What website does Salesforce need for 10DLC SMS registration?

This page is for Salesforce admins and marketers setting up US texting in Marketing Cloud (MobileConnect) or Service Cloud Digital Engagement. Salesforce has several SMS products, and each has a slightly different path. The website checks are the same across all of them.

10DLC Site is not affiliated with or endorsed by Salesforce. Provider names are used only to describe where information goes. This page describes the flow as documented at the time of writing (Updated September 2026). Screens change, so follow what you see in your org.

Which registration does Salesforce use, and who submits it?

Salesforce supports 10DLC long codes and short codes for US SMS, and toll-free for Digital Engagement Messaging. Who submits depends on your product.

For 10DLC, Salesforce describes three separate requests: a brand request, a campaign request, and a code request. You must vet the brand before a 10DLC is allocated. Salesforce's Digital Engagement article says that since February 1, 2025, unregistered traffic is blocked by carriers.

Where do the website, privacy and terms URLs go in Salesforce?

In Marketing Cloud Next, go to Setup, search for Regulatory Compliance, and use the tabs there.

The brand request also asks for the company name exactly as the IRS has it, the EIN, a public-facing brand name, and a street address. Salesforce says PO boxes are not allowed.

What does Salesforce check on your website?

Salesforce's campaign guide and rejection code list spell out what reviewers look for:

1. A working website that resolves, has a valid certificate, and matches the registered business.
2. A privacy policy at a direct link that is actually a privacy policy. It must say that no mobile information will be sold or shared with third parties for marketing purposes.
3. Opt-in language on the website if you collect numbers there, and the direct URL of the page with the form.
4. Full disclosures on the form: brand name, message types, frequency, message and data rates, HELP, STOP, and how to find the privacy policy.
5. Prior express written consent for marketing and promotional campaigns.

For short codes, Salesforce's US guide also says the call to action should link to terms that include the privacy policy and help information, with STOP and HELP shown clearly.

Why was my Salesforce 10DLC campaign rejected?

Salesforce publishes its own long code rejection codes. These are the ones tied to your website.

Salesforce's campaign help page also names three common reasons: a vague opt-in flow description, sample texts without STOP instructions, and a broken or non-compliant privacy policy link.

How long does review take, and can I resubmit?

Salesforce's US sending guide estimates 1 to 4 weeks to provision a 10DLC and 10 to 12 weeks for a short code. It warns that holidays and carrier freeze periods can add delays. In Marketing Cloud Next, brand requests can take up to 5 business days and campaign requests up to 10 business days.

A rejected Marketing Cloud Next request moves to Waiting for Customer. Use Edit and Resubmit Request from the row menu. Salesforce says that after two rejections it emails your support contact. Salesforce does not list registration fees in these articles, so ask your account representative.

Salesforce-specific gotchas

• Your org's add-ons come first. Salesforce says you must have the SMS add-ons before you can request codes, brands or campaigns.
• Toll-free is a separate track. Digital Engagement toll-free verification asks for a corporate website URL, opt-in screenshots or URLs, and proof that you collected consent directly. Salesforce says it takes about 1 to 2 weeks. See toll-free verification.
• Resellers cannot register for clients. Salesforce's toll-free article says verification is for the end business sending the traffic, not the reseller.
• Verbal and paper opt-ins need proof. Salesforce has separate codes for verbal scripts missing the brand name, frequency, rates, STOP or HELP.

How do I get a website that passes Salesforce review?

1. Use a live site that shows your legal business name. See brand name match.
2. Show your services and contact details on your own domain. See business contact info.
3. Use a valid SSL certificate on every page. See SSL and HTTPS.
4. Publish a privacy policy with a no-sharing statement for mobile data. See privacy policy.
5. Publish SMS terms with STOP, HELP, frequency and rates. See SMS terms.
6. Put an opt-in form with full disclosures on a page you can link directly. See opt-in form.
7. Remove parked or placeholder pages. See no parked sites.

10DLC Site builds these pages and gives you the URLs to paste into Salesforce. You still submit the brand and campaign requests yourself, and carriers make the final decision.

Included in your Registration Kit: the campaign description, call-to-action and opt-in flow text, and sample messages written for your use case, plus your website, privacy policy, terms and opt-in page URLs, ready to paste into Salesforce's brand and campaign requests. Build my order →

Sources

• Salesforce Help: Guide for Sending SMS Messages to the United States (MobileConnect)
• Salesforce Help: Request a 10DLC Brand for the United States or Canada (Marketing Cloud Next)
• Salesforce Help: Request a 10DLC Campaign (Marketing Cloud Next)
• Salesforce Help: A2P 10DLC Campaign Guide
• Salesforce Help: Salesforce Campaign Rejection error codes for LONG CODE
• Salesforce Help: Digital Engagement Messaging, US A2P 10DLC Changes and Registration
• Salesforce Help: 10DLC Registration Instructions (Digital Engagement)
• Salesforce Help: Digital Engagement Messaging, Toll Free Registration
• Salesforce Help: Engagement, FAQ for SMS Codes in Marketing Cloud Engagement

Not sure if your current site is ready? Compare it with the 10DLC website requirements, or see pricing for a site built for 10DLC review.