Twilio
Connect Twilio to Safeguard: what it provides, how to set it up, and the frameworks it provides evidence for.
Record your Twilio connection as communications platforms evidence. Automated collection is not available for this provider yet.
| Category | Communications Platforms |
| Connect with | API token |
| What a connection produces | Connection record |
Connect with an API token
-
In Twilio:
- In the Twilio Console, go to Settings › Account settings › API keys & auth tokens (in the legacy Console: Admin › Account management › Keys & credentials › API keys & tokens).
- Click Create API key, enter a name, and choose the key type Restricted.
- Under Permissions, select only the read permissions Safeguard needs, then click Next.
- Copy the secret and store it somewhere secure, then check Got it! and click Finish.
Where to find the other values:
- Account / Org / Workspace (optional): Not confirmed from a fetched page (the Account SID location is not stated in the API keys article).
Twilio's public documentation does not cover every step.
Key types are Standard, Restricted, or Main (legacy only). Restricted keys give 'Customized, fine-grained access to specific Twilio API resources'; the exact read-only permission names were not enumerated on the fetched page. The Account SID location was not sourced. The fetched page does not say explicitly that the secret is shown only once.
Source: twilio.com, checked 2026-10-07.
-
On Compliance › Connectors, open Twilio, click Connect, choose API token and fill in:
Field What to enter API token / Personal access token Required. Stored encrypted and never shown again. Base URL (optional) — Account / Org / Workspace (optional) — -
Click Connect with token.
Frameworks
Twilio publishes no API for what these tests check, so its evidence is an attestation: connect it to record the connection, then attest the result. An accepted attestation counts toward each control below.
| Framework | Evidence | Controls | Tests |
|---|---|---|---|
| SOC2 | Attestation | CC6.2, CC6.3 | 1 |
| ISO/IEC 27001 | Attestation | A.5.18 | 1 |
| HIPAA Security Rule | Attestation | 164.308(a)(3) | 1 |
| PCI DSS | Attestation | 7.2.4 | 1 |
| NIST CSF 2.0 | Attestation | PR.AA-05 | 1 |
These tests are switched on per workspace by the Safeguard team.
Related
- Communications Platforms connectors
- Compliance connectors: how connecting works, card statuses and multiple accounts
- Connector setup reference: every connector in one table
- Frameworks and connectors: how connectors provide evidence for frameworks