Stytch

stytch.com · facts updated 4 days ago

Privacy facts at a glance

Retention: Data retention is listed as a topic in the Trust Center but no specific retention period is stated in the provided excerpts.
Breach notification: Data Breach Notifications are listed as a topic in the Trust Center but no specific notification SLA is stated in the provided excerpts.
DPA available: Yes
Certifications: ISO/IEC 27001 · ISO/IEC 27017:2015 · ISO/IEC 27018:2019 · PCI DSS · PCI DSS v4.0.0 · SOC 2 · HIPAA
GDPR addressed: Yes
CCPA addressed: Yes

Tracked documents

https://www.twilio.com/en-us/legal/privacy checked 5 hours ago

https://www.twilio.com/en-us/legal/tos checked 6 hours ago

Data processing agreement

https://www.twilio.com/en-us/legal/data-protection-addendum checked 6 hours ago

Subprocessor list

https://www.twilio.com/en-us/legal/sub-processors checked 6 hours ago

Security / trust page

https://security.twilio.com checked 7 hours ago

Recent changes

Security / trust page 4 days ago

Document updated.

minor Security / trust page 3 weeks ago

Stytch's security page shows the Authy Pentest Remediation Schedule was both added and removed, resulting in no net change to the document content.

major Privacy policy 4 weeks ago

Stytch updated its privacy policy to explicitly add FTC enforcement authority language to the DPF section, add an 'Opt-Out' right covering third-party data disclosure and materially different purpose use, and rename the dispute resolution section header from 'Data Protection Frameworks' to 'Data Privacy Frameworks'.

minor Privacy policy 4 weeks ago

Stytch's privacy policy diff shows only banner/promotional content changes on the page, with Twilio Gartner Magic Quadrant promotional text added and an AI agent promotional banner removed, with no changes to privacy policy substance.

minor Subprocessor list 4 weeks ago

Stytch's subprocessor list diff contains only non-substantive marketing banner content changes on the Twilio website, with no actual subprocessor additions, removals, or policy changes.

minor Data processing agreement 4 weeks ago

Stytch's DPA page shows only website banner/promotional content changes, with a Twilio Gartner Magic Quadrant advertisement replacing a conversational AI promotional banner, with no changes to DPA terms or data processing content.

Public summary; per-account review history visible to subscribers tracking this vendor.

Track Stytch in your workspace.

Get notified when Stytch adds a subprocessor, changes retention, updates their DPA, or quietly amends their privacy posture.

Start tracking — 14-day trial

No card required.