1. Capture and respect consent Send only to contacts for whom the organization has the required consent or other lawful basis. Store only the details needed for the campaign, use the intended channel, and do not re-add an opted-out, complained, or suppressed contact to a sending list.
2. Preference centre Outbound messages include a signed link to the hosted preference centre. A contact can update their name, email, phone, per-channel subscription choices, and frequency preference. The link is recipient-specific and must not be shared or altered.
3. Delivery feedback and suppression Provider callbacks can record delivery, bounce, complaint, and opt-out outcomes. Bounced, complained, and suppressed contacts are excluded from future sends. Review delivery logs rather than assuming that a queued message reached a recipient.
4. Webhook and credential safety Restrict provider credentials and webhook destinations to authorized administrators. Use HTTPS callbacks, keep signing secrets confidential, and investigate failed deliveries without adding contact details to a support case or public log.
5. Reporting Choose a date range in Engage Analytics to generate marketing reports. Use the report to assess campaign volume, attempted, delivered, failed, clicked, opted-out, and channel performance. Treat reports as operational evidence; they do not replace consent records or provider billing records.