Create a Compliance Profile with the Wizard
The wizard at Settings → Compliance → Profiles → New is the guided way to create a compliance profile. It walks you through naming the profile, picking the use case and country, and showing the exact documents and fields the country’s rules demand — then creates the profile as adraft you fill and submit. This page covers creating
the profile; what a profile unlocks and the order to activate a
posture are on
Assemble your tenant’s compliance posture,
and the full endpoint surface is on
Compliance profiles API.
The wizard documents the tenant-owned controls only: the packet you
build and the posture it opens are yours to choose. Orbit runs the
review lifecycle and the surface gates; the carrier or regulator
approves the packet itself.
The route and the four steps
The wizard lives at/settings/compliance/profiles/new, and it is
reachable from Settings → Compliance → Profiles via the row action.
It renders a single page with two panels the whole way:
- Left panel — the form for the profile you’re creating.
- Right panel — “What you will need”: the live documents and fields the use case and country demand, fetched automatically. Nothing below is a surprise the first time you submit.
- Name the bundle. Give it a name your team will recognize
(
DE business KYC packet,US 10DLC brand). The name is required; a new profile always starts as adraft. - Country/vertical pre-fill. Pick the use case from the driven list — only use cases with a real submission path in the registry are selectable; anything tagged Coming soon is an explicit readiness check, and anything handled on a different surface (for example US Toll-Free Verification, which is per-number) shows a deep-link instead of a dead end. If the use case is per-market, pick the country from the live coverage list — the list only ever contains the countries Orbit’s DID providers actually carry. Turn on Multiple countries when the same packet backs several regulated markets: the fields below fan the selection out into a per-country submission set, and you upload the documents once.
- Document collection and the country-rule gates. The right
panel is the checklist your chosen country and use case apply:
the document roles (
certificate_of_incorporation,proof_of_address,authorized_contact…) and the named data fields the country rule names. Read it before you create, and collect the pieces that are marked required — the rule gates submission the moment it goes to review. When the country rules don’t name a packet at all (a use case with no required documents or fields) the panel says so and the wizard warns that an empty combination can’t be graded; pick the use case and country you actually want to register first. The per-market demands themselves are documented on Country Compliance Requirements. - Review and create. The wizard blocks the Create button until
the name is filled, the country selection resolves to a real
covered country, and the chosen use case isn’t one that no provider
can serve — so a doomed draft never leaves the page. Click
Create; the profile is saved as
draft, the drafts list refreshes, and you land on the profile detail page, where you attach the documents it collected and move Submit for review when the packet is complete. Only anapprovedprofile opens the gated surface the use case names; the lifecycle and every error the flow can surface are on Compliance profile lifecycle errors.
Hand-off to the surface that needs the profile
The wizard’s fourth step is only the creating half of the loop; a profile does nothing until you wire it to a surface. The approved profile’s id is the one every attach-by-id endpoint expects:- Phone number purchase — buy the number from Numbers, then
run
POST /api/v1/numbers/:id/attach-compliance-profilewith the profile id when the purchase gate asks for it. - Alphanumeric Sender ID — register the sender on Settings → Compliance → Sender IDs, then attach the profile to the sender when the country’s registration flow for that sender type demands it.
- US 10DLC brand or campaign — on Settings → Compliance → Brand identity, create the brand or campaign, then attach the brand profile the campaign references.
- India (TRAI DLT) — register the sender exactly as above, and pair the profile with the DLT artifacts the corridor demands: principal entity, headers, and templates, which Orbit records under DLT-India Onboarding.
Two same-wizard examples: US 10DLC vs India DLT
The wizard’s right panel changes with the use case and country — the same four steps produce very different checklists.- US 10DLC brand. Pick 10DLC brand (US): this use case needs no per-market country gate, so the checklist is the brand identity packet the Campaign Registry grades (legal entity, address, contact data, and the fields the brand form names) — no country rule document chain, and the review is The Campaign Registry’s. Pair it with the campaign profile when the traffic starts; both profiles attach to the same brand identity and traffic degrades until both clear.
- India — DLT over the sender-ID corridor. Pick SMS alphanumeric sender with country IN: the right panel collects the identity packet the corridor asks for, and India adds its own registration scheme on top — the TRAI DLT principal entity, headers, and content templates must exist before traffic delivers. Register them on a DLT portal, record the resulting ids via DLT-India Onboarding, then register the sender with the profile attached. A sender without a live DLT entity + header stays at the corridor’s pending gate until both sides clear.