Security is at the core of our products and platform

We use industry standard encryption to secure connections between customers and our applications. We also follow best practices in data governance and protection to ensure that data is handled with care, stored securely, and processed appropriately.

Read our Security overview

We follow security by design principles across the entire product lifecycle, from requirements gathering and product design through product deployment, and after deployment.

See our security docs

Twilio uses identity and access management controls and offers added security to keep your accounts safe.

We provide options to require additional account security layers, such as two-factor authentication (2FA). 

Twilio offers Message Redaction and Voice Recording Encryption which customers can adopt to further enhance protection of personal data processed by Twilio.

We use a flexible and scalable framework for ongoing identification, assessment, treatment, and reporting of security risks.

You can purchase additional security features, access management controls, and administration tools through Twilio Editions.

Twilio carries out a security risk-based assessment of prospective vendors before working with them to validate they meet Twilio’s security requirements.

Twilio’s Continuous Monitoring program has processes for leading incidents and designing proactive capabilities for the platform.

Twilio maintains a 24/7 security incident response team to respond to threats and vulnerabilities.

Industry experts lead our business continuity and crisis management programs to protect customers and ensure continuous delivery.

Read our operational resilience whitepaper

Our top-down approach to operational resilience means we start with the products and services we offer and work backward to include the teams, functions, and resources that support their delivery.

Twilio’s business continuity and disaster recovery program follows an annual program of core activities, ranging from business impact analysis, plan development and updates, and testing and exercises.