{
  "slug": "twilio",
  "category": "communications-apis",
  "name": "Twilio",
  "description": "Cloud communications platform with APIs for SMS, MMS, WhatsApp, voice calls, phone number verification and video.",
  "website": "https://www.twilio.com",
  "license": null,
  "platforms": [],
  "jurisdiction": {
    "code": "US",
    "name": "United States",
    "eyes": "Five Eyes",
    "eu": false,
    "gdpr": false,
    "cloud_act": "provider"
  },
  "pick": false,
  "pick_reason": null,
  "disclosure": null,
  "grade": "D",
  "score": 43,
  "coverage": 100,
  "summary": "Twilio scores 43 out of 100 (grade D) on the SMS and voice APIs criteria. It meets 2 of 10 criteria: transparency report and tells users about requests. It partly meets no ads or data sales, independent audit, TLS configuration, security headers, message content deleted or redacted and EU data location. It does not meet open source and no trackers or telemetry. It is based in the United States: Five Eyes member; subject to the US CLOUD Act. Automated tests: SSL Labs grade A- and Mozilla HTTP Observatory grade B.",
  "url": "https://privacyratings.com/communications-apis/twilio/",
  "markdown": "https://privacyratings.com/communications-apis/twilio/index.md",
  "answers": {
    "open_source": {
      "title": "Open source",
      "weight": 3,
      "answer": "no",
      "evidence": null,
      "note": "Closed source."
    },
    "no_trackers": {
      "title": "No trackers or telemetry",
      "weight": 3,
      "answer": "no",
      "evidence": null,
      "note": "The website loads Google Tag Manager, Segment, Adobe Launch and VWO."
    },
    "no_ads": {
      "title": "No ads or data sales",
      "weight": 2,
      "answer": "partial",
      "evidence": "https://www.twilio.com/en-us/legal/privacy",
      "note": "Funded by usage fees and states data is not sold, but website tracking for targeted advertising counts as sharing under some US state laws."
    },
    "independent_audit": {
      "title": "Independent audit",
      "weight": 2,
      "answer": "partial",
      "evidence": "https://security.twilio.com/",
      "note": "SOC 2 and ISO 27001 audits are listed, but reports are only available on request through the Twilio Trust Center."
    },
    "transparency_report": {
      "title": "Transparency report",
      "weight": 2,
      "answer": "yes",
      "evidence": "https://www.twilio.com/en-us/legal/transparency",
      "note": "Publishes annual transparency reports with government request counts, responses and how often users were notified."
    },
    "user_notice": {
      "title": "Tells users about requests",
      "weight": 1,
      "answer": "yes",
      "evidence": "https://www.twilio.com/en-us/legal/law-enforcement-guidelines",
      "note": "Uses reasonable efforts to notify customers of requests for their information unless prohibited by law."
    },
    "tls": {
      "title": "TLS configuration",
      "weight": 2,
      "answer": "partial",
      "evidence": "https://www.ssllabs.com/ssltest/analyze.html?d=twilio.com&hideResults=on",
      "note": "Grade A-"
    },
    "security_headers": {
      "title": "Security headers",
      "weight": 1,
      "answer": "partial",
      "evidence": "https://developer.mozilla.org/en-US/observatory/analyze?host=twilio.com",
      "note": "Grade B (70/100+)"
    },
    "web_standards": {
      "title": "Modern web standards",
      "weight": 1,
      "answer": "pending",
      "evidence": null,
      "note": "Not tested yet."
    },
    "content_retention": {
      "title": "Message content deleted or redacted",
      "weight": 3,
      "answer": "partial",
      "evidence": "https://support.twilio.com/hc/en-us/articles/223133687-Deleting-messages-message-media-or-message-bodies",
      "note": "Message bodies are kept until deleted, and can be deleted through the API. Automatic message redaction is only available to Twilio Editions customers."
    },
    "eu_data_location": {
      "title": "EU data location",
      "weight": 1,
      "answer": "partial",
      "evidence": "https://www.twilio.com/en-us/changelog/data-residency-for-sms--eu--is-now-in-public-beta",
      "note": "Voice and SMS can run in the Ireland (IE1) region. Data residency for SMS in the EU is in beta."
    }
  },
  "tests": {
    "ssllabs": "A-",
    "observatory": "B",
    "internetnl_web": null,
    "internetnl_mail": null,
    "trackers": [
      {
        "name": "Google Tag Manager",
        "host": "www.googletagmanager.com",
        "effect": "no"
      },
      {
        "name": "Segment",
        "host": "cdn.segment.com",
        "effect": "no"
      },
      {
        "name": "TrustArc",
        "host": "consent.trustarc.com",
        "effect": "none"
      },
      {
        "name": "VWO",
        "host": "dev.visualwebsiteoptimizer.com",
        "effect": "no"
      }
    ],
    "tested_at": "2026-10-01T11:04:13.280Z"
  },
  "last_modified": "2026-10-01T11:14:42Z"
}