Know Your Customer (KYC) Policy

Last updated: 10/16/2026

Signilio LLC ("Signilio," "we," "us," or "our") provides a business text messaging platform (the "Services"). This Know Your Customer ("KYC") Policy explains how we identify and verify every business before it can send a message through the Services, how we keep verifying it while it uses them, and how we apply the same standard to agencies that manage messaging for their own clients. It applies to every Signilio account, including team sub-accounts and agency client accounts.

Every message sent through the Services travels over shared carrier networks. Knowing exactly who is sending protects the people who receive messages, the carriers and industry partners we connect to, and every legitimate business on the platform.

Summary

  • Outreach and agency accounts are opened by invitation only, and every website sign-up is reviewed and approved before it can send. Every user signs in with their own login.
  • Every business and account owner is screened against the US government's sanctions list before we open or approve an account.
  • No business can send until its legal name and EIN have been verified against federal government records and its messaging campaign has been approved.
  • Every user personally accepts our Terms, and the account owner personally guarantees the business's obligations.
  • Every client an agency adds is reviewed and approved by Signilio before it can send.
  • We keep monitoring every account while it is active, and we can stop an account's sending immediately.

Who we serve

The Services are for registered businesses. We open accounts only for privately held companies, non-profit organizations, and government entities that hold a US Employer Identification Number (EIN). We do not open accounts for individuals or sole proprietors, or for any business whose products, services, or messaging are prohibited by our Acceptable Use Policy.

1. Every account is reviewed before it can send

Accounts for outreach and for agencies are opened by invitation only, after the onboarding review described in section 2. Businesses may sign up for our marketing plans on our website, but a new account cannot send any message until Signilio has reviewed and approved it. Its business details are held until we complete that review, and only an approved business is submitted for registration. Every user has their own login and must personally accept our Terms of Service and policies before using the account.

An agency may add client accounts for the businesses it serves only while the agency's own account is active and its owner has accepted our Terms. A client account cannot send until Signilio has reviewed and approved its business details and our Terms have been accepted for it (see section 6).

2. Onboarding review

Before we open or approve an account, we review the business and the person who will own the account:

  • Business and contact information. The business's name; the name, email address, and phone number of the person who will own the account; and the business's website or other public presence.
  • A call with the business. We speak with every new business on a voice or video call to learn about the business and how it operates.
  • Use case. What the business intends to send, to whom, and how its recipients agree to receive its messages. We decline any use case that our Acceptable Use Policy prohibits or that we cannot confirm is based on the recipient's consent.
  • Sanctions screening. The business and the account owner are screened against the Specially Designated Nationals and Blocked Persons List published by the US Department of the Treasury's Office of Foreign Assets Control (OFAC). Any potential match is reviewed before an account is approved. We do not approve or keep an account for any business or person on that list.
  • Risk review. We consider the business's industry, its intended volume, and any history of complaints or carrier action. We may require additional information, documents, or independent vetting before we approve an account or allow higher sending volume.

3. Business identity verification

No business can send a message through the Services until its identity has been verified:

  • Registration. The business registers for the A2P 10DLC program with its legal name, EIN, entity type, registered address, industry, and business contact details.
  • Certification of authority. The person submitting the registration certifies that the EIN and business information belong to the business being registered, and that they are authorized to register messaging on its behalf. We record the certification, who made it, and when.
  • Independent verification. The registration is submitted to The Campaign Registry, the US registry for business text messaging, which checks the business's legal name and EIN against federal government records. A business whose identity cannot be verified cannot register a 10DLC campaign and cannot send.
  • Campaign approval. Each 10DLC campaign, including its use case, description, sample messages, and how recipients opt in and opt out, must be reviewed and approved before any phone number can send for it.
  • Independent vetting. A business that needs higher sending capacity completes independent third-party vetting, which scores the business and sets the capacity carriers allow it.
  • Documents on request. At any time we may require documents that confirm a business's identity, such as the IRS notice assigning its EIN, its formation documents, or the identity of the individual named as the responsible party for its EIN. We may suspend sending until they are provided.

Each business registers separately. A customer that operates more than one business registers and verifies each business separately, under its own legal name and EIN.

4. The people who use an account

  • Individual logins. Every user has their own login, tied to their own email address. Sign-in is protected against automated abuse, and two-factor authentication is available to every user.
  • Personal acceptance. Each user personally accepts our Terms of Service and policies. The account owner also confirms their authority to bind the business and personally guarantees its obligations to us. We record every acceptance with the user's email address, the IP address and device used, the time, and the exact version of the documents accepted.
  • Owner control. The account owner decides who can access the account and what each user can do. Only an account owner can create API keys or add client accounts.

5. Payment

Accounts are prepaid by default: messages and fees are paid from a balance the business funds in advance, and sending stops when that balance runs out. Credit terms are extended only by Signilio, after review. Card payments are handled by a PCI-compliant payment processor, and we do not store card numbers.

6. Agencies and their clients (Know Your Customer's Customer)

When an agency manages messaging for other businesses, we apply this policy to the agency and to each of its clients:

  • Every client is its own account. Each client is a separate account with its own registration and verification under its own legal name and EIN, its own 10DLC campaigns, and its own acceptance of our Terms, by its own owner or, where the client has no login of its own, by the agency on its behalf. An agency may not send messages for a client under the agency's own registration or under another client's.
  • The agency's responsibility. An agency may add only businesses it knows, is authorized to act for, and has confirmed are eligible under this policy and our Acceptable Use Policy. It must give us information about any client on request.
  • Our review. Every client goes through the same review as every other account: its business details wait for Signilio's approval before they are submitted for registration, and the client and its owner are screened against the OFAC list. Its legal name and EIN are then verified through The Campaign Registry and its campaigns approved. No client can send until it is approved and our Terms have been accepted for it. We may suspend a client account, or the agency's own account, if either fails verification or breaches our policies.

7. Ongoing monitoring

Verification does not end when an account opens. While an account is active, we:

  • monitor its sending, including opt-out, delivery, and failure rates, and act on carrier and industry feedback about any account, phone number, or campaign;
  • process opt-out requests automatically as soon as they arrive;
  • keep records of the messages it sends and receives, of every opt-out, and of every change to a contact's consent status;
  • require it to keep its registration current, and verify it again when its legal name, EIN, address, ownership, or use case changes; and
  • review the account again if its activity changes significantly, if it receives complaints, or if we receive an inquiry about it from a carrier, regulator, or law enforcement.

8. Declining, suspending, and closing accounts

We may decline to open an account, pause or stop its sending, or close it if the business or any person associated with it fails verification, gives false or misleading information, appears on a sanctions list, sends prohibited content, fails to honor opt-outs, or has complaint or filtering rates that put recipients or the platform at risk. We can stop all sending from an account immediately while we investigate.

9. Cooperation with carriers, regulators, and law enforcement

We cooperate with carriers, industry registries, regulators, and law enforcement, including requests to trace the source of messages. When we receive such a request, we may share the account, registration, and message information needed to respond, as described in our Privacy Policy.

10. Record keeping

We keep the information collected under this policy, including registrations and certifications, verification and vetting results, sanctions screening results, Terms acceptances, and documents a business provides, for as long as the account is active and for at least five years after it closes, unless the law requires a longer period.

11. Changes to this policy

We review this policy at least once a year and update it when our process, the law, or industry requirements change. The date at the top of this page shows when it last changed. This policy describes how we verify our customers. It does not change the Terms of Service, which govern your use of the Services.

Contact

Questions about this policy, or to report a business you believe is misusing the Services: admin@signilio.com