{
  "slug": "sinch",
  "category": "communications-apis",
  "name": "Sinch",
  "description": "Communications platform with APIs for SMS, MMS, RCS, WhatsApp, voice calls and phone number verification, with regional endpoints.",
  "website": "https://sinch.com",
  "license": null,
  "platforms": [],
  "jurisdiction": {
    "code": "SE",
    "name": "Sweden",
    "eyes": "Fourteen Eyes",
    "eu": true,
    "gdpr": true,
    "cloud_act": null
  },
  "pick": false,
  "pick_reason": null,
  "disclosure": null,
  "grade": "F",
  "score": 25,
  "coverage": 65,
  "summary": "Sinch scores 25 out of 100 (grade F) on the SMS and voice APIs criteria. It meets 2 of 10 criteria: TLS configuration and EU data location. It partly meets security headers and message content deleted or redacted. It does not meet open source and no trackers or telemetry. Still needing evidence: no ads or data sales, independent audit, transparency report and tells users about requests. It is based in Sweden: Fourteen Eyes member; EU member (GDPR). Automated tests: SSL Labs grade A+ and Mozilla HTTP Observatory grade B+.",
  "url": "https://privacyratings.com/communications-apis/sinch/",
  "markdown": "https://privacyratings.com/communications-apis/sinch/index.md",
  "answers": {
    "open_source": {
      "title": "Open source",
      "weight": 3,
      "answer": "no",
      "evidence": null,
      "note": "Closed source."
    },
    "no_trackers": {
      "title": "No trackers or telemetry",
      "weight": 3,
      "answer": "no",
      "evidence": null,
      "note": "The home page loads Google Analytics, Google Tag Manager, HubSpot, LinkedIn Insight, Meta Pixel, Microsoft Clarity and Reddit Pixel (automated test)."
    },
    "no_ads": {
      "title": "No ads or data sales",
      "weight": 2,
      "answer": "unknown",
      "evidence": null,
      "note": null
    },
    "independent_audit": {
      "title": "Independent audit",
      "weight": 2,
      "answer": "unknown",
      "evidence": null,
      "note": null
    },
    "transparency_report": {
      "title": "Transparency report",
      "weight": 2,
      "answer": "unknown",
      "evidence": null,
      "note": null
    },
    "user_notice": {
      "title": "Tells users about requests",
      "weight": 1,
      "answer": "unknown",
      "evidence": null,
      "note": null
    },
    "tls": {
      "title": "TLS configuration",
      "weight": 2,
      "answer": "yes",
      "evidence": "https://www.ssllabs.com/ssltest/analyze.html?d=sinch.com&hideResults=on",
      "note": "Grade A+"
    },
    "security_headers": {
      "title": "Security headers",
      "weight": 1,
      "answer": "partial",
      "evidence": "https://developer.mozilla.org/en-US/observatory/analyze?host=sinch.com",
      "note": "Grade B+ (80/100+)"
    },
    "web_standards": {
      "title": "Modern web standards",
      "weight": 1,
      "answer": "pending",
      "evidence": null,
      "note": "Not tested yet."
    },
    "content_retention": {
      "title": "Message content deleted or redacted",
      "weight": 3,
      "answer": "partial",
      "evidence": "https://community.sinch.com/t5/SMS/Can-I-send-a-message-and-then-delete-it-from-my-records/ta-p/7106",
      "note": "SMS message logs are kept for 14 days, then depersonalized and archived. Sent messages cannot be deleted on request."
    },
    "eu_data_location": {
      "title": "EU data location",
      "weight": 1,
      "answer": "yes",
      "evidence": "https://developers.sinch.com/docs/sms/api-reference/",
      "note": "An EU endpoint serves the SMS API from servers in Ireland and Sweden. Staff and providers outside the EU may have access."
    }
  },
  "tests": {
    "ssllabs": "A+",
    "observatory": "B+",
    "internetnl_web": null,
    "internetnl_mail": null,
    "trackers": [
      {
        "name": "Google Analytics",
        "host": "inline code",
        "effect": "no"
      },
      {
        "name": "Google Tag Manager",
        "host": "www.googletagmanager.com",
        "effect": "no"
      },
      {
        "name": "HubSpot",
        "host": "js.hs-scripts.com",
        "effect": "no"
      },
      {
        "name": "LinkedIn Insight",
        "host": "snap.licdn.com",
        "effect": "no"
      },
      {
        "name": "Meta Pixel",
        "host": "inline code",
        "effect": "no"
      },
      {
        "name": "Microsoft Clarity",
        "host": "www.clarity.ms",
        "effect": "no"
      },
      {
        "name": "OneTrust",
        "host": "cdn.cookielaw.org",
        "effect": "none"
      },
      {
        "name": "Reddit Pixel",
        "host": "www.redditstatic.com",
        "effect": "no"
      }
    ],
    "tested_at": "2026-10-01T07:29:53.559Z"
  },
  "last_modified": "2026-10-01T07:44:20Z"
}