brand_background_check

Verifies the submitted EIN and business information align with public records. POC Name and Address may be included in the check.

legalName, businessIdentifier, registeredBusinessAddress (must be US)

``

—

brand_online_presence_check

Crawls the submitted website to produce a structured summary of the organization's commercial activities for use by downstream checks. Verifies that the site resolves publicly and plausibly belongs to the submitting organization.

businessWebsiteUrl, legalName

—

—

poc_email_domain_check

Verifies that the POC email address uses a domain consistent with the submitting organization's website.

brandPocEmail, legalName, businessWebsiteUrl

brand_online_presence_check

privacy_policy_check

Verifies that the privacy policy URL is accessible, belongs to the submitting organization, and contains substantive privacy content. Specifically checks for an explicit clause that SMS opt-in data and consent will not be shared with third parties. Generic data collection language without this SMS-specific clause fails. If the URL is valid but content cannot be retrieved, the step returns SKIPPED with justification.

privacyPolicyUrl, legalName, businessWebsiteUrl

brand_online_presence_check

terms_of_service_check

Verifies that the TOS URL is accessible and contains substantive terms belonging to the submitting organization. Checks for the five required SMS elements: brand or program name, 'message and data rates may apply', message frequency disclosure, STOP opt-out instructions, and HELP or support contact. If the URL is valid but content cannot be retrieved, the step returns SKIPPED with justification.

If ageGated=true, verifies that the TOS documents age-verification requirements and double opt-in. Evaluates only policy language not the full age-gate implementation.

Checks that the TOS contains or links to a prohibition on sharing subscriber data with third parties for marketing purposes, and that the TOS links to the privacy policy

termsOfServiceUrl, legalName, businessWebsiteUrl, ageGated

brand_online_presence_check

opt_in_method_check

Validates the opt-in description for completeness against optInMethod and checks that all declared image URLs are publicly accessible. The description must clearly explain how and where consent is collected, including a direct URL for web-based opt-in flows. PAPER_FORM and IMPORT methods cannot be automatically evaluated and returns SKIPPED with a justification in the response.

If SMS_KEYWORD =true, checks that the keyword appears in the optInDescription.

If mixedUseCase=true, checks that separate opt-in descriptions exist for each declared use case and that they are substantively different from each other. Also evaluates the production message content for signals of multiple message types that would contradict a mixedUseCase=false declaration.

optInMethod, optInDescription, optInImageUrls,optInUrl, optInKeywords, verbalOptInScript, mixedUseCase, useCase1Description, useCase2Description, optInDescription2, sampleMessage

opt_in_message_check

Checks that the opt-in confirmation message — the auto-reply sent to subscribers who opt in via SMS keyword — contains all five CTIA-required disclosure elements. Verifies that the brand is clearly identified using either the legal name or DBA name. Checks that the message instructs the subscriber how to get help (HELP keyword or equivalent). Checks that the message instructs the subscriber how to opt out (STOP keyword or equivalent).

Checks that the message discloses message frequency (e.g., "msg frequency varies" or a specific count).

Checks that the message includes the "message and data rates may apply" disclosure.

optInMessage, legalName, dbaName, optInKeywords

opt_out_message_check

Checks that the STOP response message contains the brand name and clearly confirms the user has been unsubscribed with no further messages sent.

optOutMessage, legalName

help_message_check

Evaluates whether the HELP response contains appropriate brand identification and a meaningful support contact. Evaluates whether the message would reasonably help a recipient find support.

helpMessage, legalName, businessWebsiteUrl

brand_online_presence_check

use_case_consistency_check

Checks that the use case summary, production message content, and website describe a consistent messaging program.

Cross checks reported message volume is consistent with selected use case.

When POLITICAL_ELECTION_CAMPAIGN is included in useCase, the findings field will indicate the requirement of a CV token for submission..

useCase, useCaseSummary, sampleMessage, messageVolume, businessWebsiteUrl

prohibited_use_case_check

Checks website content and useCaseSummary for prohibited use case signals: payday and short-term lending, cryptocurrency trading, MLM and pyramid schemes, debt relief services, third-party debt collection, high-risk financial content, affiliate marketing / lead generation signals and third-party job board references. Also checks for NMLS license number.

businessWebsiteUrl, useCaseSummary, directLending, affiliateMarketing, sampleMessage

shaft_content_check

Screens website content and the production message for signals across SHAFT categories: Sex, Hate, Alcohol, Firearms, Tobacco/Vape, Cannabis/CBD. .

businessWebsiteUrl, sampleMessage, ageGated