Legal & Regulatory
SMS Compliance
Business text messaging is regulated at the federal, carrier, and state level. Here's what applies to Panhandle businesses using SMS for customer communication — and how we handle it.
Compliance isn't a checkbox. It's how you keep your messages delivered and your business off carrier blocklists.
The regulatory landscape
Three layers of rules govern business SMS in the United States. Missing any one of them can mean blocked messages, carrier fines, or legal exposure.
Federal
TCPA — the Telephone Consumer Protection Act. Governs consent, opt-out, and automated dialing.
Carrier
A2P 10DLC — carrier-enforced registration, vetting, and throughput limits for business texting.
Industry
CTIA guidelines — messaging principles, content restrictions, and SHAFT prohibitions.
TCPA — Telephone Consumer Protection Act
Consumer consent
The TCPA requires prior express written consent for marketing or promotional text messages sent via an automatic telephone dialing system (ATDS). Transactional messages — appointment reminders, order confirmations, delivery updates — generally require a lower standard of consent, but still need a clear opt-out path.
Opt-out requirements
Every commercial text must include a clear, functional opt-out mechanism. Common keywords like STOP, UNSUBSCRIBE, CANCEL, and QUIT must be honored immediately. Once a recipient opts out, you cannot send further marketing messages to that number — and a single confirmation reply confirming the opt-out is the only allowed follow-up.
How we handle it
Amarillo Logic's Dispatch platform enforces consent status per recipient. Opted-out numbers are blocked from outbound marketing messages automatically. Every outbound message includes opt-out language. Inbound STOP/UNSUBSCRIBE keywords are detected and processed without human intervention.
A2P 10DLC — Carrier Registration
What it is
A2P 10DLC (Application-to-Person 10-Digit Long Code) is the carrier-mandated system for business text messaging using standard 10-digit phone numbers. Every business that sends SMS to US phone numbers must register their brand and campaign with The Campaign Registry (TCR) and pass carrier vetting.
Registration requirements
- → Brand registration: Legal business name, EIN, physical address, and website. Carriers verify this against public records.
- → Campaign registration: Description of message use case, sample messages, and opt-in/opt-out workflows. Campaigns are reviewed for compliance with CTIA guidelines.
- → Vetting score: Carriers assign a trust score that determines throughput limits and delivery priority. Higher scores mean faster delivery and higher message caps.
Throughput limits
Unregistered or low-vetting traffic faces severe throttling — often single-digit messages per minute. Fully vetted campaigns can reach hundreds of messages per minute. Registration isn't optional; it's the difference between messages that arrive and messages that vanish.
How we handle it
We guide Panhandle businesses through brand and campaign registration as part of SMS onboarding. We handle the technical submission to TCR through our provider (Twilio), review your use case against CTIA guidelines before submission, and monitor campaign status for carrier rejections or throughput issues.
CTIA Messaging Principles
SHAFT content restrictions
CTIA guidelines prohibit or heavily restrict messaging related to Sex, Hate, Alcohol, Firearms, and Tobacco (SHAFT). Campaigns involving these categories face additional scrutiny, higher fees, or outright rejection. Even adjacent content — a restaurant mentioning a wine list, a sporting goods store referencing firearms accessories — can trigger review.
Consumer experience requirements
- → Clear identification: Every message must identify the sender. No anonymous business texting.
- → Frequency disclosure: Recipients must know how often to expect messages before they opt in.
- → HELP keyword: Must return your business name and contact information.
- → Quiet hours: Messages should respect reasonable hours. Late-night marketing texts draw complaints and carrier action.
How we handle it
Our compliance screener reviews campaign descriptions against SHAFT categories before submission. We configure quiet hours per tenant. HELP and STOP keyword handling is built into the platform — no custom code required. Every outbound message template includes sender identification.
Texas-specific
Texas AI Disclosure Requirements
Texas law requires businesses to disclose when they are using artificial intelligence in certain consumer interactions. This applies to automated text conversations, AI-generated content in messages, and automated decision-making that affects consumers.
For Panhandle businesses using AI-assisted SMS — whether for lead qualification, appointment scheduling, or payment follow-ups — the disclosure must be clear, conspicuous, and delivered before or at the start of the AI interaction.
How we handle it
Amarillo Logic's Dispatch platform can automatically include Texas AI disclosure language in outbound messages where AI is involved. The disclosure is configurable per tenant and per message type — you control the wording, and we make sure it's included before the message leaves the platform. For fully automated conversations, the disclosure appears in the first message of each thread.
Our compliance approach
Consent management
Every recipient has a consent status tracked in the platform. Opt-ins are recorded with timestamp and source. Opt-outs are immediate and irreversible for marketing messages. Consent status gates every outbound message before it reaches the carrier.
Carrier registration
We handle TCR brand and campaign registration through Twilio. Your business gets a registered 10DLC number with carrier-vetted throughput. We monitor campaign status and alert you to rejections or throughput degradation.
Automated screening
Our compliance screener reviews outbound messages for TCPA, CTIA, and carrier policy violations before delivery. Messages flagged for review are held for human approval. Opt-out keywords are detected and processed automatically.
Audit trail
Every message — sent, blocked, or queued for review — is logged with timestamp, consent status, and compliance decision. When a carrier or regulator asks what happened, you have the record.
Disclaimer
This page provides general information about SMS compliance requirements. It is not legal advice. TCPA, A2P 10DLC, CTIA, and state-level regulations change over time. Consult qualified legal counsel for compliance guidance specific to your business, industry, and messaging use case. Amarillo Logic provides the technical platform and registration assistance; ultimate compliance responsibility rests with the business sending the messages.
Questions about SMS compliance for your business?
We'll walk through what applies to your use case — no charge for the conversation.
Talk to Us