skills.rest
openai
openaiOFFICIAL
Explore all skills by this author →
WebsiteGitHub

twilio-security-compliance-hipaa

Configure Twilio accounts and services for HIPAA-compliant healthcare workflows.

5.3k|765|Updated Mar 4, 2026
Search Tags:#healthcare#hipaa#Twilio#phI#BAA#Compliance#message redaction
One-click install
npx skills add https://github.com/openai/plugins --skill twilio-security-compliance-hipaa
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: twilio-security-compliance-hipaa
Source: https://github.com/openai/plugins/tree/main/plugins/twilio-developer-kit/skills/twilio-security-compliance-hipaa
Command: npx skills add https://github.com/openai/plugins --skill twilio-security-compliance-hipaa

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Building healthcare applications on Twilio risks PHI exposure and compliance violations if accounts are not correctly designated and only eligible services are used. This Skill guides developers through BAA execution, HIPAA Project designation, eligible service selection, and per-product configuration requirements.

Core Features & Use Cases

  • HIPAA Account Setup: Walks through executing a BAA, designating HIPAA Projects via self-service Console or support tickets, and handling subaccount inheritance rules.
  • Eligible Service Reference: Lists which Twilio services (Voice, SMS, Verify, Flex, Segment, Runtime) are HIPAA eligible and which are not (WhatsApp, SendGrid Email, AI Assistants, Fraud Guard).
  • Per-Product Requirements: Details configuration steps like HTTP auth for recording URLs, message redaction prerequisites, Voice Recording Encryption, and Flex Insights PII redaction.
  • Use Case: A developer building a patient appointment reminder system uses this Skill to confirm SMS is eligible, enable message redaction, disable Sticky Sender, and switch webhooks to POST before sending any PHI.

Quick Start

Ask the assistant to configure your Twilio account for HIPAA compliance and verify which services are eligible for your healthcare workflow.

Frequently Asked Questions about twilio-security-compliance-hipaa

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I make my Twilio account HIPAA compliant?▼

Execute a Business Associate Addendum with your Twilio Account Representative and purchase a Twilio Editions package that includes HIPAA Accounts. Then designate HIPAA Projects through the Console (self-service for BAAs after June 6, 2024) or via a support ticket for older BAAs.

Which Twilio services are HIPAA eligible?▼

Eligible services include Programmable Voice, SMS/MMS, Verify (SMS, Voice, Push only), Conversations (excluding WhatsApp), Flex, Segment, Studio, Functions, and Event Streams. Not eligible are WhatsApp, SendGrid Email, AI Assistants, Verify Fraud Guard, Marketplace add-ons, and Autopilot.

Can I use WhatsApp or SendGrid email for HIPAA workflows on Twilio?▼

No. WhatsApp is not eligible because Meta does not offer a BAA, and SendGrid Email is not HIPAA eligible in any context including Flex and Verify. Only SMS, Voice, and Push channels are eligible for Verify.

Do Twilio subaccounts automatically inherit HIPAA status?▼

Existing subaccounts are not auto-designated and must be individually flagged for HIPAA. Only new subaccounts created after the parent account's designation auto-inherit HIPAA status, so verify each subaccount's flag.

What are the prerequisites for Twilio message redaction?▼

Disable Sticky Sender and Fallback to Long Code on Messaging Services, contact Support to disable built-in STOP filtering, and set all webhooks to POST since GET parameters are logged for 7 days. Message Redaction is incompatible with Studio, Flex, and Conversations.

Related Skills

Explore More Legal & Compliance Skills→
twiliotwilio
28

twilio-organizations-setup

Configure Twilio Organization governance with SSO, SCIM, and role-based access.

Official
Advanced
Canhada-LabsCanhada-Labs
2

healthcare-customer-service

Manage patient-facing healthcare customer service with HIPAA, LGPD, and GDPR compliance.

Official
Advanced
CerisonAutomationCerisonAutomation

twilio-setup

Configure Twilio credentials, phone numbers, and webhook URLs for voice calls.

Community
Intermediate
proffesor-for-testingproffesor-for-testing
436

compliance-testing

Map GDPR, HIPAA, PCI-DSS, SOC 2, and CCPA regulations to testable controls.

Community
Advanced