GDPR checklist for communications tools.
Providers like this process personal data on your behalf, so they belong in your records. Compare 2 common tools and see what to check for each.
Twilio
AblyWhat to check for communications tools
- Confirm the region and any transfer outside the EEA.
- Keep the agreement text you accepted and its date.
- List the provider in your privacy policy and your processing register.
All communications tools
Questions, answered.
What should I check before using a communications tool under the GDPR?
Confirm the region and any transfer outside the EEA. Keep the agreement text you accepted and its date. List the provider in your privacy policy and your processing register.
Do I need a data processing agreement with a communications provider?
If the provider handles personal data on your behalf, yes: Article 28 of the GDPR requires a written contract. Some providers publish the text, others give it to you inside your account. Providers that decide their own purposes may act as independent controllers instead, so check the role.
Which communications tools does Privacyboard cover?
Twilio, Ably. Each has a page with its agreement, usual role and data location, checked on 1 November 2026.
Other categories
Privacyboard is not affiliated with these vendors. Checked on 1 November 2026. This is guidance, not legal advice.