Twilio
Programmable messaging, voice, email (SendGrid) and verification APIs used for customer notifications and two-factor authentication.
Certifications & Accreditations
| Certification | Certifying Body | Scope | Achieved | Expiry | Status |
|---|---|---|---|---|---|
| ISO/IEC 27001:2022 | Accredited third-party certification body | Twilio production services and supporting ISMS | — | — | Current |
| ISO/IEC 27017:2015 and ISO/IEC 27018:2019 | Accredited third-party certification body | Cloud security controls and protection of PII in public cloud for Twilio services | — | — | Current |
| SOC 2 Type II | Independent third-party auditor | Twilio messaging, voice and SendGrid services; report available to customers under NDA | — | — | Current |
| PCI DSS | Qualified Security Assessor | Twilio PCI-compliant voice and payment capture (Pay) features | — | — | Current |
Compliance Frameworks
ISO/IEC 27001:2022
Full
SOC 2 Type 2
Full
GDPR 2016/679
Full
Twilio acts as processor under its DPA; SCCs and UK IDTA available
PCI DSS v4.0
Partial
Applies to Twilio Pay and in-scope voice payment features
HIPAA Security
Partial
HIPAA-eligible products with a BAA available on request
Copyright © 2026 SnapGRC