{
  "id": "POL-027",
  "slug": "pol-027",
  "title": "The policy URLs must stay live after approval",
  "statement": "The registered privacy policy and terms URLs must remain reachable after the campaign is approved.",
  "rationale": "Approval is not the end of the checking: the URLs are re-crawled afterwards, and a page that disappears triggers re-vetting rather than a request to restore it. Sites get redesigned and paths get renamed months later by people who have never heard of the registration, so the failure arrives long after anyone connects it to a cause.",
  "layer": "POLICY_PAGE",
  "layerSlug": "policy-page",
  "object": "registered policy URLs after approval",
  "severity": "MEDIUM",
  "detectability": [
    "UNDETECTABLE_PRE_SUBMISSION"
  ],
  "failureClass": "TERMINAL_EXTERNAL",
  "authorities": [
    "Twilio",
    "TCR"
  ],
  "codes": [
    {
      "provider": "Twilio",
      "code": "30908",
      "remediable": true,
      "generation": "gen1"
    }
  ],
  "applicabilityText": "Applies to every 10DLC registration.",
  "universal": true,
  "remediation": "Keep both URLs live for the life of the campaign, and redirect rather than delete if a path has to change. Done when the registered links still open the documents months after approval.",
  "notes": "Absorbs OPS-269, which states the same monitoring duty with its re-vetting consequence. Nothing at submission time can settle it. The user has to add the two registered URLs to whatever they use to watch their own site, and to treat a redesign as a registration event.",
  "catalogIds": [
    "OPS-269"
  ],
  "phase": "post",
  "automated": false,
  "attestation": {
    "question": "Are the two registered policy URLs on whatever you use to monitor your own site, and does a redesign count as a registration event?",
    "howToCheck": [
      "Add both URLs to your uptime or link monitoring.",
      "Redirect rather than delete if a path has to change.",
      "Tell whoever owns the site that these two paths are registered, because they will be renamed by someone who has never heard of the registration."
    ],
    "failureLooksLike": "A redesign renames a path months after approval. The re-crawl finds nothing, triggers re-vetting rather than a request to restore it, and nobody connects the two events."
  },
  "url": "https://ekas.io/rules/10dlc/policy-page/pol-027/",
  "markdown": "https://ekas.io/rules/10dlc/policy-page/pol-027.md",
  "registry": "https://ekas.io/rules/10dlc/",
  "updated": "2026-07-25",
  "licence": "CC BY 4.0 — https://creativecommons.org/licenses/by/4.0/"
}