For 10DLC registration with any provider, have four URLs ready: your business homepage, a privacy policy, terms and conditions with SMS terms, and a public opt-in page. The Campaign Registry's campaign form has fields for privacy and terms links and a Call-to-Action / Message Flow description that explains how people opt in.
Every messaging provider sends 10DLC registrations to the same place: The Campaign Registry (TCR). Each provider's screens look different, but the information underneath is the same. If you prepare these four URLs once, you can paste them into any provider's form.
10DLC Site is not affiliated with or endorsed by The Campaign Registry or any provider named here. Provider names are used only to describe where information goes. This page describes the flow as documented at the time of writing (Updated September 2026). Screens change, so follow what you see in your account.
TCR's CSP User Guide (October 2025) lists these campaign fields. Your provider collects them and passes them on.
| TCR field | What it means for your website |
|---|---|
| Campaign Description | What your texts are about. It should match what your website says you do. |
| Call-to-Action / Message Flow | How people opt in. TCR says it must be explicitly clear and list all opt-in methods. Link your opt-in page here. |
| Terms & Conditions Link | Your terms page with SMS terms |
| Privacy Policy Link | Your privacy policy page |
| Multimedia upload | Evidence of your call-to-action, privacy policy, or terms (up to 10MB per file, 5 files per campaign) |
| Sample messages | At least 1, up to 5. Some use cases, including Marketing and Mixed, need at least 2. |
| Subscriber Opt-in | Mandatory except for machine-to-machine. Includes opt-in keywords and an opt-in message. |
| Subscriber Opt-out | Mandatory except 2FA and machine-to-machine. Keywords prefilled with STOP, and an opt-out message is mandatory. |
| Subscriber Help | Keywords prefilled with HELP, and a help message is mandatory |
| Embedded link | Says whether texts contain links. Public URL shorteners like bitly or tinyurl are not accepted. |
TCR notes that the privacy and terms link fields are optional in TCR, but having a compliant privacy policy and compliant terms is required. TCR also says it is "not a compliance house," and points to CTIA guidance and your provider's partners.
Here is a template you can adapt. Replace everything in [brackets]. This is sample language, not legal advice; adapt it to your business.
Customers opt in to texts from [Business Name] by visiting [https://yourdomain.com/opt-in]
and entering their phone number in the signup form. The form has a separate, unchecked
checkbox for SMS consent. It is not required to submit the form. Next to the checkbox,
the form says they agree to receive [type of messages, e.g. appointment reminders] from
[Business Name], message frequency varies, message and data rates may apply, reply STOP
to opt out, and reply HELP for help. The form links to our Privacy Policy
[https://yourdomain.com/privacy] and Terms [https://yourdomain.com/terms].
[If you have other opt-in methods, describe each one here, such as a keyword people text
to [phone] or a paper form at [location], with a public link to a photo of it.]
After opting in, customers receive a confirmation text naming [Business Name], how often
we text, how to get help, and how to opt out.
Keep it within your provider's length limit. Twilio lists 40 to 2,049 characters for Message Flow, and Telnyx lists 40 to 2,048.
This table uses only what each provider documents. A blank means we could not verify it, not that it does not exist. Fees change, so check current pricing.
| Provider | Privacy and terms URL fields documented? | Fee per vetting event or resubmission | Documented timeline |
|---|---|---|---|
| Twilio | Yes: Console fields (Feb 18, 2026); required for new API campaigns after June 30, 2026 | Vetting fee assessed once per campaign (error 30922) | Campaigns typically several days, currently 10 to 15 days |
| Telnyx | Yes: Privacy Policy URL and Terms and Conditions URL | $15 per submission or resubmission | Carrier review typically 72 business hours after Telnyx approval |
| Bandwidth | Yes: added in App and API on Jan 29, 2025 | $15 for rejected campaigns needing resubmission | Not stated |
| Sinch | Yes: privacy policy link, terms link, website | Not verified | Not verified |
| Plivo | Terms and privacy links required in the call-to-action | $15 campaign vetting | Brand decisions usually a few days |
| Vonage | Terms and privacy links required in the call-to-action; URL Samples list | $15 per vetting event, charged again on re-vet | Not stated |
| SignalWire | Campaign wizard has Legal and Terms and Conditions steps | Not verified | 3 to 5 business days overall |
TCR's main users are Campaign Service Providers (CSPs). They register brands and campaigns on behalf of businesses. Resellers and software platforms (often called ISVs) also register through a CSP, so the same fields and the same four URLs apply. See CSP.
The brand must be your business, not the platform. Twilio's error 30907 flags cases where an ISV submitted its own platform website instead of the customer's. Bandwidth says the brand must be the actual sender, not the software behind it.
Use this checklist:
If you are already rejected, start with the requirements hub or opt-in not verifiable.
10DLC Site builds these pages and gives you the exact four URLs to paste into your provider's form. You still submit the registration yourself, and carriers make the final decision.
Want to know which of the four URLs your site is missing? Run the free site checker, or see pricing.
A new .com with hosting, SSL, a privacy policy that covers SMS, SMS terms and a compliant opt-in form, built to the requirements on this page. You submit your own 10DLC registration, and no one can guarantee approval, but a reviewer will have nothing on your site to flag.
One-time price · 14-day money-back guarantee · Daily Compliance Watch
The link fields are optional in TCR itself, but TCR says a compliant privacy policy and compliant terms are required. Some providers, like Twilio for new API campaigns after June 30, 2026, make the URLs mandatory.
No, TCR says public URL shorteners like bitly and tinyurl are not accepted for embedded links. CTIA says a shortener, if used, should be dedicated to the sender.
TCR requires at least 1 sample message and allows up to 5. Some use cases, including Marketing and Mixed, need at least 2.
Yes, resellers and software platforms register brands and campaigns through a Campaign Service Provider (CSP) in TCR, so the same fields apply. The website should be your business's site, not the platform's.
TCR's campaign form includes a multimedia upload for call-to-action, privacy, and terms evidence (up to 10MB per file, 5 files per campaign). Some providers differ: Vonage says it does not offer uploads and wants a public link.
The 8 website requirements reviewers check for A2P 10DLC: privacy policy, SMS terms, opt-in form, brand match, contact info, HTTPS...
How to build an SMS opt-in form reviewers accept: unchecked checkbox, optional consent, disclosure next to the box, privacy and te...
What your privacy policy must say for A2P 10DLC approval: the no-sharing SMS clause, frequency and rates, one policy only, plus sa...
Where your website, privacy policy, and terms URLs go in Twilio A2P 10DLC registration, what Twilio checks, and the error codes ti...
If reviewers cannot see how people agree to your texts, your 10DLC campaign gets rejected. Learn what proof they need and how to f...
A CSP (Campaign Service Provider) registers 10DLC brands and campaigns with The Campaign Registry for businesses. Learn what that...