Compliance starts by not pasting a secret

• Twilio's webhook docs name signing with shared keys, and the security page opened with the title Security.
• The Telnyx guide uses a Bearer API key and tells you to copy it from API Keys. The key is not in this repository.
• Bandwidth does not store message text, on the messaging guide. Your own logs might. Do not put a customer's message in a study note.
• The Twilio article records data breaches in 2022 and 2024. That is a history sentence, not a hardening guide.
• Certificate names, a SOC report, and a HIPAA opinion were not read.

These are study notes, not vendor documentation and not legal advice. learning-only student project. https://cyphermonkeylabs.com/#contact https://github.com/CypherMonkeyLabs https://linktr.ee/cypherMonkey