Twilio

Recently shipped automatic SSL for SendGrid branded links and tightened Verify geo permissions for Italy and Argentina.

SendGrid link branding now provisions SSL automatically. A new toggle in the standard setup flow makes SendGrid host the certificate for tracking and branded links, removing external CDN/DNS certificate management. The Link Branding API accepts an auto_ssl parameter and reports certificate status. Gmail begins warning on non-HTTPS links by end of October 2026.

Verify tightened fraud posture for Italy and Argentina. Accounts still on the default "Allow all traffic" geo permission for IT or AR moved to "Monitor all traffic for fraud" on August 19, 2026, in response to rising SMS pumping fraud. Customized geo settings are untouched.

Functions Classic deprecation is set. New Functions (Classic) and assets stop being creatable September 13, 2026; existing functions, URLs, environment variables, and deployed code move to the new Functions between September 14 and October 26. No customer action required.

Messaging added WhatsApp strengths and consent resets. Bulk Messaging now personalizes WhatsApp Content Templates for many recipients at once, with WhatsApp→SMS and RCS→WhatsApp fallbacks. The Consent Management API supports programmatic re-opt-in on US/CA Toll-Free numbers, clearing network-level opt-out blocks (errors 21610 and 30004) without a "START" keyword.

Upcoming changes cluster in September.

• September 9: TLS certificates rotate for all REST API endpoints — testable now at tls-test.twilio.com.
• September 15: new TFV and A2P 10DLC rejection error codes; Event Streams webhooks move to a regional US East IP (only affects source-IP validation).
• September 1: Functions/Assets date_created/date_updated corrected to true UTC; SendGrid removed the Send to Coworker step.

Voice and email gained configuration depth. US Branded Calling went GA on T-Mobile and Verizon, showing logo and call reason. Twilio Email added dedicated IPs with 41-day warm-up, custom pools, and per-sub-account assignment. The Voice JS SDK shipped RNNoise/Krisp noise-cancellation reference components, and Restricted API Keys gained granular Conversations (classic) permissions.