# BRD-149 — The opt-in evidence must be on the brand's own domain

> The website domain shown in the opt-in evidence must match the brand's registered domain.

- **Rule ID:** BRD-149
- **Layer:** Brand (`BRAND`)
- **Checks:** `evidence domain vs brand.website`
- **Severity:** HIGH — Rejected by at least one carrier or provider, and a common cause of failure at the rest.
- **When it bites:** Gates approval — get this wrong and registration is refused
- **How it is detected:** Deterministic (settled in code from the submitted values)
- **Fix type:** Fix the field — a better value in the form clears it
- **Required by:** Twilio
- **Applies:** Applies to every 10DLC registration.
- **Canonical URL:** https://ekas.io/rules/10dlc/brand/brd-149/

## Why this rule exists

Opt-in evidence naming a different company than the brand is the single clearest sign that the wrong entity was registered — the consent belongs to whoever is named on the page, and that is not the brand being registered. It is also what an ISV registration looks like from the outside, which is why reviewers treat it as decisive rather than as a filing error.

## How to fix it

Attach evidence captured on the brand's own site. If the opt-in genuinely happens on another company's domain, that company is the brand — register them instead. Done when the domain visible in the evidence and the registered website are the same business.

## Example of a compliant value

```text
evidence: https://cdn.acmecoffee.com/compliance/checkout-optin.png · website: https://acmecoffee.com — the same registrable domain
```

## Common mistakes

- A CDN or asset subdomain of the brand's own domain is fine; a hosting service on somebody else's domain is not, because the reviewer cannot tell whose page it was.

## Provider rejection codes

| Provider | Code | Resubmission allowed |
| --- | --- | --- |
| Twilio | `30927` | yes |

## Notes

Compares the registrable domain of each hosted artifact against the brand website. What it cannot see is the domain rendered INSIDE a screenshot — an artifact hosted on the brand's CDN can still show another company's checkout — so a PASS here is a necessary condition rather than a sufficient one, and the vision rules judge the picture itself.