Captured before automated identity checks (Oct 14, 2026): accurate as of its capture on Sep 5, 2026; our capture on Oct 15, 2026 found the same text, but its identity was not checked by them.
Get the weekly coverage letter
Companies change their terms without announcing it. We capture governance documents, compare each new version with the last, and publish what changed, with the source text behind it. One email a week on what we found and what we could not reach.
This page describes what the document states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability may vary by jurisdiction. Methodology
“For each sub-processor below, processing of personal data will be for the duration that the customer uses and continues to use the applicable service(s), and for the retention periods as set out in customer's agreement with Twilio.”
“At this time, all other data relating to your account and use of the Twilio Services will continue to be processed in the United States to allow Twilio to continue to provide and improve our Services to you.”
“If using Regional Twilio for supported products, Customer Content is stored and processed in the region selected (Ireland or Australia). Exceptions will occur as necessary to investigate issues of fraud and abuse.”
“Twilio imposes obligations on its sub-processors to implement appropriate technical and organizational measures ensuring that the sub-processing of personal data is protected to the standards required by applicable data protection laws.”
“Where the engagement of a sub-processor requires the cross-border transfer of personal data, Twilio has performed Transfer Impact Assessments for such data transfer.”
“If Twilio Inc. is not the Twilio party to the agreement, then Twilio Inc. is acting as a sub-processor for that Twilio party. (For example. If you are contracting with Twilio Ireland Ltd, then Twilio Inc. is acting as a sub-processor...)”
This document lists the third-party companies Twilio uses to process customer data and explains the rules those companies must follow. Your data is processed for as long as you use Twilio services and for whatever retention period your agreement specifies—it is not automatically deleted when you stop using a service unless your agreement says so. Unless you have set up a regional data arrangement selecting Ireland or Australia, your account and usage data is processed in the United States.
This document establishes Twilio's sub-processor framework, identifying the third parties Twilio engages to process customer personal data and the obligations imposed on them. Sub-processors are contractually required to implement appropriate technical and organizational measures meeting applicable data protection law standards. Personal data retention by sub-processors runs for the duration of active service use and for any retention periods defined in the customer's agreement with Twilio. Cross-border transfers involving sub-processors have been evaluated through Transfer Impact Assessments, and data residency is governed by customer-selected regions (Ireland or Australia) for Regional Twilio supported products, with a default of United States processing for all other account and service usage data. Telecommunications providers used by Twilio are explicitly excluded from the sub-processor classification and its attendant obligations.
As an individual user, your personal data is held by Twilio's sub-processors for the full period you use the applicable service and any additional period your agreement specifies. Key infrastructure, including AWS, processes data in the USA, and third-party sub-processors such as OpenAI and Lakera also operate in the USA within Twilio's automated and AI-powered workflows. Telecommunications providers are not covered by the sub-processor obligations described in this document. One concrete action available to you: you can subscribe to Twilio's sub-processor change notifications to receive updates whenever the list of sub-processors is modified.
Which mapped governance frameworks each document engages, tied to the specific provisions that engage them.
We withheld clauses we had published from this document. Each withholding is recorded in our correction log:
“For each sub-processor below, processing of personal data will be for the duration that the customer uses and continues to use the applicable service(s), and for the retention periods as set out in customer's agreement with Twilio.”
“At this time, all other data relating to your account and use of the Twilio Services will continue to be processed in the United States to allow Twilio to continue to provide and improve our Services to you.”
“If using Regional Twilio for supported products, Customer Content is stored and processed in the region selected (Ireland or Australia). Exceptions will occur as necessary to investigate issues of fraud and abuse.”
“Twilio imposes obligations on its sub-processors to implement appropriate technical and organizational measures ensuring that the sub-processing of personal data is protected to the standards required by applicable data protection laws.”
“Where the engagement of a sub-processor requires the cross-border transfer of personal data, Twilio has performed Transfer Impact Assessments for such data transfer.”
“If Twilio Inc. is not the Twilio party to the agreement, then Twilio Inc. is acting as a sub-processor for that Twilio party. (For example. If you are contracting with Twilio Ireland Ltd, then Twilio Inc. is acting as a …”
“Twilio customers may subscribe to notifications of sub-processor changes to receive updates.”
“Please note that telecommunications providers used by Twilio are not processors of Twilio or sub-processors of our customers.”
Every distinct legal provision identified in this document. Featured provisions appear above with analysis.
We have not recorded a change to this document since we began capturing it. Monitor includes alerts from a daily check, structured change summaries, and monitoring for up to 20 platforms.
Need provision-level monitoring and regulatory mapping? Insight includes governance timelines, drift analysis, and full provision tracking.
Cross-platform context
See how other platforms handle Duration of processing tied to customer service use and similar clauses.
Compare across platforms →Governance Monitoring
Structured alerts for policy changes, governance events, and provision updates across 343 platforms.