This provision states that each sub-processor processes personal data for as long as the customer uses the applicable Twilio service and for any retention periods specified in the customer's agreement with Twilio, rather than specifying fixed retention periods in this document.
This analysis describes what Segment's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision links sub-processor processing duration to the customer's individual agreement with Twilio rather than establishing uniform retention limits, meaning that customers' own DPA or service agreement terms govern the effective retention period for personal data across the entire sub-processor chain.
Under this provision, the duration for which each listed sub-processor retains and processes personal data is determined by the customer's agreement with Twilio rather than by this sub-processor list. Customers should review their specific DPA or service agreement with Twilio to identify the applicable retention periods.
Cross-platform context
See how other platforms handle Duration of Processing Tied to Customer Agreement and similar clauses.
Compare across platforms →"Duration of processing: For each sub-processor below, processing of personal data will be for the duration that the customer uses and continues to use the applicable service(s), and for the retention periods as set out in customer's agreement with Twilio.Excerpt from Segment's Sub-Processors
1) REGULATORY LANDSCAPE: GDPR Article 5(1)(e) requires that personal data be kept in a form that permits identification of data subjects for no longer than is necessary for the purposes for which it is processed …
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This provision links sub-processor processing duration to the customer's individual agreement with Twilio rather than establishing uniform retention limits, meaning that customers' own DPA or service agreement terms govern the effective retention period for personal data across the entire sub-processor chain.
Under this provision, the duration for which each listed sub-processor retains and processes personal data is determined by the customer's agreement with Twilio rather than by this sub-processor list. Customers should review their specific DPA or service agreement with Twilio to identify the applicable retention periods.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Segment.