Key Takeaways
- A compliance checklist for open source / GitHub SMS gateways is STOP, consent, keys, and logs — MIT does not waive any of it.
- Do not rewrite the open-source hub. This is a printable gate.
- This is not legal advice. Counsel owns DLT, TCPA, GDPR, and local SMS rules.
- No piracy / cracked CodeCanyon “workaround” belongs on the list.
- You still bring the Android and operator credit. GitHub does not pay the carrier.
- If you use our hosted plane instead, devices + volume still meter.
A license is not a regulator
Compliance checklist for open source / GitHub is the gate before a DIY Android SMS gateway sends to humans: consent flags, STOP on the inbound SIM, no OTP in Slack, keys out of the README. The repo license is orthogonal. A permissive clone does not make unsolicited bulk legal.
Category: Android SMS gateway open source. Bulk OSS spoke: OSS for bulk. Product AUP: acceptable use.
“If STOP is a GitHub issue template, you are not ready to send.”
OSS hub stays the category page
README red flags and when a maintained plane wins stay on the hub. This page is a printable list. Our API, if you leave DIY: Developer Center.
Compliance gate for DIY GitHub
| Item | Why | Verify |
|---|---|---|
| Consent at rest | CSV without flags is an incident | Reject rows missing it |
| STOP handler on the SIM | Replies land on MSISDN | Inbound path tested |
| OTP vs promo isolation | Filters and starvation | Separate device or queue |
| No OTP bodies in chat | Support leaks | Log redaction |
| Keys not in repo | Forks leak forever | git history scanned |
| Counsel named | DLT/TCPA/GDPR change | Not a Discord pin |
External consent primer: CTIA messaging principles. GDPR-minded handling: data handling how-to.
Not legal advice
Markets differ. A handset path is not a loophole around A2P registration where it applies. We will not help you dodge DLT or run cracked panels.
Cost
DIY TCO is labor + phones + airtime. Hosted alternative: devices + platform volume + the same phones. Pricing.
Printable close
- Hub read; this page is the gate.
- STOP, consent, keys, isolation, counsel — evidenced.
- No piracy step anywhere in the runbook.
Next steps
Related product pages
Jump to the live product docs for this topic—not another long-form article.
- SMS API documentationLive endpoint reference
- device and SMS volume pricingPlans and allowances
- Security and Trust CenterCompliance and posture
- Android SMS gateway product guideDefinition, product, and how to buy





