Twilio Compliance & Deliverability Guides

A2P 10DLC is the mandatory framework governing business SMS on 10-digit long codes in the US. Without registration, carrier filtering can block up to 30% of your messages without any warning.

Brand registration is the first mandatory step in the A2P 10DLC process. Getting the details wrong here delays your entire campaign approval by weeks and triggers manual vetting reviews.

Campaign registration tells carriers exactly what kind of messages you plan to send and how recipients consented. The quality of your submission directly determines your approval odds and throughput score.

Choosing the wrong A2P 10DLC registration track caps your throughput and leaves you exposed to filtering. Here is exactly when to use Sole Proprietor and when to register as a Standard brand.

A2P 10DLC approval is not instant. Timelines differ by carrier and registration quality, and AT&T manual review alone can take two to four weeks. Plan your SMS launch schedule accordingly.

Campaign rejections halt your SMS program entirely until you resolve them. Most rejections fall into a handful of predictable categories that have clear fixes if you know what to look for.

Toll-free numbers used for SMS now require verification with the carrier before messages can be delivered at full throughput. This guide walks through the Twilio verification process from start to finish.

Toll-free SMS is no longer a compliance-free alternative to 10DLC. Carriers began blocking unverified toll-free traffic in 2023 and enforcement has only tightened through 2026.

Deliverability on Twilio SMS is not just about registration. List hygiene, content quality, sending patterns, and opt-in quality all influence whether your messages reach the intended recipient.

Carrier filtering is the silent killer of SMS campaigns. Understanding exactly what triggers it and how to avoid those triggers is essential for any business sending messages at scale on Twilio.

TCPA violations carry fines of $500 to $1,500 per text message. Understanding exactly what consent is required before you send is non-negotiable for any US SMS program.

A compliant SMS opt-in flow captures verifiable consent, stores it with a timestamped record, and gives subscribers a clear expectation of what they are agreeing to receive. Here is how to build one.

Mishandling opt-out keywords is both a TCPA violation and an A2P 10DLC policy breach. Carriers require that STOP, HELP, and CANCEL keywords produce specific responses and are processed immediately.

GDPR applies to SMS marketing sent to EU residents regardless of where your business is based. The consent standard is stricter than TCPA and penalties reach 4% of global annual turnover.

The Twilio Trust Hub is the central compliance interface for A2P 10DLC registration, toll-free verification, and regulatory compliance. Understanding how it works is essential for managing your SMS program.

Your A2P 10DLC trust score determines your SMS throughput limits and baseline carrier treatment. A score below 50 severely restricts your program before you send a single message.

International SMS compliance is not a single standard. Each country has its own consent requirements, sender ID rules, content restrictions, and registration systems that apply to every message you send.

WhatsApp Business through Twilio has strict content policies, template pre-approval requirements, and a 24-hour messaging window that fundamentally differ from SMS. Violations can result in account suspension.

Using SendGrid through Twilio does not automatically make your emails compliant with CAN-SPAM, CASL, or GDPR. Understanding what these laws require and how SendGrid helps you comply is essential.

SPF, DKIM, and DMARC are the three authentication layers that protect your sending domain and improve deliverability. Without them, your SendGrid emails land in spam and your domain is open to spoofing.

A new phone number with no sending history is treated with suspicion by carrier filtering systems. Warming it up gradually over one to two weeks establishes a clean behavioral baseline that protects your deliverability.

Error code 30007 from Twilio means a carrier blocked your message at the network level. It is a serious signal that requires immediate investigation and can permanently damage your sending reputation if ignored.

Carrier content filters evaluate every message you send. Writing messages that pass those filters while still being effective marketing requires understanding exactly what signals trigger filtering.

Your SMS sender reputation is a composite score built from complaint rates, opt-out rates, bounce rates, and behavioral signals. Once damaged, it takes weeks to repair and directly reduces the revenue your SMS program generates.

Sending SMS from unregistered 10DLC numbers is not just a compliance risk. Carriers actively filter up to 30% of unregistered traffic, and Twilio has begun applying surcharges to unregistered messages.

A quarterly compliance audit of your Twilio account catches registration gaps, expired verifications, misconfigured opt-out handling, and content policy violations before they cause deliverability or legal problems.

STIR/SHAKEN call authentication and branded calling display are transforming how voice calls are verified and presented to recipients. Twilio supports both, and implementing them increases answer rates significantly.

An opt-out rate above 2% per campaign is a signal that your SMS program has a structural problem. Reducing it requires looking at frequency, content relevance, timing, and subscriber expectations.

In TCPA litigation, the burden of proving consent falls on the sender. If you cannot produce a consent record for a specific subscriber on a specific date, you have no defense against a per-message fine of up to $1,500.

Every country where you send SMS has its own carrier rules, registration requirements, and consent standards. This checklist covers the most common destination markets for Twilio senders and what is required in each.