Bandwidth campaign registration has Privacy Policy and Terms and Conditions fields in the Bandwidth App and API, added January 29, 2025. Bandwidth says reviewers look at your website, and it lists missing online presence, weak privacy policies, and missing terms among common rejection reasons.
Bandwidth passes your campaign to aggregators and carriers for vetting. Bandwidth says aggregators review websites tied to your campaign, and they may search for a website even if you did not submit one. If they find prohibited content anywhere on the site, they can reject the campaign.
10DLC Site is not affiliated with or endorsed by Bandwidth. Provider names are used only to describe where information goes. This page describes the flow as documented at the time of writing (Updated September 2026). Screens change, so follow what you see in your account.
| URL | Where it goes in Bandwidth |
|---|---|
| Business website (homepage) | Brand details. Look for a field labeled something like "Website." |
| Privacy policy | Campaign registration, Privacy Policy field (in Campaign Details) |
| Terms and conditions (with SMS terms) | Campaign registration, Terms and Conditions field |
| Opt-in page or evidence | Campaign call-to-action or message flow. Bandwidth asks for a screenshot or written form of the opt-in. |
Here is what Bandwidth documents, in plain steps:
Bandwidth's support articles call out these points:
Bandwidth publishes a list of common rejection reasons. The ones tied to your website and policies are:
| Rejection reason (Bandwidth's list, paraphrased) | Fix page |
|---|---|
| Call to Action or Message Flow issues | Opt-in not verifiable |
| Lack of website or online presence | Website not accessible |
| Privacy policy deficiencies | Privacy policy missing SMS language |
| Terms and conditions missing | Missing SMS terms |
| Missing opt-out message | SMS terms |
| SHAFT-C content on the site | Content pages |
| KYC problems (brand is not the real sender) | Website does not match brand |
Bandwidth also lists campaign and content attribute errors. It says sole proprietor campaigns are auto-rejected because not all carriers accept them, and advises holding those submissions. Bandwidth does not publish numbered error codes in these articles.
Bandwidth says a $15 fee applies to rejected campaigns that need resubmission. Bandwidth's articles above do not give a review timeline. Check Bandwidth's current pricing and your account for up-to-date details.
Use this checklist before you submit:
10DLC Site builds these pages and gives you the exact URLs to paste into Bandwidth: homepage, privacy policy, terms, and opt-in page. You still submit the campaign yourself, and carriers make the final decision. For other providers, see the any-provider guide.
Curious how your site stacks up? Run the free site checker, or see pricing for a site built for 10DLC review.
A new .com with hosting, SSL, a privacy policy that covers SMS, SMS terms and a compliant opt-in form, built to the requirements on this page. You submit your own 10DLC registration, and no one can guarantee approval, but a reviewer will have nothing on your site to flag.
One-time price · 14-day money-back guarantee · Daily Compliance Watch
Bandwidth says the privacy policy link goes in Campaign Details. Since January 29, 2025, campaign registration in the Bandwidth App and API has had Privacy Policy and Terms and Conditions fields.
Not usually. Bandwidth's November 2024 requirements say the phone number cannot be a mandatory form field unless texting is the form's only purpose.
Yes, Bandwidth says a $15 fee applies to rejected campaigns that need resubmission. Check Bandwidth's current pricing, since fees change.
Bandwidth says you can provide social media or search presence, and attach your privacy policy and terms as PDFs if they are not online. Lack of website or online presence is on Bandwidth's list of common rejection reasons.
The 8 website requirements reviewers check for A2P 10DLC: privacy policy, SMS terms, opt-in form, brand match, contact info, HTTPS...
The four website URLs every 10DLC registration uses: homepage, privacy policy, terms, and opt-in page. The TCR field model plus a...
What your privacy policy must say for A2P 10DLC approval: the no-sharing SMS clause, frequency and rates, one policy only, plus sa...
What SMS terms need for A2P 10DLC: program name, message types, frequency, rates, HELP, STOP, and a public https page. Includes sa...
10DLC campaigns need public SMS terms on your own domain. Learn why missing terms cause rejection, what to include, and a sample t...
A 10DLC privacy policy needs a clear SMS no-sharing clause. See why campaigns get rejected for it, a sample clause, and how to res...