TWLO · CIK 1447669
What Twilio Inc told the SEC could break it.
Twilio's disclosures lean on regulation of how it handles data and where it can operate. Under the GDPR and other global data-protection regimes, regulators can impose data-transfer bans, deletion orders and fines up to 4% of worldwide revenue. It also faces U.S. export-control and sanctions exposure, acknowledging that some of its products and services have been provided to or involved a small number of sanctioned individuals, entities or regions, which carries civil and criminal penalty risk. Structurally, its business depends on third-party telecom carriers — its cost of revenue consists primarily of fees paid to those network service providers to deliver its messages and voice traffic.
3 self-disclosed vulnerabilities, pulled from its own filings, each in the company’s words, with the source. This is the risk register almost nobody reads.
In its own words
What could break it.
Regulatory & policy
- GDPR / data protectionmedium
GDPR and global data-protection regimes can impose data-transfer bans and fines up to 4% of worldwide revenue.
“For example, under the GDPR, regulators may impose temporary or definitive bans on data transfers or other processing, require deletion, and impose significant fines, potentially ranging up to 4% of our worldwide revenue.”
- US export controls / economic sanctionsmedium
Company acknowledges products/services have been provided to a small number of sanctioned individuals/entities or sanctioned regions, exposing it to civil/criminal penalties.
“however, we are aware of certain of our products and services being provided to, procured from, or that involve dealings with, a small number of individuals and entities that are the subject of, or are located in countries or regions subject to, sanctions regulations administered by U.S. and foreign governmental authorities.”
SEC filing →As of 2026
Supplier concentration
- network service providers (telecom carriers)low
Cost of revenue consists primarily of fees paid to network service providers (telecom carriers) for message/voice delivery — a structural dependence on third-party carriers.
“Cost of Revenue . Cost of revenue consists primarily of fees paid to network service providers.”
SEC filing →As of 2026
In the MyPRIA app, this is checked against the companies you actually own.
← World Watch