To simplify your experience and help you through the verification process, Rally Corp offers premade forms, QR codes, and keyword workflows with our widgets to help you stay compliant and get verified quickly and easily. If you need help getting any of these set up or if you have questions, please reach out to [email protected].
Note: This guide focuses on A2P 10DLC. Toll-free numbers go through a separate verification process, but the same opt-in evidence and disclosures described below apply to both.
Opt-In Flow Requirements
Consent must be explicit
Audience/Contacts must take a clear action to opt in (e.g., checking a box or sending a keyword via SMS).Opt-in checkbox must not be pre-checked
Consent must be an affirmative action taken by the user.Business/Organization name must be clearly stated
Especially in the checkbox label or near the phone number field (e.g., “I agree to receive messages from [Organization Name]”).Message purpose must be disclosed
Include a short description of the message type: updates, alerts, events, marketing/promotional content, etc. (If you are a for-profit business using Rally Corp for marketing purposes, please review this help document to ensure you are compliant and to help with the approval process)Opt-out instructions provided
Must include a clear line like “Reply STOP to unsubscribe.”Link to Privacy Policy and Terms of Service
These must be visible and accessible on the same page or within the form.Mobile carrier disclaimer
Example: “Message and data rates may apply. Message frequency may vary.”
Privacy Policy Requirements
Ensure your Privacy Policy contains:
A section stating SMS messages may be sent to opted-in users
Information about how users can opt out (e.g., reply STOP)
Statement that no mobile info will be shared with third parties for marketing
A note that subcontractors may assist in sending messages, only when necessary
Confirmation that opt-in and consent data is never sold or shared
Sample language:
“No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Opt-in and consent data is never sold or shared, and message content may be processed by our service providers solely to deliver your messages.”
Examples
Here is a working reference you can model your own flow on. Note that the opt-in form links to both the Privacy Policy and the Terms of Service, which is required.
Example opt-in form: forms.rally.so/f/demo-charity
Example SMS Terms & Conditions: view template
Example SMS Privacy Policy: view template
Text-to-Give and keyword ads: When you promote a keyword on a flyer, social post, or printed graphic, the image itself has to carry the disclosures a form normally would, because there's no checkbox page behind it. Include your organization name, "Msg & data rates may apply. Msg frequency varies," "Reply STOP to opt out, HELP for help," and a link or short URL to your Terms and Privacy Policy.
See this example here: https://canva.link/kynkh1bwzv9pf79
Messaging Content Checklist
Brand/business or organization name appears in the first message to the user
STOP instruction appears in your first message (and recurring messages if appropriate)
Messages are sent within permitted hours, generally between 8 AM and 9 PM in the recipient’s local time
No forbidden content types (e.g., SHAFT: sexual content, hate, alcohol, firearms, tobacco—unless properly age-gated and disclosed). Carriers also restrict or heavily vet other categories even with consent, including cannabis and CBD, payday and short-term loans, debt collection and credit repair, and gambling.
Extra Tips
Keep screenshots of your opt-in flow in a publicly accessible link for use during registration.
If you use Google Forms or third-party form builders, make sure links don’t require login.
Avoid using generic language like “I agree to receive texts” without identifying who they’re from.
Avoid public link shorteners like Bitly or TinyURL. They are strongly associated with spam and can trigger carrier filtering. Use a branded or dedicated short domain instead.
Some states (for example Texas, Virginia, and Florida) add their own SMS rules on top of federal requirements. If you message recipients in multiple states, review state-specific requirements for your program.
A/B tested landing pages or forms must also follow all of the above criteria—even if used briefly.
Industry Disclaimer
The telecommunications compliance landscape is constantly evolving. What passes review today may not pass 3–4 months from now. However, maintaining a checklist like this and reviewing it quarterly will help your team stay ahead of future changes and keep opt-in flows solid as the rules shift.
Related articles