Best Practices for Configuring Your Twilio Campaign
Last updated: October 5, 2026
Before Canvas can send text messages for your practice (portal invites, appointment reminders, secure message alerts), US carriers have to approve your texting registration, called an A2P 10DLC campaign. A carrier reviewer checks your website, your privacy policy, your terms, and how patients agree to receive texts. Best practices are listed below improve your chances of a successful submission.
1. Add a text messaging section to your privacy policy
Your privacy policy must be on a public page titled "Privacy Policy," and it must name your practice exactly as it's registered.
Update the privacy policy so it clearly states that mobile information and messaging consent are not shared with third parties or affiliates for marketing or promotional purposes.
Make sure the privacy policy explains what customer data you collect and how that data is used in your messaging program.
If your opt-in flow happens on a website, include the required messaging disclosures in the privacy policy, including message frequency and "message and data rates may apply."
Remove duplicate or conflicting privacy policies so reviewers can verify one clear policy for the registered brand and campaign.
2. Publish a terms and conditions page with your texting terms
Carriers require a terms and conditions (or terms of use) page in addition to the privacy policy.
The URL must be publicly accessible, not behind a login, and point to terms and conditions relevant to your registered brand.
Update your terms and conditions and consent flow so end users give consent directly to your brand and mobile opt-in data is not shared with third parties or affiliates for marketing or promotional purposes. For more information, see A2P 10DLC campaign approval requirements.
If your campaign uses a prohibited use case, such as affiliate marketing or third-party lead generation, resubmitting will not resolve the rejection. Remove the prohibited use case before submitting another campaign registration. For details, see Forbidden message categories for SMS and MMS in the US and Canada.
After you update the terms and conditions and consent flow, resubmit the campaign for review in Console or retry the campaign submission through the API.
3. Keep your business details consistent
Use the same legal business name, address, EIN, and website everywhere: your registration, your website, your privacy policy, and your terms.
Check that no placeholder text is left in your registration or on your pages, such as [Brand Name] or [Practice Name].
Make sure your website is live and publicly reachable.
If your campaign is rejected
Carriers return an error code rather than a detailed explanation. The two most common:
30908, compliant privacy policy required: the privacy policy is missing, can't be verified, is missing the "we do not sell or share" statement, or conflicts with another policy. See step 1.
30882, terms and conditions issue: the terms page is missing, is the same page as the privacy policy, lacks the texting terms, or consent isn't shown directly. See steps 2 and 3.
Fix the issue on your website, then let your Canvas team know so the campaign can be resubmitted. Each resubmission goes through carrier review again.