Controller Policy

Print this page

Customer and Partner Agreements

An icon of a down chevron

Terms of Service

Acceptable Use Policy

Service and Country Specific Requirements

Data Protection Addendum (DPA)

Security Overview

Service Level Agreements

Advisory Services Terms

Professional Services Terms

Twilio Marketplace Terms

Twilio Segment Customer Data Platform Destination Integration and Listing Terms

AI/ML Terms

Twilio Messaging Campaign Terms

Customer Name Changes and Assignments

Updates to Legal Terms and Conditions

Country Specific Disclosures

An icon of a down chevron

EU Data Act Disclosures and Twilio’s Commitment to Open Portability and Switching

European Electronic Communications Code Disclosures

Italy ALIAS Database Code of Conduct

Germany - Impressum

Privacy

An icon of a down chevron

Data Privacy at Twilio

Privacy Notice

Binding Corporate Rules

Customer Proprietary Network Information (CPNI)

Sub-processors

Customer Data Protection Addendum

Supplier Data Protection Addendum

Global Applicant Privacy Notice

Mobile Application Terms

An icon of a down chevron

Twilio Frontline End User App Terms

Twilio Authy App Terms

Supplier Agreements

An icon of a down chevron

Supplier Purchase Order Terms and Conditions

Country-Specific Terms

Supplier Data Protection Addendum

Supplier Code of Conduct

Intellectual Property

An icon of a down chevron

DMCA Policy

Trademark

Resources for Law Enforcement

An icon of a down chevron

Government Requests

Transparency Report

Civil Requests

An icon of a down chevron

Submit a request or subpoena

Code of Conduct & Ethics Hotline

An icon of a down chevron

Twilio Code of Conduct

Ethics and Whistleblower Hotline

Discord Community Code of Conduct

Twilio Discord FAQ

Digital Promotions General Rules

An icon of a down chevron

Sweepstakes Rules

Customer Research and User Experience

An icon of a down chevron

Acknowledgement and Waiver

Twilio's Binding Corporate Rules: Controller Policy

Updated to comply with recommendations by the European Data Protection Board and to align Appendix 11 with updates to the Twilio Privacy Notice. Effective on December 19, 2024.

Table of Contents

PART I: INTRODUCTION TO THIS CONTROLLER POLICY

An icon of a plus symbol

An icon of a minus symbol

Scope of this Controller Policy

Our collective responsibility to comply with this Controller Policy

Management commitment and consequences of non-compliance

Relationship with Twilio's Binding Corporate Rules: Processor Policy

Where will this Controller Policy be made available?

Important terms used in this Controller Policy

How to raise questions or concerns

PART II: OUR OBLIGATIONS

An icon of a plus symbol

An icon of a minus symbol

PART II: OUR OBLIGATIONS

PART III: DELIVERING COMPLIANCE IN PRACTICE

An icon of a plus symbol

An icon of a minus symbol

PART III: DELIVERING COMPLIANCE IN PRACTICE

PART IV: THIRD PARTY BENEFICIARY RIGHTS

An icon of a plus symbol

An icon of a minus symbol

Application of this Part IV

Entitlement to effective remedies

Individuals’ third party beneficiary rights

Responsibility for breaches by non-European Group Members

Shared liability for breaches with processors

PART V: APPENDICIES

An icon of a plus symbol

An icon of a minus symbol

Appendix 1

Appendix 2

Appendix 3

Appendix 4

Appendix 5

Appendix 6

Appendix 7

Appendix 8

Appendix 9

Appendix 10

Appendix 11

Appendix 12

PART I: INTRODUCTION TO THIS CONTROLLER POLICY

This Binding Corporate Rules: Controller Policy (“Controller Policy”) establishes the Twilio group of companies' ("Twilio") approach to compliance with applicable data protection laws (and, in particular, European laws) when processing personal data for its own purposes as a controller.