generated: '2026-10-08'
method: searched
source: https://telnyx.com/ai/compliance.json (provider-published compliance list), https://api.telnyx.com/.well-known/* (served), https://telnyx.com/auth.md,
  https://telnyx.com/.well-known/x402, provider docs pages named per row; all fetched 2026-10-08
note: 'kind: claimed = the provider''s own compliance.json states it (SOC 2 ''report available under NDA''; FedRAMP in_progress; FIPS 140-2 not_stated
  and therefore not listed); served/probed = a document or endpoint answered from the provider''s host this run; documented = stated on the provider''s
  docs. derive-conformance.py appends what the contract itself declares.'
standards:
- id: soc2
  name: SOC 2 Type II
  conforms: true
  kind: claimed
  evidence:
    url: https://telnyx.com/ai/compliance.json
    quote: 'SOC 2 Type II - status active - scope: Programmable Voice, Programmable Messaging, Video, and Wireless'
    fetched: '2026-10-08'
    http_status: 200
    also: https://trust.telnyx.com/ (trust center, JS challenge to a plain GET; security/telnyx-trust-center.yml)
- id: iso27001
  name: ISO 27001:2022
  conforms: true
  kind: claimed
  evidence:
    url: https://telnyx.com/ai/compliance.json
    quote: 'ISO 27001:2022 - status active - scope: Information security management system'
    fetched: '2026-10-08'
    http_status: 200
- id: iso27701
  name: ISO 27701:2019
  conforms: true
  kind: claimed
  evidence:
    url: https://telnyx.com/ai/compliance.json
    quote: 'ISO 27701:2019 - status active - scope: Privacy information management system'
    fetched: '2026-10-08'
    http_status: 200
- id: hipaa
  name: HIPAA
  conforms: true
  kind: claimed
  evidence:
    url: https://telnyx.com/ai/compliance.json
    quote: 'HIPAA - status active - scope: Voice, messaging, fax, and AI inference services'
    fetched: '2026-10-08'
    http_status: 200
- id: gdpr
  name: GDPR
  conforms: true
  kind: claimed
  evidence:
    url: https://telnyx.com/ai/compliance.json
    quote: 'GDPR - status active - scope: All data processing for EU customers'
    fetched: '2026-10-08'
    http_status: 200
    also: https://telnyx.com/legal/subprocessors (200) and https://developers.telnyx.com/docs/account-setup/data-locality (EU/Germany storage
      region)
- id: pci-dss
  name: PCI DSS
  conforms: true
  kind: claimed
  evidence:
    url: https://telnyx.com/ai/compliance.json
    quote: 'PCI DSS - status active - scope: Payment card processing for billing'
    fetched: '2026-10-08'
    http_status: 200
- id: fedramp
  name: FedRAMP
  conforms: in_progress
  kind: claimed
  evidence:
    url: https://telnyx.com/ai/compliance.json
    quote: 'FedRAMP - status in_progress - scope: US Federal government cloud services'
    fetched: '2026-10-08'
    http_status: 200
- id: stir-shaken
  name: STIR/SHAKEN
  conforms: true
  kind: claimed
  evidence:
    url: https://telnyx.com/ai/compliance.json
    quote: 'STIR/SHAKEN - status active - scope: All originating voice calls'
    fetched: '2026-10-08'
    http_status: 200
    also: 'https://telnyx.com/llms.txt: ''SIP Trunking ... STIR/SHAKEN A-level'''
- id: a2p-10dlc
  name: A2P 10DLC
  conforms: true
  kind: claimed
  evidence:
    url: https://telnyx.com/ai/compliance.json
    quote: 'A2P 10DLC - status active - scope: Application-to-person SMS messaging in the US'
    fetched: '2026-10-08'
    http_status: 200
    also: https://developers.telnyx.com/docs/messaging/10dlc/10dlc-rate-limits (carrier throughput tables by message class)
- id: rfc8414
  name: OAuth 2.0 Authorization Server Metadata
  conforms: true
  kind: served
  evidence:
    url: https://api.telnyx.com/.well-known/oauth-authorization-server
    http_status: 200
    fetched: '2026-10-08'
    quote: issuer https://api.telnyx.com; grants_supported authorization_code, client_credentials, refresh_token; agent_auth.credential_types_supported
      bearer_api_key, oauth_pkce
- id: rfc9728
  name: OAuth 2.0 Protected Resource Metadata
  conforms: true
  kind: served
  evidence:
    url: https://api.telnyx.com/.well-known/oauth-protected-resource
    http_status: 200
    fetched: '2026-10-08'
    quote: resource https://api.telnyx.com with 24 scopes_supported (account_management.read ... voice.write)
- id: oauth2-pkce
  name: OAuth 2.0 authorization code with PKCE (S256)
  conforms: true
  kind: documented
  evidence:
    url: https://telnyx.com/auth.md
    http_status: 200
    fetched: '2026-10-08'
    quote: 'Method 2 - OAuth 2.0 + PKCE (S256) ... Supported grants: authorization_code, client_credentials, refresh_token'
- id: mcp
  name: Model Context Protocol (streamable HTTP)
  conforms: true
  kind: probed
  evidence:
    url: https://api.telnyx.com/v2/mcp
    http_status: 200
    fetched: '2026-10-08'
    quote: tools/list answered with six tools; server card at https://telnyx.com/.well-known/mcp/server-card.json ($schema static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json)
- id: a2a-agent-card
  name: A2A Agent Card
  conforms: true
  kind: probed
  evidence:
    url: https://developers.telnyx.com/.well-known/agent-card.json
    http_status: 200
    fetched: '2026-10-08'
    quote: protocolVersion 0.3 card on developers.telnyx.com; 0.2.0 cards on telnyx.com and portal.telnyx.com (the portal card says a conversational
      A2A endpoint is not yet available)
- id: x402
  name: x402 pay-per-call (HTTP 402 + EIP-3009 USDC on Base)
  conforms: true
  kind: served
  evidence:
    url: https://telnyx.com/.well-known/x402
    http_status: 200
    fetched: '2026-10-08'
    quote: x402Version 2; resource https://x402.telnyx.com/v1/chat/completions; accepts scheme exact, network eip155:8453
- id: llms-txt
  name: llms.txt
  conforms: true
  kind: served
  evidence:
    url: https://developers.telnyx.com/llms.txt
    http_status: 200
    fetched: '2026-10-08'
    quote: 27,220-byte index of the developer docs; a second llms.txt at https://telnyx.com/llms.txt (18,174 bytes); every docs page also serves
      a markdown twin at <page>.md
- id: openai-chat-completions
  name: OpenAI-compatible chat completions API
  conforms: true
  kind: domain-standard
  evidence:
    url: https://telnyx.com/.well-known/x402
    http_status: 200
    fetched: '2026-10-08'
    quote: OpenAI-compatible chat completions via Telnyx Inference - 13 open-weight models ... selected via body.model
    also: https://developers.telnyx.com/docs/inference/data-residency names api.telnyx.com / api.telnyx.eu ingress domains for the Inference API
- id: e164
  name: E.164 phone number format
  conforms: true
  kind: domain-standard
  evidence:
    url: https://developers.telnyx.com/docs/development/api-fundamentals/api-errors
    http_status: 200
    fetched: '2026-10-08'
    quote: 10016 | Phone number must be in +E.164 format | The specified phone number parameter must be in +E.164 format.
- id: sip
  name: SIP (RFC 3261) trunking and response codes
  conforms: true
  kind: domain-standard
  evidence:
    url: https://developers.telnyx.com/docs/voice/sip-trunking/troubleshooting/response-codes
    http_status: 200
    fetched: '2026-10-08'
    quote: SIP response codes reference listed on the API error catalog page; 61 SIP Trunking entries in https://developers.telnyx.com/data/api-errors.json
- id: ed25519-webhook-signatures
  name: Ed25519-signed webhooks
  conforms: true
  kind: documented
  evidence:
    url: https://developers.telnyx.com/docs/development/api-fundamentals/webhooks/receiving-webhooks
    http_status: 200
    fetched: '2026-10-08'
    quote: preserve `telnyx-timestamp` and `telnyx-signature-ed25519`, verify the signature before trusting the event
- id: openapi-3.2
  conforms: true
  evidence: the document declares 3.2.0
- id: oauth2
  conforms: true
  evidence: 'securitySchemes: bearerAuth (http), branded-calling_bearerAuth (http), oauthClientAuth (oauth2), outbound-voice-profiles_bearerAuth
    (http), pronunciation-dicts_bearerAuth (http), stored-payment-transactions_bearerAuth (http)'
- id: rfc9457
  conforms: false
  evidence: no response declares application/problem+json
- id: idempotency
  conforms: true
  evidence: idempotency_key declared on 2 of 553 mutating operations (partial)
- id: pagination
  conforms: true
  evidence: list operations take limit, page, page_number, page_size, per_page