brand_background_check

Submits the organization name, EIN, and address to a third-party verification service and returns the result. Feedback includes specific reasons for any failure, such as EIN mismatch, invalid EIN, or unresolvable address.

legalName, businessIdentifier, registeredBusinessAddress (must be US)

_`

—

brand_online_presence_check

Crawls the submitted website to produce a structured summary of the organization's commercial activities — primary products or services, industry, and market scope. Also verifies that the site resolves publicly and plausibly belongs to the submitting organization.

businessWebsiteUrl, legalName

—

—

poc_email_domain_check

Verifies that the POC email address uses a domain consistent with the submitting organization's website.

brandPocEmail, legalName, businessWebsiteUrl

_

brand_online_presence_check

privacy_policy_check

Verifies that the privacy policy URL is accessible, belongs to the submitting organization, and contains substantive privacy content. The policy must not be a template, placeholder or another company's policy. Checks for an explicit clause stating that the organization does not share SMS opt-in data or consent with third parties. If the URL is valid but the step cannot retrieve content, the step returns SKIPPED.

privacyPolicyUrl, legalName, businessWebsiteUrl

brand_online_presence_check

terms_of_service_check

Verifies that the TOS URL is accessible and contains substantive terms that belong to the submitting organization

Checks for the required SMS elements: brand or program name, "message and data rates may apply", message frequency disclosure, STOP opt-out instructions, and HELP or support contact information.

Checks that the TOS contains or links to a prohibition on sharing subscriber data with third parties for marketing purposes. Also checks that the TOS links to the privacy policy.

If the URL is valid but the step retrieve content, the step returns SKIPPED.

If ageGated=true, verifies that the TOS documents age-verification requirements and double opt-in.

termsOfServiceUrl, legalName, ageGated, businessWebsiteUrl

brand_online_presence_check

opt_in_method_check

Validates that the opt-in mechanism includes all required opt in disclosures: brand name, message type description, frequency disclosure, MDRA, HELP instructions, and STOP instructions.

For WEB_FORM and QR_CODE: fetches the opt-in page and checks for SMS-specific consent language that is separate from general TOS acceptance.

For SMS_KEYWORD: verifies that optInDescription defines the keyword.

For VERBAL, IVR, PAPER_FORM and POINT_OF_SALE: checks that the URL provided contains content that covers the required disclosures.

optInMethods, optInMethodURLs, optInDescription, optInKeywords

opt_in_message_check

Checks that the opt-in confirmation message contains all five CTIA-required disclosure elements. Verifies that the message clearly identifies the brand using either the legal name or DBA name. Checks that the message tells the subscriber how to get help (HELP keyword or equivalent), how to opt out (STOP keyword or equivalent) and how often to expect messages. Also checks that the message includes the "message and data rates may apply" disclosure.

optInMessage, legalName, dbaName, optInKeywords

opt_out_message_check

Checks that the STOP response message contains the brand name and confirms that the user has been unsubscribed. The message must also state that the user receives no further messages. Validates that optOutKeywords includes at least one keyword.

optOutMessage, optOutKeywords, legalName

help_message_check

Evaluates whether the HELP response contains appropriate brand identification and a meaningful support contact.

Validates that at least helpKeywordsdefines at least one keyword.

helpMessage, helpKeywords, legalName, businessWebsiteUrl

brand_online_presence_check

campaign_description_check

Checks that the campaign description clearly identifies the brand, explains the messaging program purpose, specifies who sends and who receives messages, and and is consistent with the declared use cases.

campaignDescription, useCase, subUseCases, legalName

sample_messages_check

Checks each sample message for the following: brand or display name present; opt-out language in at least one message; public URL shorteners; and embeddedLink consistency with URLS in message bodies.

If ageGated=true, verifies that sample messages include age-gating language.

Evaluates sampleMessages[n].content for placeholders.

sampleMessages, sampleMessage[n].content, sampleMessage[n].useCase, legalName, embeddedLink, embeddedPhone, ageGated

use_case_consistency_check

Cross-checks the declared use case against the campaign description, sample messages, and website content to detect mismatches. Evaluates the messaging purpose implied by each input and compares against the declared use case.

useCase, subUseCases, campaignDescription, sampleMessages, businessWebsiteUrl

shaft_content_check

Screens website content and sample messages for signals across SHAFT categories: Sex, Hate, Alcohol, Firearms, Tobacco/Vape, and Cannabis/CBD. Checks alcohol and tobacco content for age-gated requirements.

businessWebsiteUrl, sampleMessages, ageGated

prohibited_use_case_check

Checks website content and campaign description for prohibited use case signals: payday and short-term lending, cryptocurrency trading, MLM and pyramid schemes, debt relief services, third-party debt collection, high-risk financial content, affiliate marketing or lead generation, and third-party job board references. Also checks for an NMLS license number. Uses brandVerticalType to flag high-risk verticals like GAMBLING or FINANCIAL for additional scrutiny.

businessWebsiteUrl, campaignDescription, directLending, brandVerticalType, affiliateMarketing, sampleMessages