{
  "id": "BRD-238",
  "slug": "brd-238",
  "title": "Re-vet annually",
  "statement": "Brand vetting must be renewed each year, with the 2FA verification completed again to the brand email on file.",
  "rationale": "A vet certifies the business as it was, and businesses move, rename and change hands — so the certification is time-boxed. The renewal goes to the email on file, which is often a person who has left, and the first sign that it lapsed is throughput dropping back to the unvetted tier.",
  "layer": "BRAND",
  "layerSlug": "brand",
  "object": "the vet age",
  "severity": "HIGH",
  "detectability": [
    "EXTERNAL_DATA"
  ],
  "failureClass": "TERMINAL_EXTERNAL",
  "authorities": [
    "Aegis",
    "CTIA"
  ],
  "applicabilityText": "Applies to every 10DLC registration.",
  "universal": true,
  "remediation": "Diary the re-vet a month before the anniversary and confirm the brand email still reaches somebody first. Done when the renewal completes before the existing vet expires, rather than after throughput drops.",
  "notes": "Flagged UNVERIFIED in the research — the annual cadence comes from a secondary source rather than from CTIA directly, so treat it as the prudent assumption rather than a published deadline. What the user has to do either way is keep the brand email monitored, since that is where the renewal lands.",
  "phase": "post",
  "automated": false,
  "attestation": {
    "question": "Do you know the vet's anniversary date, and does the brand email still reach somebody who will act on the renewal?",
    "howToCheck": [
      "Diary the re-vet a month before the anniversary.",
      "Check the brand email on file first — it is often a person who has left, and that is where the renewal and its 2FA land.",
      "Treat the annual cadence as the prudent assumption; the research flags it as a secondary source rather than a published deadline."
    ],
    "failureLooksLike": "The first sign the vet lapsed is throughput dropping back to the unvetted tier, weeks after the renewal mail went to a mailbox nobody reads."
  },
  "url": "https://ekas.io/rules/10dlc/brand/brd-238/",
  "markdown": "https://ekas.io/rules/10dlc/brand/brd-238.md",
  "registry": "https://ekas.io/rules/10dlc/",
  "updated": "2026-07-25",
  "licence": "CC BY 4.0 — https://creativecommons.org/licenses/by/4.0/"
}