Data & privacy

GDPR stands for the General Data Protection Regulation and came into effect on May 25, 2018. GDPR replaced national privacy and security laws that previously existed within the EU with a single, comprehensive EU-wide law that governs the use, sharing, transfer and processing of EU citizens’ personal data.

Our policy is to respect all laws that apply to our business, and this includes GDPR. We also appreciate that our customers have requirements under GDPR that are directly impacted by their use of Telnyx products and services. We are committed to helping our customers stay in compliance with GDPR and their local requirements.

As part of our commitment to GDPR compliance, we maintain a regularly updated Privacy Policy.

In addition, here are a few things that Telnyx is committed to doing to ensure our compliance with GDPR and that of our customers:

• Where we are transferring data outside of the EU, Telnyx commits to having the appropriate data transfer mechanisms in place as required by GDPR.
• Telnyx commits to follow appropriate security measures and precautions in accordance with GDPR.
• Telnyx will assist with notifying regulators of breaches and promptly communicating any breaches to customers and users.
• We will ensure that employees authorized to process personal data have committed to confidentiality.
• We will hold any subprocessors that handle personal data, including our data center partners, to appropriate data management, security, and privacy practices and standards.
• Telnyx commits to carrying out data impact assessments to identify and mitigate high risk processing. y.
• Where appropriate, we will offer contractual language documenting our commitments to our customers to support their GDPR obligations.
• Telnyx will assist our customers, insofar as possible, to respond to data subject requests our customers may receive under the GDPR.

The California Consumer Privacy Act ("CCPA") provides California residents with specific rights regarding their personal information. This section describes CCPA rights and explains how to exercise those rights.

• The right to access
• The right to opt out of the sale of personal information
• The right to deletion of a consumer's personal information
• The right of data portability
• The right not to be discriminated against for exercising rights under the CCPA.

This particular section in the Telnyx Privacy Policy enumerates the rights consumers have under the Act and provides them with some information required by the law. We're aware that California passed additional privacy legislation, the California Privacy Rights Act ("CPRA"). Telnyx commits to compliance with the requirements of California data privacy law, and analyzes the requirements of new laws and updates our programs, policies, and materials where needed.

Telnyx processes personal data to provide our products and services and for other purposes as outlined in the applicable Privacy Policy for the products you are using or accessing.

We provide a summary of the data we collect, organized according to different categories in the section titled "What Kinds of Personal Information Does Telnyx Collect?"

Note that Telnyx encrypts data in transit and at rest.

We need to transfer your personal data to other organizations to help us provide services to you. For example, we use Amazon Web Services data centers to assist us in storing your data. In some instances, these are other companies within the Telnyx family. For example, if you request support and assistance, you may speak to our agents at our headquarters in the US or to one of our other support centers.

Whenever we share your data, we remain accountable to you for how it is used by any of these organizations. We require all service providers, including other Telnyx companies, to enter into contracts with us to ensure that our customers' personal data receives the appropriate level of protection and safeguards.

Telnyx understands and respects the rules for onward transfers of personal data outside of the EU. To that end, Telnyx offers customers a Data Processing Addendum (DPA) that includes the EU Standard Contractual Clauses to meet onward transfer requirements under the GDPR. The Telnyx DPA is available for all customers on request which can be electronically signed to meet onward transfer requirements under GDPR.

The European Data Protection Board issued guidance on supplementary measures to meet the adequacy requirement of GDPR. We will continue to analyze these requirements and any others issued by European data protection authorities as they arise.

For more information on how we transfer and process personal data, see our Privacy Policy.

Telnyx continues our commitment to providing exceptional data security management. As such, we have completed our ISO/IEC 27001:2013 and ISO/IEC 27701 audits for certification. ISO/IEC 27001:2013 provides standards for Information Security Management Systems (ISMS). Using ISO/IEC 27000 standards enables organizations to manage the security of assets such as financial information, intellectual property, employee details or information entrusted by third parties. ISO/IEC 27701 is an extension to 27001 that focuses on privacy. For more information or to receive a copy of the certification, please reach out to a customer service representative.

Further, Telnyx has, and continues to build, best-in-class processes to ensure that all clients’ data is secure. We are also dedicated to providing exceptional data security management services. Accordingly, we are SOC 2 certified for both Type 1 and Type 2. These certifications outline and acknowledge our extensive, documented, and improvable processes and controls that we diligently follow to keep our clients safe, continuously productive and efficient. For more information, please reach out to a customer service representative.