Every messaging provider sends 10DLC registrations to the same place: The Campaign Registry (TCR). Each provider's screens look different, but the information underneath is the same. If you prepare these four URLs once, you can paste them into any provider's form.
10DLC Site is not affiliated with or endorsed by The Campaign Registry or any provider named here. Provider names are used only to describe where information goes. This page describes the flow as documented at the time of writing (Updated September 2026). Screens change, so follow what you see in your account.
TCR's CSP User Guide (October 2025) lists these campaign fields. Your provider collects them and passes them on.
| TCR field | What it means for your website |
|---|---|
| Campaign Description | What your texts are about. It should match what your website says you do. |
| Call-to-Action / Message Flow | How people opt in. TCR says it must be explicitly clear and list all opt-in methods. Link your opt-in page here. |
| Terms & Conditions Link | Your terms page with SMS terms |
| Privacy Policy Link | Your privacy policy page |
| Multimedia upload | Evidence of your call-to-action, privacy policy, or terms (up to 10MB per file, 5 files per campaign) |
| Sample messages | At least 1, up to 5. Some use cases, including Marketing and Mixed, need at least 2. |
| Subscriber Opt-in | Mandatory except for machine-to-machine. Includes opt-in keywords and an opt-in message. |
| Subscriber Opt-out | Mandatory except 2FA and machine-to-machine. Keywords prefilled with STOP, and an opt-out message is mandatory. |
| Subscriber Help | Keywords prefilled with HELP, and a help message is mandatory |
| Embedded link | Says whether texts contain links. Public URL shorteners like bitly or tinyurl are not accepted. |
TCR notes that the privacy and terms link fields are optional in TCR, but having a compliant privacy policy and compliant terms is required. TCR also says it is "not a compliance house," and points to CTIA guidance and your provider's partners.
Reviewers use the message flow to retrace the steps a customer takes. A strong one covers:
Vague flows, like one line saying customers sign up on the website, are a common reason for Twilio error 30909.
Included in your Registration Kit: the finished message-flow description written for your business, with your real opt-in URL and policy links filled in, ready to paste. Build my order →
Keep it within your provider's length limit. Twilio lists 40 to 2,049 characters for Message Flow, and Telnyx lists 40 to 2,048.
This table uses only what each provider documents. A blank means we could not verify it, not that it does not exist. Fees change, so check current pricing.
| Provider | Privacy and terms URL fields documented? | Fee per vetting event or resubmission | Documented timeline |
|---|---|---|---|
| Twilio | Yes: Console fields (Feb 18, 2026); required for new API campaigns after June 30, 2026 | Vetting fee assessed once per campaign (error 30922) | Campaigns typically several days, currently 10 to 15 days |
| Telnyx | Yes: Privacy Policy URL and Terms and Conditions URL | $15 per submission or resubmission | Carrier review typically 72 business hours after Telnyx approval |
| Bandwidth | Yes: added in App and API on Jan 29, 2025 | $15 for rejected campaigns needing resubmission | Not stated |
| Sinch | Yes: privacy policy link, terms link, website | $15 per campaign review, including resubmissions (from Sep 1, 2026) | Standard campaign review 3 to 5 business days |
| Plivo | Terms and privacy links required in the call-to-action | $15 campaign vetting | Brand decisions usually a few days |
| Vonage | Terms and privacy links required in the call-to-action; URL Samples list | $15 per vetting event, charged again on re-vet | Not stated |
| SignalWire | Campaign wizard has Legal and Terms and Conditions steps | Not verified | 3 to 5 business days overall |
TCR's main users are Campaign Service Providers (CSPs). They register brands and campaigns on behalf of businesses. Resellers and software platforms (often called ISVs) also register through a CSP, so the same fields and the same four URLs apply. See CSP.
The brand must be your business, not the platform. Twilio's error 30907 flags cases where an ISV submitted its own platform website instead of the customer's. Bandwidth says the brand must be the actual sender, not the software behind it.
Use this checklist:
If you are already rejected, start with the requirements hub or opt-in not verifiable.
10DLC Site builds these pages and gives you the exact four URLs to paste into your provider's form. You still submit the registration yourself, and carriers make the final decision.
Want to know which of the four URLs your site is missing? Compare it with our reviewer checklist, or see pricing.
A new .com with hosting, SSL, a privacy policy that covers SMS, SMS terms and a compliant opt-in form, built to the requirements on this page. You submit your own 10DLC registration, and no one can guarantee approval, but a reviewer will have nothing on your site to flag.
One-time price · 14-day money-back guarantee · Daily Compliance Watch