Snapshot 10708

Document
Trust center
URL
https://trust.langchain.com/
Fetched
HTTP status
200
Content type
text/html
Fetch mode
browser
Size
353850 bytes
SHA-256 (raw)
a1e22c6b1412658c16e1dc82a8cf6560ce00c464438511c25ae304604481b549
SHA-256 (normalized text)
296c652bf7f909a9d40982707acee28bd1baacfabcc051e9b20beede47f38bf5

Raw (normalized text)

Scripts and page chrome removed; this is what change detection compares.

Skip to navigationSkip to main content
LangSmith Security Hub
LangSmith is an all-in-one developer platform for every step of the LLM-powered application lifecycle, whether you're building with LangChain or not.
To track LangSmith incidents and health, visit our status pageOpens in new tab.
For customer support, visit our support centerOpens in new tab.
For security and trust inquiries, contact our trust teamOpens in new tab.
Privacy PolicyOpens in new tab
Welcome!
At LangChain, security and transparency are foundational to everything we build. This Trust Center provides real-time insight into LangSmith’s compliance posture, infrastructure controls, subprocessors, and audit results.
We keep this hub current so you always know how we protect your data. For any additional information, reach out at trust@langchain.dev.
Compliance
SOC 2 Type II
ISO 27001:2022
GDPR
HIPAA
Resources
View all
Pre-Filled Customer Questionnaires
2025-Nov LangChain CAIQv4.0.3 [SaaS].xlsx
Attestations
2026 SOC 2 Type II
ISO 27001 Certificate 2026.pdf
ISO 27001 Statement of Applicability (2026).pdf
2026 LangSmith Pentest Exec Summary.pdf
View 1 more
Policies
Acceptable Use Policy
Access Control Policy
Asset Management Policy (EN)
Business Continuity and Disaster Recovery Plan (EN)
View 12 more
Other Security Docs
BYOC LangSmith Security Overview.pdf
LangSmith pre-filled TIA.xlsx
Subprocessors
View all
Google Cloud Platform
•
Cloud provider
USA or Netherlands
GCP is LangChain's Cloud hosting provider and provides LLM inference for AI-powered features for applicable features and plans.
Amazon Web Services
•
Cloud provider
USA
AWS is LangChain's Cloud hosting provider and provides LLM inference for AI-powered features for applicable features and plans.
Clickhouse
•
Production Database
USA or Netherlands
Production database
Supabase
•
Database provider
US or Germany
Authentication and backend services for LangSmith
Controls
Updated less than a minute ago
View all
Infrastructure security
Unique account authentication enforced
Access control procedures established
Unique network system authentication enforced
View 5 more Infrastructure security controls
Organizational security
Asset disposal procedures utilized
Portable media encrypted
Code of Conduct acknowledged by contractors
View 6 more Organizational security controls
Product security
Control self-assessments conducted
Penetration testing performed
Data transmission encrypted
View 1 more Product security control
Internal security procedures
Continuity and Disaster Recovery plans established
Continuity and disaster recovery plans tested annually
Cybersecurity insurance maintained
View 23 more Internal security procedures controls
Data and privacy
Data retention procedures established
Customer data deleted upon leaving
Data collected
Customer personally identifiable information
Employee personally identifiable information
Credit card information
Personal health information
FAQ
View all
Updates
View all
Privacy
2026 September Subprocessor Update: Parallel
Published September 11, 2026
Dear LangChain Customer,
We are writing to inform you of an addition to LangChain's subprocessor list in connection with a new built-in web search feature for agents built in LangSmith.
New Subprocessor (effective October 11, 2026, or upon earlier customer enablement):
Parallel: to provide web search services for the LangSmith built-in search tool
The search tool is opt-in. When used, Parallel receives the requests issued by the agent, and nothing from your stored LangSmith data.
Our updated subprocessor list is available at our [Trust Center (https://trust.langchain.com/subprocessorsOpens in new tab). Questions? Contact privacy@langchain.dev.
Thank you for being a valued customer.
Regards,
LangChain Privacy Team
Compliance
2026 SOC 2 Type II Report now Available
Published September 3, 2026
Dear LangChain Customer,
We're proud to announce that we've just received our annual SOC 2 Type II report, and made some meaningful additions to scope: it now covers Security, Availability, and Confidentiality.
A SOC 2 Type II report is an independent auditor's opinion on whether an organization's controls were suitably designed and operated effectively over a period of time, not just at a single point in time. This one covers July 1, 2025 through June 30, 2026, spans our entire LangSmith offering, and received an unqualified opinion with no exceptions noted.
The examination was performed by Advantage Partners, the same accredited firm behind our recent ISO/IEC 27001 certification.
Questions? Contact us at trust@langchain.dev. The full report is available on our trust center.
Thank you for being a valued customer.
Best, LangChain Security Team
General
LangChain is now ISO/IEC 27001:2022 certified
Published July 2, 2026
Dear LangChain Customer,
We're glad to share that LangChain has achieved ISO/IEC 27001:2022 certification for our Information Security Management System (ISMS).
ISO/IEC 27001 is a leading internationally recognized standard for information security management. Certification requires an independent, accredited auditor to verify that an organization's policies, controls, and day-to-day practices actually protect the data it handles.
This certification reflects the maturity of our security program, built through months of policy work, employee training, and third-party audits. It's also one of the most widely requested certifications in enterprise security reviews, and we expect it to make procurement and security reviews smoother for both current and prospective customers.
Our certification was issued by Advantage Partners, an IAS-accredited certification body, and covers the systems, teams, and information assets supporting LangSmith and our LLM application tooling.
Questions? Contact us at trust@langchain.dev.
Thank you for being a valued customer.
Regards,
LangChain Security Team
Privacy
2026 May Subprocessor Updates
Published May 12, 2026
Dear LangChain Customer,
We are writing to inform you of additions to LangChain's subprocessor list in connection with LangSmith AI-powered features, including the LangSmith Engine and other in-product agents.
New Subprocessors (effective June 11, 2026, or upon earlier enablement):
OpenAI, L.L.C. — to provide AI model inference services
Anthropic, PBC — to provide AI model inference services
Fireworks — to provide AI model inference services
Baseten — to provide AI model inference services
These are the same providers previously announced for Fleet. Features using LangChain-managed keys are opt-in for enterprise customers.
We have also added the following subprocessors to our list:
Pylon — to provide customer support ticketing and communication services (unrelated to AI features)
Stripe — to provide payment processing services for self-serve customers (unrelated to AI features)
Our updated subprocessor list is available at our Trust CenterOpens in new tab. Questions? Contact privacy@langchain.dev.
Thank you for being a valued customer.
Regards, LangChain Privacy Team
Read more about 2026 September Subprocessor Update: Parallel
LangSmith Security Hub
LangSmith is an all-in-one developer platform for every step of the LLM-powered application lifecycle, whether you're building with LangChain or not.
To track LangSmith incidents and health, visit our status pageOpens in new tab.
For customer support, visit our support centerOpens in new tab.
For security and trust inquiries, contact our trust teamOpens in new tab.
Privacy PolicyOpens in new tab
Welcome!
At LangChain, security and transparency are foundational to everything we build. This Trust Center provides real-time insight into LangSmith’s compliance posture, infrastructure controls, subprocessors, and audit results.
We keep this hub current so you always know how we protect your data. For any additional information, reach out at trust@langchain.dev.
Compliance
SOC 2 Type II
ISO 27001:2022
GDPR
HIPAA
Resources
View all
Pre-Filled Customer Questionnaires
2025-Nov LangChain CAIQv4.0.3 [SaaS].xlsx
Attestations
2026 SOC 2 Type II
ISO 27001 Certificate 2026.pdf
ISO 27001 Statement of Applicability (2026).pdf
2026 LangSmith Pentest Exec Summary.pdf
View 1 more
Policies
Acceptable Use Policy
Access Control Policy
Asset Management Policy (EN)
Business Continuity and Disaster Recovery Plan (EN)
View 12 more
Other Security Docs
BYOC LangSmith Security Overview.pdf
LangSmith pre-filled TIA.xlsx
Subprocessors
View all
Google Cloud Platform
•
Cloud provider
USA or Netherlands
GCP is LangChain's Cloud hosting provider and provides LLM inference for AI-powered features for applicable features and plans.
Amazon Web Services
•
Cloud provider
USA
AWS is LangChain's Cloud hosting provider and provides LLM inference for AI-powered features for applicable features and plans.
Clickhouse
•
Production Database
USA or Netherlands
Production database
Supabase
•
Database provider
US or Germany
Authentication and backend services for LangSmith
Controls
Updated less than a minute ago
View all
Infrastructure security
Unique account authentication enforced
Access control procedures established
Unique network system authentication enforced
View 5 more Infrastructure security controls
Organizational security
Asset disposal procedures utilized
Portable media encrypted
Code of Conduct acknowledged by contractors
View 6 more Organizational security controls
Product security
Control self-assessments conducted
Penetration testing performed
Data transmission encrypted
View 1 more Product security control
Internal security procedures
Continuity and Disaster Recovery plans established
Continuity and disaster recovery plans tested annually
Cybersecurity insurance maintained
View 23 more Internal security procedures controls
Data and privacy
Data retention procedures established
Customer data deleted upon leaving
Data collected
Customer personally identifiable information
Employee personally identifiable information
Credit card information
Personal health information
FAQ
View all
Updates
View all
Privacy
2026 September Subprocessor Update: Parallel
Published September 11, 2026
Dear LangChain Customer,
We are writing to inform you of an addition to LangChain's subprocessor list in connection with a new built-in web search feature for agents built in LangSmith.
New Subprocessor (effective October 11, 2026, or upon earlier customer enablement):
Parallel: to provide web search services for the LangSmith built-in search tool
The search tool is opt-in. When used, Parallel receives the requests issued by the agent, and nothing from your stored LangSmith data.
Our updated subprocessor list is available at our [Trust Center (https://trust.langchain.com/subprocessorsOpens in new tab). Questions? Contact privacy@langchain.dev.
Thank you for being a valued customer.
Regards,
LangChain Privacy Team
Compliance
2026 SOC 2 Type II Report now Available
Published September 3, 2026
Dear LangChain Customer,
We're proud to announce that we've just received our annual SOC 2 Type II report, and made some meaningful additions to scope: it now covers Security, Availability, and Confidentiality.
A SOC 2 Type II report is an independent auditor's opinion on whether an organization's controls were suitably designed and operated effectively over a period of time, not just at a single point in time. This one covers July 1, 2025 through June 30, 2026, spans our entire LangSmith offering, and received an unqualified opinion with no exceptions noted.
The examination was performed by Advantage Partners, the same accredited firm behind our recent ISO/IEC 27001 certification.
Questions? Contact us at trust@langchain.dev. The full report is available on our trust center.
Thank you for being a valued customer.
Best, LangChain Security Team
General
LangChain is now ISO/IEC 27001:2022 certified
Published July 2, 2026
Dear LangChain Customer,
We're glad to share that LangChain has achieved ISO/IEC 27001:2022 certification for our Information Security Management System (ISMS).
ISO/IEC 27001 is a leading internationally recognized standard for information security management. Certification requires an independent, accredited auditor to verify that an organization's policies, controls, and day-to-day practices actually protect the data it handles.
This certification reflects the maturity of our security program, built through months of policy work, employee training, and third-party audits. It's also one of the most widely requested certifications in enterprise security reviews, and we expect it to make procurement and security reviews smoother for both current and prospective customers.
Our certification was issued by Advantage Partners, an IAS-accredited certification body, and covers the systems, teams, and information assets supporting LangSmith and our LLM application tooling.
Questions? Contact us at trust@langchain.dev.
Thank you for being a valued customer.
Regards,
LangChain Security Team
Privacy
2026 May Subprocessor Updates
Published May 12, 2026
Dear LangChain Customer,
We are writing to inform you of additions to LangChain's subprocessor list in connection with LangSmith AI-powered features, including the LangSmith Engine and other in-product agents.
New Subprocessors (effective June 11, 2026, or upon earlier enablement):
OpenAI, L.L.C. — to provide AI model inference services
Anthropic, PBC — to provide AI model inference services
Fireworks — to provide AI model inference services
Baseten — to provide AI model inference services
These are the same providers previously announced for Fleet. Features using LangChain-managed keys are opt-in for enterprise customers.
We have also added the following subprocessors to our list:
Pylon — to provide customer support ticketing and communication services (unrelated to AI features)
Stripe — to provide payment processing services for self-serve customers (unrelated to AI features)
Our updated subprocessor list is available at our Trust CenterOpens in new tab. Questions? Contact privacy@langchain.dev.
Thank you for being a valued customer.
Regards, LangChain Privacy Team
Read more about 2026 May Subprocessor Updates
LangSmith Security Hub
LangSmith is an all-in-one developer platform for every step of the LLM-powered application lifecycle, whether you're building with LangChain or not.
To track LangSmith incidents and health, visit our status pageOpens in new tab.
For customer support, visit our support centerOpens in new tab.
For security and trust inquiries, contact our trust teamOpens in new tab.
Privacy PolicyOpens in new tab
Welcome!
At LangChain, security and transparency are foundational to everything we build. This Trust Center provides real-time insight into LangSmith’s compliance posture, infrastructure controls, subprocessors, and audit results.
We keep this hub current so you always know how we protect your data. For any additional information, reach out at trust@langchain.dev.
Compliance
SOC 2 Type II
ISO 27001:2022
GDPR
HIPAA
Resources
View all
Pre-Filled Customer Questionnaires
2025-Nov LangChain CAIQv4.0.3 [SaaS].xlsx
Attestations
2026 SOC 2 Type II
ISO 27001 Certificate 2026.pdf
ISO 27001 Statement of Applicability (2026).pdf
2026 LangSmith Pentest Exec Summary.pdf
View 1 more
Policies
Acceptable Use Policy
Access Control Policy
Asset Management Policy (EN)
Business Continuity and Disaster Recovery Plan (EN)
View 12 more
Other Security Docs
BYOC LangSmith Security Overview.pdf
LangSmith pre-filled TIA.xlsx
Subprocessors
View all
Google Cloud Platform
•
Cloud provider
USA or Netherlands
GCP is LangChain's Cloud hosting provider and provides LLM inference for AI-powered features for applicable features and plans.
Amazon Web Services
•
Cloud provider
USA
AWS is LangChain's Cloud hosting provider and provides LLM inference for AI-powered features for applicable features and plans.
Clickhouse
•
Production Database
USA or Netherlands
Production database
Supabase
•
Database provider
US or Germany
Authentication and backend services for LangSmith
Controls
Updated less than a minute ago
View all
Infrastructure security
Unique account authentication enforced
Access control procedures established
Unique network system authentication enforced
View 5 more Infrastructure security controls
Organizational security
Asset disposal procedures utilized
Portable media encrypted
Code of Conduct acknowledged by contractors
View 6 more Organizational security controls
Product security
Control self-assessments conducted
Penetration testing performed
Data transmission encrypted
View 1 more Product security control
Internal security procedures
Continuity and Disaster Recovery plans established
Continuity and disaster recovery plans tested annually
Cybersecurity insurance maintained
View 23 more Internal security procedures controls
Data and privacy
Data retention procedures established
Customer data deleted upon leaving
Data collected
Customer personally identifiable information
Employee personally identifiable information
Credit card information
Personal health information
FAQ
View all
Updates
View all
Privacy
2026 September Subprocessor Update: Parallel
Published September 11, 2026
Dear LangChain Customer,
We are writing to inform you of an addition to LangChain's subprocessor list in connection with a new built-in web search feature for agents built in LangSmith.
New Subprocessor (effective October 11, 2026, or upon earlier customer enablement):
Parallel: to provide web search services for the LangSmith built-in search tool
The search tool is opt-in. When used, Parallel receives the requests issued by the agent, and nothing from your stored LangSmith data.
Our updated subprocessor list is available at our [Trust Center (https://trust.langchain.com/subprocessorsOpens in new tab). Questions? Contact privacy@langchain.dev.
Thank you for being a valued customer.
Regards,
LangChain Privacy Team
Compliance
2026 SOC 2 Type II Report now Available
Published September 3, 2026
Dear LangChain Customer,
We're proud to announce that we've just received our annual SOC 2 Type II report, and made some meaningful additions to scope: it now covers Security, Availability, and Confidentiality.
A SOC 2 Type II report is an independent auditor's opinion on whether an organization's controls were suitably designed and operated effectively over a period of time, not just at a single point in time. This one covers July 1, 2025 through June 30, 2026, spans our entire LangSmith offering, and received an unqualified opinion with no exceptions noted.
The examination was performed by Advantage Partners, the same accredited firm behind our recent ISO/IEC 27001 certification.
Questions? Contact us at trust@langchain.dev. The full report is available on our trust center.
Thank you for being a valued customer.
Best, LangChain Security Team
General
LangChain is now ISO/IEC 27001:2022 certified
Published July 2, 2026
Dear LangChain Customer,
We're glad to share that LangChain has achieved ISO/IEC 27001:2022 certification for our Information Security Management System (ISMS).
ISO/IEC 27001 is a leading internationally recognized standard for information security management. Certification requires an independent, accredited auditor to verify that an organization's policies, controls, and day-to-day practices actually protect the data it handles.
This certification reflects the maturity of our security program, built through months of policy work, employee training, and third-party audits. It's also one of the most widely requested certifications in enterprise security reviews, and we expect it to make procurement and security reviews smoother for both current and prospective customers.
Our certification was issued by Advantage Partners, an IAS-accredited certification body, and covers the systems, teams, and information assets supporting LangSmith and our LLM application tooling.
Questions? Contact us at trust@langchain.dev.
Thank you for being a valued customer.
Regards,
LangChain Security Team
Privacy
2026 May Subprocessor Updates
Published May 12, 2026
Dear LangChain Customer,
We are writing to inform you of additions to LangChain's subprocessor list in connection with LangSmith AI-powered features, including the LangSmith Engine and other in-product agents.
New Subprocessors (effective June 11, 2026, or upon earlier enablement):
OpenAI, L.L.C. — to provide AI model inference services
Anthropic, PBC — to provide AI model inference services
Fireworks — to provide AI model inference services
Baseten — to provide AI model inference services
These are the same providers previously announced for Fleet. Features using LangChain-managed keys are opt-in for enterprise customers.
We have also added the following subprocessors to our list:
Pylon — to provide customer support ticketing and communication services (unrelated to AI features)
Stripe — to provide payment processing services for self-serve customers (unrelated to AI features)
Our updated subprocessor list is available at our Trust CenterOpens in new tab. Questions? Contact privacy@langchain.dev.
Thank you for being a valued customer.
Regards, LangChain Privacy Team