Snapshot 256990
Normalized text
Scripts and page chrome removed; this is what change detection compares.
Langfuse launches AI Gateway Learn more Security Overview Security AI FeaturesAuthentication & AuthorizationAudit Logs ↗Data isolationData Regions & AvailabilitySoftware DependenciesEncryptionIncident & BreachNetworking & IP RangesHardening for Government ↗Penetration TestingResponsible DisclosureSecurity FAQVulnerability ManagementWhistleblowingTOMs ↗ Compliance SOC 2 Type IIISO 27001HIPAACompliance FAQ Privacy DPA ↗Subprocessors ↗GDPRManaging Personal DataPrivacy FAQ Legal Terms of Service ↗Privacy Policy ↗NDA (Non-disclosure agreement) SecurityOverview Security & Compliance Overview At Langfuse, we prioritize data privacy and security. We understand that the data you entrust to us is a vital asset to your business, and we treat it with the utmost care. We take active steps to demonstrate our commitment to data security and privacy such as annual SOC2 Type 2 and ISO27001 audits as well as External Penetration Tests. You can request access to the reports here. Langfuse is built with enterprise needs in mind, focusing on: Security Measures: Robust Encryption, access controls, and regular Penetration Testing. Privacy Measures: Protecting user data according to regulations like GDPR. We offer a DPA, provide a HIPAA-ready region, and adhere to our Privacy Policy. Transparency: Open-source core and clear information on software dependencies. Reporting: Clear channels for responsible disclosure through Bugcrowd and Whistleblowing. Langfuse is the most widely adopted LLM Engineering platform, used by 50,000+ companies, with 37,311 GitHub stars, 65M+ SDK installs per month, and 38M+ Docker pulls. Trusted by 21 of the Fortune 50 and 129 of the Fortune 500 companies. Langfuse Cloud security model Langfuse Cloud is a fully managed, multi-tenant SaaS deployment. The security model combines three layers: Security posture: The production service is based on the same open-source Langfuse codebase, is covered by SOC 2 Type II and ISO 27001 audits, and undergoes annual third-party penetration tests. You can request the latest reports here. Tenant isolation: All product data is scoped to a project. Every record is associated with a projectId, API keys are project-scoped, and authenticated requests are authorized through RBAC before queries are made. See the Security FAQ and RBAC docs. Customer controls: Teams can reduce what reaches Langfuse and how long it stays there with masking, data retention, data deletion, region selection, SSO/SCIM, and audit logs. Langfuse Cloud runs on AWS and ClickHouse Cloud in isolated regional environments. Supporting services such as Postgres, ClickHouse, Redis, and S3 are covered by the same cloud security program: private network placement, least-privilege service access, encryption at rest and in transit, monitoring, and vendor/compliance review. If your requirements mandate infrastructure-level isolation in your own account or VPC, use self-hosted Langfuse or contact us about Enterprise options. Compliance We maintain internal policies in the ClickHouse Trust Center and adhere to several industry-standard compliance frameworks. Please check Security FAQs for more details. SOC 2 Type II ISO 27001 HIPAA Hardening for Government Privacy Langfuse is GDPR compliant, and offers data retention, data masking and data deletion capabilities to manage the processing of personal data. You can enter into a DPA with Langfuse. Contact Use Ask AI to get instant answers to your questions. For security inquiries: security@clickhouse.com For privacy inquiries: privacy@clickhouse.com For legal inquiries: legal@clickhouse.com General Information on Langfuse What is Langfuse? Langfuse is an open‑source AI engineering platform that provides tracing, prompt management, evaluation, and metrics to help teams debug and continuously improve LLM‑based applications. What deployment models are available? Langfuse Cloud – fully‑managed SaaS (multi‑tenant) with US, EU, Japan, and HIPAA data regions Self‑hosted OSS – MIT‑licensed software that you can deploy on your own infrastructure Self‑hosted Enterprise Edition – commercial license with additional security/compliance features and vendor support. Which cloud provider and regions do you use? Langfuse Cloud mainly runs on AWS and ClickHouse Cloud: US & HIPAA region: us-west-2 (Oregon) EU region: eu-west-1 (Ireland) JP region: ap-northeast-1 (Japan) Self‑hosted customers can choose any region / provider. Langfuse Self-Hosted can be run fully offline/air-gapped. Was this page helpful? Last updated on NextAI Features On this page Security & Compliance OverviewLangfuse Cloud security modelCompliancePrivacyContactGeneral Information on LangfuseWhat is Langfuse?What deployment models are available?Which cloud provider and regions do you use? Actions Give us feedbackEdit this page on GitHub Contributors Last edited Marc KlingenClemens RawertAkio Nuernberger