The terms should cover accounts and credentials
The requirementstatement
The terms of service must include a clause covering accounts, registration and credential security.
- Severityseverity
- LowLOWBest practice. Worth fixing, rarely fatal on its own.
- When it bitesphase
- Gates approvalapprovalGet this wrong and the brand or campaign is refused at registration.
- What is checkedobject
- terms of service body
- Where it liveslayer
- Policy pagesPOLICY_PAGE
- How Ekas settles itdetectability
- AI · formAI_FORM
- A semantic question about what you wrote: whether a description matches a use case, whether a name looks like a filed entity. Judged by a model against written criteria.
- What the fix involvesfailureClass
- Fix the policyTERMINAL_POLICY
- The fix lives in your privacy policy or SMS terms. Ekas can generate the missing clauses.
- Who requires itauthorities
- TCR
- When it appliesapplicabilityText
- Applies when the use case is NOT M2M.
Why this rule existsrationale
Where the service has logins, the account clause is what puts the duty to keep a password safe on the person who holds it — without it the business carries the whole risk of a compromised account. For a messaging programme it also matters that account settings are often where a subscriber manages their preferences.
How to fix itremediation
Add the accounts clause where the service has user accounts. Done when the document says who is responsible for a login and what happens when it is misused.
A compliant exampleexample
You are responsible for keeping your Acme Coffee account password secure and for anything done using your account. Tell us at once if you think someone else has used it.
Notesnotes
Conditional on the service having user accounts, which no applicability dimension expresses; the excludeUseCases tag only keeps it away from machine-to-machine programmes, and the criteria carry the real condition.
Rules you will hit next
6 other rules read terms of service body. Fixing one field to satisfy a single rule is how a resubmission trades one rejection for another, so read these before you change anything.
POL-200The terms need an acceptance clauseMediumMEDIUMPOL-202The terms should state a minimum ageMediumMEDIUMPOL-205A retail brand's terms should cover orders and paymentMediumMEDIUMPOL-207The terms should include an acceptable-use clauseMediumMEDIUMPOL-213The terms should allocate riskMediumMEDIUMPOL-215The terms should state governing law and venueMediumMEDIUM
POL-203 is one of 157 policy pages rules in the 915-rule 10DLC registry. Free to cite under CC BY 4.0.