Gaining Trust in APIs and What to Look For

Twilio Compliance Security is at the core of our platform FIPS Level 3 ISO/IEC 27001 Twilio has deployed the ability for qualifying Twilio has considered all sections of the ISO 27001 standard customers to request their accounts be in scope and has no exclusions in the ISO 27001 Statement enabled with technology that meets the of Applicability. FIPS Level 3 compliance requirements. ISO/IEC 27017 PCI DSS Level 1 Strengthens Twilio’s ISMS to ensure controls in place are continuing to align with industry best practices ISO/IEC 27018 Twilio has expanded our ISMS to include controls that are Collect credit card data over the phone and/or make payment on behalf of customer applications focused on public cloud Personally Identifiable Information PCI Level 3 Merchant SOC 2 Accept credit cards as a form of payment, The SOC 2 reports provide assurance that controls at a but credit cards don’t enter our service organization relevant to selected criteria are environment operating as designed, either as of a point in time (Type I) or over a period of time (Type II) 2022 TWILIO INC. ALL RIGHTS RESERVED