Twilio changed its DPA

===================================================================
--- before
+++ after
@@ -109,9 +109,9 @@
 Acknowledgement and Waiver
 
 TWILIO SUB-PROCESSORS
 
-Last Updated: April 2026
+Last Updated: September 2026
 
 THIRD PARTY SUB-PROCESSORS
 
 Twilio uses the third party companies below (each, a “sub-processor”) to process personal data (i) on behalf of Twilio customers; (ii) in accordance with customer instructions as communicated by Twilio; and (iii) in strict accordance with the terms of a written contract between Twilio and the sub-processor.
@@ -125,629 +125,472 @@
 Duration of processing: For each sub-processor below, processing of personal data will be for the duration that the customer uses and continues to use the applicable service(s), and for the retention periods as set out in customer’s agreement with Twilio.
 
 Please note that telecommunications providers used by Twilio are not processors of Twilio or sub-processors of our customers. Additional information about this position can be found here.
 
-Sub-Processor
+Subprocessor
 
-Applicable Service(s)
+Service(s)
 
-Subject matter
+Processing Activities
 
-Nature and purpose of processing
-
 Location(s) of processing
 
-External links for additional information relating to security
+Links
 
-----------------------------------------
+Adaptive Mobile (ENEA) 
 
-Adaptive Mobile
-
 Programmable Messaging
 
-Personal data contained in communications sent through the Twilio Services
+Adaptive Mobile (ENEA) enforces message safety, spam filtering, threat detection and abuse prevention for specific Twilio Products and Services
 
-Prevention of illegal or unwanted communications over Twilio’s messaging services
-
 USA
 
-Data Privacy
+ENEA Data Privacy
 
-----------------------------------------
+Amazon Bedrock
 
-AWS
+All AI Products
 
-All services
+Amazon Bedrock provide AI functionality including LLM models for specific Twilio Products and Services
 
-Personal data contained in communications sent through or uploaded to the services.
+USA
 
-Infrastructure Provider providing hosting services and storage.
+Amazon Bedrock
 
-USA*
+Anthropic
 
-Compliance Program; GDPR Centre; Supplementary Measures Addendum; Blog
+All AI Products
 
-----------------------------------------
+Anthropic provides AI functionality including LLM models for specific Twilio Products and Services
 
-AWS
+USA
 
-Programmable Voice
+Anthropic Transparency Hub
 
-Personal data contained in voice communications.
+AWS
 
-Text to speech functionality for customers using Amazon Polly, Amazon Comprehend, and Amazon Transcribe.
+All Services & Products
 
-USA*
+AWS Provide core cloud hosting and data storage infrastructure for specific Twilio Products and Services
 
-Compliance Program; GDPR Centre; Supplementary Measures Addendum; Blog
+USA*, EU, AU
 
-----------------------------------------
+AWS Compliance Program;
+AWS GDPR Centre;
+AWS Supplementary Measures Addendum;
+Blog
 
 AWS
 
-Programmable Video
+Email (SendGrid)
 
-Personal data contained in streamed videos.
+AWS route and transmit emails for specific Twilio Products and Services
 
-Streaming and interactive video.
+USA, EU
 
-USA*
+AWS Compliance Program;
+AWS GDPR Centre;
+AWS Supplementary Measures Addendum;
+Blog
 
-Compliance Program; GDPR Centre; Supplementary Measures Addendum; Blog
-
-----------------------------------------
-
 AWS
 
 Marketing Campaigns (SendGrid)
 
-Personal data contained in email communications.
+AWS provides automation and storage services for marketing campaigns for specific Twilio Products and Services
 
-Automation and storage services for marketing campaigns.
-
 USA
 
-Compliance Program; GDPR Centre; Supplementary Measures Addendum; Blog
+AWS Compliance Program;
+AWS GDPR Centre;
+AWS Supplementary Measures Addendum;
+Blog
 
-----------------------------------------
-
 AWS
 
-Email (SendGrid)
+Programmable Video
 
-Personal data contained in email communications.
+AWS provides streaming and interactive video functionality for Twilio Products and Services
 
-Routing and transmission of emails.
+USA*
 
-USA
-EU
+AWS Compliance Program;
+AWS GDPR Centre;
+AWS Supplementary Measures Addendum;
+Blog
 
-Compliance Program; GDPR Centre; Supplementary Measures Addendum; Blog
-
-----------------------------------------
-
 AWS
 
-CDP (Segment)
+Programmable Voice
 
-Personal data contained in communications sent through the Segment Services
+AWS executes automated text-to-speech conversion, speech recognition, and natural language text processing for specific Twilio Products and Services
 
-Infrastructure Provider providing hosting services and storage.
+USA*
 
-USA or EU (Dublin) as selected by customers
+AWS Compliance Program;
+AWS GDPR Centre;
+AWS Supplementary Measures Addendum;
+Blog
 
-Compliance Program; GDPR Centre; Supplementary Measures Addendum; Blog
-
-----------------------------------------
-
-Anthropic
-
-All AI Products
-
-Personal data contained in communications sent through Flex.
-
-Vendor for AI functionality in product
-
-USA
-
-Claude by Anthropic in Amazon Bedrock
-
-----------------------------------------
-
-Amazon Bedrock
-
-All AI Products
-
-Personal data contained in customer defined workflows
-
-Vendor for AI functionality in product
-
-USA
-
-Amazon Bedrock
-
-----------------------------------------
-
 Clickhouse
 
 All Products
 
-Personal data contained in communications sent through the Twilio Services
+Clickhouse provide hosting and data storage infrastructure for specific Twilio Products and Services
 
- 
-
-Infrastructure Provider providing hosting services and storage.
-
 USA, EU
 
-Security, Privacy
+Clickhouse Security,
+Clickhouse Privacy
 
-----------------------------------------
-
 Datadog
 
 Segment
-
 Stytch by Twilio
 
-System and event logs only
+Datadog monitors of platform security and system health for specific Twilio Products and Services
 
-Operational monitoring
-
 USA
 
-Data Protection; Security Policies; Compliance Program
+Datadog Data Protection;
+Datadog Security Policies;
+Datadog Compliance Program
 
-----------------------------------------
+Deepgram
 
-DVELP/Sabio
+Programmable Voice
 
-Twilio Flex
+Deepgram transcribes voice media into text via automated speech recognition for specific Twilio Products and Services
 
-Personal data contained in voice communications.
+USA
 
-Connectivity services to customer’s Google CCAI instance.
+Deepgram Data Protection Privacy and Security
 
-UK (provision of the services), Belgium, Finland, Germany, Netherlands, and Poland (data persistence/backups)
+DVELP/Sabio
 
-Data Privacy; Data Security;
+Twilio Flex
 
-----------------------------------------
+DVELP/Sabio provides integration connectivity to customer Google CCAI instances for specific Twilio Products and Services
 
-Deepgram
+UK (provision of the services), Belgium, Finland, Germany, Netherlands, and Poland (data persistence/backups)
 
-Programmable Voice
+Data Privacy;
+Data Security;
 
-Personal data contained in voice communications
-
-Speech to text and text to speech APIs
-
-USA
-
-Data Protection privacy and security policies
-
-----------------------------------------
-
 Elastic
 
 Stytch by Twilio
 
-Storage, indexing, and retrieval of log data and User Personal Data (such as User IDs, emails, and metadata) to facilitate search functionality and system monitoring
+Elastic provides support system indexing, search query optimisation, and operational log analytics for specific Twilio Products and Services
 
-Logging and query solution
-
 USA
 
-Trust Center
+Elastic Trust Center
 
-----------------------------------------
-
 ElevenLabs
 
 Conversational Intelligence
 
-Personal data contained in voice transcriptions 
+ElevenLabs executes automated speech summarisation, audio synthesis, and sentiment detection, as enabled by customers for specific Twilio Products and Services
 
-AI features as enabled by customer for the purpose of summarization and sentiment analysis
-
 USA
 EU
 
-Security & Compliance Reports
+Google Security & Compliance Reports
 
-----------------------------------------
-
 Fivetran
 
 Stytch by Twilio
 
-Automated data pipeline service used to replicate and synchronize application data (which may include User Personal Data, billing information, and usage logs) from various third-party sources into a centralized data warehouse for internal analytics and business intelligence
+Fivetran automates data synchronisation between operational systems for internal business reporting for specific Twilio Products and Services
 
-ETL (Extract, Transform, Load) Service / Automated Data Integration
-
 USA
 
-Trust Center
+Google Trust Center
 
-----------------------------------------
-
 GoodData Corporation
 
 Twilio Flex
 
-Personal data contained in communications sent through Twilio Flex.
+GoodData Corporation delivers data analytics, custom reporting dashboards, and business intelligence visualisation as enabled by customers for specific Twilio Products and Services
 
-Data analytics functionality for customers who have enabled the feature in Twilio Flex.
-
 USA
 
-Data Privacy; Data Security & Cloud Security
+Google Data Privacy;
+Google Data Security & Cloud Security
 
-----------------------------------------
-
 Google
 
-Segment/Twilio Engage
+Programmable Voice;
+Twilio Flex
 
-Personal data contained in communications sent through the Segment Services
+Google transcribes voice media into text via automated speech recognition as enabled by customers for specific Twilio Products and Services
 
-Data storage compute and queries
+USA*
 
-USA or EU (Zurich & London) as selected by Customers
+Google Data Privacy;
+Google Trust & Security;
+Blog
 
-Data Privacy;
-
-Trust & Security; Blog
-
-----------------------------------------
-
 Google
 
-Programmable Voice;
+Segment; 
 
-Twilio Flex
+Twilio Engage
 
-Personal data contained in voice communications.
+Google provides database storage, compute resources, and query processing for specific Twilio Products and Services
 
-Speech recognition functionality for customers who have enabled the feature on supported products.
+USA or EU (Zurich & London) as selected by Customers
 
-USA*
+Google Data Privacy;
+Google Trust & Security;
+Blog
 
-Data Privacy;
+Google RCS
 
-Trust & Security; Blog
-
-----------------------------------------
-
-Google RCS...
-
 Verify
 
-Phone numbers and message content
+Google RCS delivers inbound and outbound authentication messages for specific Twilio Products and Services
 
-Message
-delivery for outbound/inbound Twilio Verify services.
+USA, South America:
+Chile,
+Europe:
+Ireland, Netherlands, Denmark, Finland, Belgium,
+Asia: Taiwan, Japan, Singapore
 
-USA, South America: 
-Chile, 
-Europe: 
-Ireland, Netherlands, Denmark, Finland, Belgium, 
-Asia: Taiwan, Japan, Singapore
+Google RCS Safety Centre
 
-https://safety
-.google/intl
-/en/
-
-----------------------------------------
-
 Hex
 
 Stytch by Twilio
 
-Processing and visualization of User Personal Data (such as User IDs and usage metrics) queried from data warehouse to generate internal business intelligence reports, dashboards, and analytics
+Hex provides internal business intelligence, data visualization, and collaborative analytics for specific Twilio Products and Services
 
-Collaborative data workspace / Analytics & reporting
-
 USA
 
-Security / Trust Center
+Hex Trust Center
 
-----------------------------------------
-
 Honeycomb
 
 Stytch by Twilio
 
-Ingestion and analysis of system telemetry data (including traces, logs, and structured events) which may contain User Personal Data (such as User IDs, IP addresses, and request metadata) to facilitate real-time debugging, system reliability, and performance optimization
+Honeycomb provides real-time system observability, application debugging, and performance tracing for specific Twilio Products and Services
 
-Observability & Application Performance Management (APM)
-
 USA
 
-----------------------------------------
+Honeycomb Trust Center
 
 Lakera
 
 All AI Products
 
-Personal data contained in communications sent through the Twilio Services
+Lakera AI provides security monitoring, data leakage prevention, and real-time threat detection within automated workflows for specific Twilio Products and Services
 
-AI security monitoring, data leakage prevention, and real-time threat detection within automated workflows.
-
 USA
 
-----------------------------------------
+Lakera Ai Security
+Lakera Trust Centre
 
-Postmark
-
-Stytch by Twilio
-
-Personal data contained in voice communications.
-
-Outbound email messaging service.
-
-USA
-
-https://postmarkapp.com/eu-privacy
-
-----------------------------------------
-
-Sinch
-
-Stytch by Twilio
-
-Personal data contained in voice communications.
-
-Outbound SMS messaging service
-
-USA
-
-https://trust.sinch.com/
-
-----------------------------------------
-
 Meta
 
 Whatsapp Channel
-
 Stytch by Twilio
 
-Phone numbers and message content
+Meta Routes, transmits and delivers messages for specific Twilio Products and Services
 
-Outbound/inbound message delivery
-
 USA
 
-Data Privacy and Security overview
+Meta Data Privacy and Security Overview
 
-----------------------------------------
-
 Microsoft Azure
 
 Conversational Intelligence
 
-Personal data contained in voice communications
+Microsoft Azure Transcribes voice media into text via automated speech recognition as enabled by customers for specific Twilio Products and Services
 
-Speech recognition functionality for customers who have enabled the feature on supported products.
-
 USA, EU
 
 Microsoft Compliance
+Microsoft Azure Trust Center
 
-----------------------------------------
-
 Microsoft Azure
 
 All AI Products
 
-Personal data contained in customer defined workflows
+Microsoft Azure provides AI functionality including Large Language Models for specific Twilio Products and Services
 
-Vendor for AI functionality in product
-
 USA
 
-----------------------------------------
+Microsoft Compliance
+Microsoft Azure Trust Center
 
 Mintlify
 
 Stytch by Twilio
 
-Process contact data and communications usage data (device data)
+Mintlify provides service documentation management for specific Twilio Products and Services
 
-Processing pseudonymized Customer Account Data to facilitate document gating, and personalized service configurations
-
 USA
 
-https://security.mintlify.com/
+Mintlify Security Portal
 
-----------------------------------------
-
 OpenAI
 
-All AI Products
+All AI Products 
 
-Personal data contained in customer defined workflows
+OpenAI Provides AI functionality including Large Language Models for specific Twilio Products and Services
 
-Vendor for AI functionality in product
-
 USA
 
-https://openai.com/security
+OpenAI Security & Privacy
 
-----------------------------------------
-
 Plain
 
 Stytch by Twilio
 
-Storage and processing of User Personal Data (including names, emails, support tickets, and communication history) to facilitate multi-channel customer support, issue tracking, and resolution
+Plain Manages multi-channel customer support communication and service ticket resolution for specific Twilio Products and Services
 
-Customer Support Infrastructure / Help Desk Platform
-
 UK
 
-Trust Center
+Plain Trust Center
 
-----------------------------------------
+Postmark
 
-Snowflake
+Stytch by Twilio
 
-Marketing Campaigns (SendGrid)
+Postmark Routes, transmits, and delivers of outbound email communications for specific Twilio Products and Services
 
-Personal data contained in email communications.
-
-Automation and storage services for Marketing Campaigns.
-
 USA
 
-Security Addendum; DPIA Fact Sheet;
+Security and Privacy
 
-----------------------------------------
+Sinch
 
-Snowflake
-
 Stytch by Twilio
 
-Processing and storage of User Personal Data (including names, email addresses)
+Sinch routes, transmits, and delivers of outbound SMS communications for specific Twilio Products and Services
 
-Storage services
-
 USA
 
-Security Addendum; DPIA Fact Sheet;
+Sinch Trust Center
 
-----------------------------------------
+Slack
 
-Temporal Cloud
+Stytch by Twilio
 
-Twilio Flex
+Slack provides customer Support chat/messaging solutions for specific Twilio Products and Services
 
-Personal data contained in customer defined workflows
+USA
 
-Scheduling and execution of the customer defined workflows.
+Slack Trust Center
 
-USA
+Snowflake
 
-Data Security
+Marketing Campaigns (SendGrid)
 
-----------------------------------------
+Snowflake Manages campaign data storage and executes email marketing automation for specific Twilio Products and Services
 
-Slack
+USA
 
-Stytch by Twilio
+Security Addendum;
+DPIA Fact Sheet;
 
-Storage and processing of User Personal Data (including names, emails, support tickets, and communication history) to facilitate customer support
+Snowflake
 
-Customer Support chat/messaging solution.
+Stytch by Twilio
 
+Snowflake provides data warehousing and data storage services for specific Twilio Products and Services
+
 USA
 
-https://slack.com/security
+Security Addendum;
+DPIA Fact Sheet;
 
-----------------------------------------
-
 Svix
 
 Stytch by Twilio
 
-Transmission and temporary processing of event notifications (webhook payloads) which may contain User Personal Data (such as User IDs, authentication events, and request metadata) to facilitate real-time updates to customer applications
+Svix delivers real-time system alerts and notifications for specific Twilio Products and Services
 
-Event delivery (webhooks as a Service)
-
 USA
 
-Security
+Svix Security
 
-----------------------------------------
+Temporal Cloud
 
-VoiceBase
+Flex
 
-Programmable Voice;
+Temporal Cloud schedules and executes the customer defined workflows for specific Twilio Products and Services
 
-Twilio Flex
+USA
 
-Personal data contained in voice communications.
+Temporal Cloud Data Security
 
-Transcription services for customers who have enabled transcriptions on supported products.
+VoiceBase
 
-USA
+Programmable Voice;
+Flex
 
-Data Privacy; Data Security
+VoiceBase transcribes voice media into text via automated speech recognition as enabled by customers for specific Twilio Products and Services
 
-----------------------------------------
+USA
 
+Trust Center
+VoiceBase Help Center
+
 * If using Regional Twilio for supported products, Customer Content is stored and processed in the region selected (Ireland or Australia). Exceptions will occur as necessary to investigate issues of fraud and abuse. At this time, all other data relating to your account and use of the Twilio Services will continue to be processed in the United States to allow Twilio to continue to provide and improve our Services to you.
 
 ----------------------------------------
 
 TWILIO GROUP SUB-PROCESSORS
 
-Sub-Processor
+Subprocessor Name
 
-Applicable Service(s)
+Service(s)
 
-Subject matter
+Processing Activities
 
-Nature and purpose of processing
+Location
 
-Location(s) of processing
+Links
 
-External links for additional information relating to security
-
 DataBank
 
- 
-
 Sendgrid Services
 
-Personal data contained in communications sent through or uploaded to the services.
+Hosting services and storage.
 
-Infrastructure Provider providing hosting services and storage.
-
 North America
 
-Data Privacy; Data Security
+Databank Trust Centre
 
 Lumen
 
- 
-
 Sendgrid Services
 
-Personal data contained in communications sent through or uploaded to the services.
+Hosting services and storage.
 
-Infrastructure Provider providing hosting services and storage.
-
 North America
 
-Data Privacy; Data Security
+Lumen Privacy Center
 
 Digital Realty
 
- 
-
 Sendgrid Services
 
-Personal data contained in communications sent through or uploaded to the services.
+Hosting services and storage.
 
-Infrastructure Provider providing hosting services and storage.
+North America / EU
 
-North America
-EU
+Digital Realty Privacy Centre
 
-Data Privacy; Data Security
-
 Twilio Inc.
 
 All Services
 
-If Twilio Inc. is not the Twilio party to the agreement, then Twilio Inc. is acting as a sub-processor for that Twilio party. (For example. If you are contracting with Twilio Ireland Ltd, then Twilio Inc. is acting as a sub-processor for the provision of the services.)
+If Twilio Inc. is not the Twilio party to the agreement, then Twilio Inc. is acting as a sub-processor for that Twilio party. (For example. If you are contracting with Twilio Ireland Ltd, then Twilio Inc. is acting as a sub-processor for the provision of the services.) Provision of the Twilio Services
 
-Provision of the Twilio Services
-
 USA*
 
-Data Privacy; Data Security
+Data Privacy; Data Security
 
-----------------------------------------
-
 * If using Regional Twilio for supported products, Customer Content is stored and processed in the region selected (Ireland or Australia). Exceptions will occur as necessary to investigate issues of fraud and abuse. At this time, all other data relating to your account and use of the Twilio Services will continue to be processed in the United States to allow Twilio to continue to provide and improve our Services to you.
\ No newline at end of file