{
  "id": "BRD-143",
  "slug": "brd-143",
  "title": "A brand with no website must attach its policy document",
  "statement": "Where the brand registers no website, a compliant policy document must be attached to the registration or hosted at a public URL.",
  "rationale": "Every consent and disclosure requirement assumes a page a reviewer can open. A business with no website is not disqualified — plenty of legitimate senders have none — but it has to supply the same content some other way, and nothing on the form says so. The registration is refused for missing policies that the business would happily have provided.",
  "layer": "BRAND",
  "layerSlug": "brand",
  "object": "policy attachment",
  "severity": "BLOCKING",
  "detectability": [
    "DETERMINISTIC"
  ],
  "failureClass": "TERMINAL_POLICY",
  "artifact": "privacy_policy",
  "authorities": [
    "Alive5",
    "BeeTexting"
  ],
  "applicabilityText": "Applies to every 10DLC registration.",
  "universal": true,
  "remediation": "Publish the privacy policy and the SMS terms at a public URL — a hosted document, a Google Doc set to public, or a one-page site — and cite them on the registration. Done when both documents open in a browser with no login and are reachable from the registration.",
  "example": "policy_document_url: https://cdn.acmecoffee.com/compliance/sms-privacy-policy.pdf — where no website is registered",
  "pitfalls": [
    "A document behind a login, or one that downloads rather than displays, cannot be reviewed. The test is whether a stranger can read it in a browser."
  ],
  "phase": "approval",
  "automated": true,
  "url": "https://ekas.io/rules/10dlc/brand/brd-143/",
  "markdown": "https://ekas.io/rules/10dlc/brand/brd-143.md",
  "registry": "https://ekas.io/rules/10dlc/",
  "updated": "2026-07-25",
  "licence": "CC BY 4.0 — https://creativecommons.org/licenses/by/4.0/"
}