From 1 October 2026 Meta charges businesses per service message on the WhatsApp Business Platform, at each market’s utility and authentication rate, after a free tier of 1,000 service messages a month per business phone number.
Twilio: Content API rate limits now return 429s, WhatsApp Embedded Signup moves to v4, and transcription failover switches on 22 October 2026
EditorialBy TrustList Editorial
Twilio has set account rate limits on its Content API (requests over them get HTTP 429), made WhatsApp Embedded Signup v4 generally available, and from 22 October 2026 turns on provider failover for Real-Time Transcriptions on every existing account.
About Twilio: Content API rate limits now return 429s, WhatsApp Embedded Signup moves to v4, and transcription failover switches on 22 October 2026
Twilio: Content API rate limits now return 429s, WhatsApp Embedded Signup moves to v4, and transcription failover switches on 22 October 2026
2 October 2026: Twilio, the communications API provider, has posted three changes to its changelog that developers and contact-centre teams need to act on. Two were posted on 30 September 2026; the third takes effect on 22 October.
Not yet independently verified. This rests on Twilio’s own changelog; no independent report was found. The Content API post gives no separate start date, so we treat the limits as applying from its date, 30 September 2026. We will update this when it can be confirmed, and remove this note.
Content API: per-account rate limits
The Content API stores the message templates used for WhatsApp, RCS and other rich messages. Twilio now applies these limits per account:
- Fetch a template: 100 requests a second.
- List templates: 20 requests a second.
- Create and delete: 100 requests a second.
- Update: 20 requests a second.
Requests over a limit receive HTTP 429 Too Many Requests. Twilio recommends exponential backoff and an audit of high-volume pipelines. A nightly script that lists or updates thousands of templates in a tight loop is the kind of job that will now fail part-way through.
WhatsApp Embedded Signup version 4
Version 4 of Embedded Signup, the flow through which businesses connect their WhatsApp Business accounts to a Twilio-based product, became generally available on 30 September. Twilio says the move is required because WhatsApp is deprecating older versions; it gives no end date for them. Software vendors who onboard their own customers onto WhatsApp through Twilio should schedule the upgrade.
Real-Time Transcriptions: failover on by default from 22 October
From 22 October 2026, if Real-Time Transcriptions cannot connect to the primary speech provider, Twilio starts the session on a second provider. Failover is switched on for all existing accounts on that date, stays within the account's region, and can be turned off per sub-account in the Console. A new "Auto" mode, in which Twilio picks the provider per session, becomes the default for new customers only; existing configurations do not change unless a customer opts in.
What to do
- Add backoff and retry to any code that calls the Content API in bulk, and spread large template jobs out.
- Plan the Embedded Signup v4 upgrade before WhatsApp sets a cut-off.
- Decide on failover by 22 October: if your contracts or data-processing terms name a single speech provider, check whether a second one is allowed, and opt the affected sub-accounts out if it is not. Transcripts may also differ slightly between providers, which matters for analytics and compliance recording.
Related on TrustList:
Sources
- Twilio changelog: Content API rate limits - 30 September 2026
- Twilio changelog: WhatsApp Embedded Signup v4 - 30 September 2026
- Twilio changelog: Provider failover and Auto mode provider selection for Real-Time Transcriptions - 22 September 2026
Categories & features
- API
- Text Messaging
- Call Center Software
- Customer Service Software
- San Francisco, Ca
TrustList Weekly
The week in software and IT, in one email
The news that matters to buyers, new rankings and our own research. Every Thursday, free, and easy to leave.
You may be interested in
GitHub finished rolling out stateless installation tokens on 2 October: still ghs_ but about 520 characters instead of 40. The temporary opt-in header stops working on 30 November 2026, so check length limits, secret stores and proxies.
Twilio’s Heightened Awareness Period runs from 19 November 2026 to 4 January 2027: US sending rates for toll-free, short code and 10DLC may be limited per account, and high-volume short code and toll-free senders may move to Market Throughput.
Reddit told moderators and developers on 30 September 2026 that RSS feeds end on 13 November 2026 and public API access by March 2027. Apps and bots not registered by 12 January 2027 lose API access. Social-listening users should ask their vendor.
More than 8,500 sender names are on the RTR register, operators must check it before delivery and are liable for breaches, and direct alphanumeric SMS from abroad is to be banned.
The Federal Administrative Court backs the data protection commissioner: staying on the line after a recording notice is not consent. PostFinance has until mid-February 2027 to get consent or delete.
Colombia’s CRC requires mobile operators from 1 October 2026 to give a direct cancellation channel with no transfers or retention offers first; fixed services follow in December. Operators must also block calls spoofing listed numbers.
FreePBX’s 29 September advisories fix three high-severity SQL injection flaws (Pinsets, Sangoma Connect RT API, SIPSTATION) and a contact-manager access flaw, after six high or medium advisories on 17 September. All need a login; update the modules.
More on TrustList
Everything here links back to the same verified catalogue. Pick your next stop.
- More APIThe ranking for this subject
- CompaniesAgencies, consultancies and IT service providers, ranked by verified reviews.
- ProductsSoftware and SaaS with pricing, features, integrations and alternatives.
- AwardsAnnual recognition decided by verified reviews and an independent jury.
- LaunchesNew products and releases, voted up by the community every day.
- AI ModelsBenchmark scores and community ratings for every major model.
- RequestsBuyers describe what they need; vendors respond directly.
- PeopleReviewers, authors and makers with public profiles.
- ComparePut up to four listings side by side before you shortlist.