ohio Bursars Association and KASRO: bursar and business officer groups in New York, Florida, Texas, Ohio and Kentucky
  • BBB Accredited Business. See our BBB profile