# BRD-143 — A brand with no website must attach its policy document

> Where the brand registers no website, a compliant policy document must be attached to the registration or hosted at a public URL.

- **Rule ID:** BRD-143
- **Layer:** Brand (`BRAND`)
- **Checks:** `policy attachment`
- **Severity:** BLOCKING — Breaking this rule gets the submission rejected outright.
- **When it bites:** Gates approval — get this wrong and registration is refused
- **How it is detected:** Deterministic (settled in code from the submitted values)
- **Fix type:** Fix the privacy policy or SMS terms
- **Required by:** Alive5, BeeTexting
- **Applies:** Applies to every 10DLC registration.
- **Canonical URL:** https://ekas.io/rules/10dlc/brand/brd-143/

## Why this rule exists

Every consent and disclosure requirement assumes a page a reviewer can open. A business with no website is not disqualified — plenty of legitimate senders have none — but it has to supply the same content some other way, and nothing on the form says so. The registration is refused for missing policies that the business would happily have provided.

## How to fix it

Publish the privacy policy and the SMS terms at a public URL — a hosted document, a Google Doc set to public, or a one-page site — and cite them on the registration. Done when both documents open in a browser with no login and are reachable from the registration.

## Example of a compliant value

```text
policy_document_url: https://cdn.acmecoffee.com/compliance/sms-privacy-policy.pdf — where no website is registered
```

## Common mistakes

- A document behind a login, or one that downloads rather than displays, cannot be reviewed. The test is whether a stranger can read it in a browser.