Snapshot 257893

Document
Trust center
URL
https://trust.langchain.com/
Fetched
HTTP status
200
Content type
text/html
Fetch mode
browser
Size
365232 bytes
SHA-256 (raw)
98f30a7a5cd52e09e79781f0042f233ec531ac601fc60a087fc66fb601e8e431
SHA-256 (normalized text)
76d1332aef3b40e7ef707d82a171fd3541e60d65f320903d9d802e1d8b53d460

Raw (normalized text)

Scripts and page chrome removed; this is what change detection compares.

Skip to navigationSkip to main content
LangSmith Security Hub
LangSmith is an all-in-one developer platform for every step of the LLM-powered application lifecycle, whether you're building with LangChain or not.
To track LangSmith incidents and health, visit our status pageOpens in new tab.
For customer support, visit our support centerOpens in new tab.
For security and trust inquiries, contact our trust teamOpens in new tab.
For security research and vulnerability reporting, visit our vulnerability disclosure programOpens in new tab.
Privacy PolicyOpens in new tab
AWS Marketplace listingOpens in new tab
Welcome!
At LangChain, security and transparency are foundational to everything we build. This Trust Center provides real-time insight into LangSmith’s compliance posture, infrastructure controls, subprocessors, and audit results.
We keep this hub current so you always know how we protect your data. For any additional information, reach out at trust@langchain.dev.
Resources
View all
Start Here: Security Overview
Pre-Filled Customer Questionnaires
2026-Oct LangChain CAIQv4.0.3 [SaaS].xlsx
Attestations
2026 SOC 2 Type II
ISO 27001 Certificate 2026.pdf
ISO 27001 Statement of Applicability (2026).pdf
2025 SOC 2 Type 2 LangChain Audit Report.pdf
View 3 more
Policies
Acceptable Use Policy
Access Control Policy
Asset Management Policy (EN)
Business Continuity and Disaster Recovery Plan (EN)
View 12 more
Other Security Docs
BYOC LangSmith Security Overview.pdf
Certificate of Insurance (COI) - 2026
LangSmith pre-filled TIA (EU to US) 2026.10
Compliance
SOC 2 Type II
ISO 27001:2022
ISO/IEC 42001:2023
GDPR
HIPAA
Subprocessors
View all
Google Cloud Platform • Cloud provider
USA or Netherlands
GCP is LangChain's Cloud hosting provider and provides LLM inference for AI-powered features for applicable features and plans.
Amazon Web Services • Cloud provider
USA
AWS is LangChain's Cloud hosting provider and provides LLM inference for AI-powered features for applicable features and plans.
Clickhouse • Production Database
USA or Netherlands
Production database
Supabase • Database provider
US or Germany
Authentication and backend services for LangSmith
Controls
View all
Infrastructure security
Unique production database authentication enforced
Unique account authentication enforced
Access control procedures established
View 9 more Infrastructure security controls
Organizational security
Asset disposal procedures utilized
Portable media encrypted
Anti-malware technology utilized
View 9 more Organizational security controls
Product security
Data encryption utilized
Control self-assessments conducted
Penetration testing performed
View 1 more Product security control
Internal security procedures
Continuity and Disaster Recovery plans established
Continuity and disaster recovery plans tested annually
Cybersecurity insurance maintained
View 26 more Internal security procedures controls
Data and privacy
Data retention procedures established
Customer data deleted upon leaving
Data collected
Customer personally identifiable information
Employee personally identifiable information
Credit card information
Personal health information
FAQ
View all
Updates
View all
Security
No LangChain Impact from LiteLLM or PHP Compromises
Published October 23, 2026
LangChain completed an assessment of potential impact to our products and services. We confirmed that the compromised LiteLLM release was not used in our environment and that the affected PHP component was not present in our products or services.
Customer impact
No LangChain products or services were impacted.
No customer data was impacted.
No customer action is required.
Customers with questions may contact our Security team at security@langchain.dev.
Best, LangChain Security
General
LangChain is now ISO/IEC 42001:2023 certified
Published October 19, 2026
Dear LangChain Customer,
We're glad to share that LangChain has achieved ISO/IEC 42001:2023 certification for our Artificial Intelligence Management System (AIMS).
ISO/IEC 42001 is the international standard for AI management systems. Certification requires an independent, accredited auditor to verify that an organization has the governance, risk assessment, and oversight processes in place for the AI it builds and operates.
Our certification was issued by Armanino Certified, LLC, an ANAB-accredited certification body, and covers the systems, teams, and information assets supporting the AI features in LangSmith for which LangChain manages the model.
The certificate is available in our Trust Center.
Questions? Contact us at trust@langchain.dev.
Thank you for being a valued customer.
Regards, LangChain Security Team
Privacy
2026 September Subprocessor Update: Typesafe and Modal
Published September 27, 2026
Dear LangChain Customer,
We are writing to inform you of additions to LangChain's subprocessor list in connection with AI-powered features in LangSmith.
New Subprocessors (effective October 27, 2026, or upon earlier customer enablement):
Typesafe: to provide AI model inference services
Modal Labs, Inc.: to provide AI model inference services
Features using these subprocessors are opt-in.
Our updated subprocessor list is available at our Trust CenterOpens in new tab. Questions? Contact privacy@langchain.dev.
Thank you for being a valued customer.
Regards, LangChain Privacy Team
Privacy
2026 September Subprocessor Update: Parallel
Published September 11, 2026
Dear LangChain Customer,
We are writing to inform you of an addition to LangChain's subprocessor list in connection with a new built-in web search feature for agents built in LangSmith.
New Subprocessor (effective October 11, 2026, or upon earlier customer enablement):
Parallel: to provide web search services for the LangSmith built-in search tool
The search tool is opt-in. When used, Parallel receives the requests issued by the agent, and nothing from your stored LangSmith data.
Our updated subprocessor list is available at our [Trust Center (https://trust.langchain.com/subprocessorsOpens in new tab). Questions? Contact privacy@langchain.dev.
Thank you for being a valued customer.
Regards,
LangChain Privacy Team
Read more about 2026 September Subprocessor Update: Typesafe and Modal
LangSmith Security Hub
LangSmith is an all-in-one developer platform for every step of the LLM-powered application lifecycle, whether you're building with LangChain or not.
To track LangSmith incidents and health, visit our status pageOpens in new tab.
For customer support, visit our support centerOpens in new tab.
For security and trust inquiries, contact our trust teamOpens in new tab.
For security research and vulnerability reporting, visit our vulnerability disclosure programOpens in new tab.
Privacy PolicyOpens in new tab
AWS Marketplace listingOpens in new tab
Welcome!
At LangChain, security and transparency are foundational to everything we build. This Trust Center provides real-time insight into LangSmith’s compliance posture, infrastructure controls, subprocessors, and audit results.
We keep this hub current so you always know how we protect your data. For any additional information, reach out at trust@langchain.dev.
Resources
View all
Start Here: Security Overview
Pre-Filled Customer Questionnaires
2026-Oct LangChain CAIQv4.0.3 [SaaS].xlsx
Attestations
2026 SOC 2 Type II
ISO 27001 Certificate 2026.pdf
ISO 27001 Statement of Applicability (2026).pdf
2025 SOC 2 Type 2 LangChain Audit Report.pdf
View 3 more
Policies
Acceptable Use Policy
Access Control Policy
Asset Management Policy (EN)
Business Continuity and Disaster Recovery Plan (EN)
View 12 more
Other Security Docs
BYOC LangSmith Security Overview.pdf
Certificate of Insurance (COI) - 2026
LangSmith pre-filled TIA (EU to US) 2026.10
Compliance
SOC 2 Type II
ISO 27001:2022
ISO/IEC 42001:2023
GDPR
HIPAA
Subprocessors
View all
Google Cloud Platform • Cloud provider
USA or Netherlands
GCP is LangChain's Cloud hosting provider and provides LLM inference for AI-powered features for applicable features and plans.
Amazon Web Services • Cloud provider
USA
AWS is LangChain's Cloud hosting provider and provides LLM inference for AI-powered features for applicable features and plans.
Clickhouse • Production Database
USA or Netherlands
Production database
Supabase • Database provider
US or Germany
Authentication and backend services for LangSmith
Controls
View all
Infrastructure security
Unique production database authentication enforced
Unique account authentication enforced
Access control procedures established
View 9 more Infrastructure security controls
Organizational security
Asset disposal procedures utilized
Portable media encrypted
Anti-malware technology utilized
View 9 more Organizational security controls
Product security
Data encryption utilized
Control self-assessments conducted
Penetration testing performed
View 1 more Product security control
Internal security procedures
Continuity and Disaster Recovery plans established
Continuity and disaster recovery plans tested annually
Cybersecurity insurance maintained
View 26 more Internal security procedures controls
Data and privacy
Data retention procedures established
Customer data deleted upon leaving
Data collected
Customer personally identifiable information
Employee personally identifiable information
Credit card information
Personal health information
FAQ
View all
Updates
View all
Security
No LangChain Impact from LiteLLM or PHP Compromises
Published October 23, 2026
LangChain completed an assessment of potential impact to our products and services. We confirmed that the compromised LiteLLM release was not used in our environment and that the affected PHP component was not present in our products or services.
Customer impact
No LangChain products or services were impacted.
No customer data was impacted.
No customer action is required.
Customers with questions may contact our Security team at security@langchain.dev.
Best, LangChain Security
General
LangChain is now ISO/IEC 42001:2023 certified
Published October 19, 2026
Dear LangChain Customer,
We're glad to share that LangChain has achieved ISO/IEC 42001:2023 certification for our Artificial Intelligence Management System (AIMS).
ISO/IEC 42001 is the international standard for AI management systems. Certification requires an independent, accredited auditor to verify that an organization has the governance, risk assessment, and oversight processes in place for the AI it builds and operates.
Our certification was issued by Armanino Certified, LLC, an ANAB-accredited certification body, and covers the systems, teams, and information assets supporting the AI features in LangSmith for which LangChain manages the model.
The certificate is available in our Trust Center.
Questions? Contact us at trust@langchain.dev.
Thank you for being a valued customer.
Regards, LangChain Security Team
Privacy
2026 September Subprocessor Update: Typesafe and Modal
Published September 27, 2026
Dear LangChain Customer,
We are writing to inform you of additions to LangChain's subprocessor list in connection with AI-powered features in LangSmith.
New Subprocessors (effective October 27, 2026, or upon earlier customer enablement):
Typesafe: to provide AI model inference services
Modal Labs, Inc.: to provide AI model inference services
Features using these subprocessors are opt-in.
Our updated subprocessor list is available at our Trust CenterOpens in new tab. Questions? Contact privacy@langchain.dev.
Thank you for being a valued customer.
Regards, LangChain Privacy Team
Privacy
2026 September Subprocessor Update: Parallel
Published September 11, 2026
Dear LangChain Customer,
We are writing to inform you of an addition to LangChain's subprocessor list in connection with a new built-in web search feature for agents built in LangSmith.
New Subprocessor (effective October 11, 2026, or upon earlier customer enablement):
Parallel: to provide web search services for the LangSmith built-in search tool
The search tool is opt-in. When used, Parallel receives the requests issued by the agent, and nothing from your stored LangSmith data.
Our updated subprocessor list is available at our [Trust Center (https://trust.langchain.com/subprocessorsOpens in new tab). Questions? Contact privacy@langchain.dev.
Thank you for being a valued customer.
Regards,
LangChain Privacy Team
Read more about 2026 September Subprocessor Update: Parallel
LangSmith Security Hub
LangSmith is an all-in-one developer platform for every step of the LLM-powered application lifecycle, whether you're building with LangChain or not.
To track LangSmith incidents and health, visit our status pageOpens in new tab.
For customer support, visit our support centerOpens in new tab.
For security and trust inquiries, contact our trust teamOpens in new tab.
For security research and vulnerability reporting, visit our vulnerability disclosure programOpens in new tab.
Privacy PolicyOpens in new tab
AWS Marketplace listingOpens in new tab
Welcome!
At LangChain, security and transparency are foundational to everything we build. This Trust Center provides real-time insight into LangSmith’s compliance posture, infrastructure controls, subprocessors, and audit results.
We keep this hub current so you always know how we protect your data. For any additional information, reach out at trust@langchain.dev.
Resources
View all
Start Here: Security Overview
Pre-Filled Customer Questionnaires
2026-Oct LangChain CAIQv4.0.3 [SaaS].xlsx
Attestations
2026 SOC 2 Type II
ISO 27001 Certificate 2026.pdf
ISO 27001 Statement of Applicability (2026).pdf
2025 SOC 2 Type 2 LangChain Audit Report.pdf
View 3 more
Policies
Acceptable Use Policy
Access Control Policy
Asset Management Policy (EN)
Business Continuity and Disaster Recovery Plan (EN)
View 12 more
Other Security Docs
BYOC LangSmith Security Overview.pdf
Certificate of Insurance (COI) - 2026
LangSmith pre-filled TIA (EU to US) 2026.10
Compliance
SOC 2 Type II
ISO 27001:2022
ISO/IEC 42001:2023
GDPR
HIPAA
Subprocessors
View all
Google Cloud Platform • Cloud provider
USA or Netherlands
GCP is LangChain's Cloud hosting provider and provides LLM inference for AI-powered features for applicable features and plans.
Amazon Web Services • Cloud provider
USA
AWS is LangChain's Cloud hosting provider and provides LLM inference for AI-powered features for applicable features and plans.
Clickhouse • Production Database
USA or Netherlands
Production database
Supabase • Database provider
US or Germany
Authentication and backend services for LangSmith
Controls
View all
Infrastructure security
Unique production database authentication enforced
Unique account authentication enforced
Access control procedures established
View 9 more Infrastructure security controls
Organizational security
Asset disposal procedures utilized
Portable media encrypted
Anti-malware technology utilized
View 9 more Organizational security controls
Product security
Data encryption utilized
Control self-assessments conducted
Penetration testing performed
View 1 more Product security control
Internal security procedures
Continuity and Disaster Recovery plans established
Continuity and disaster recovery plans tested annually
Cybersecurity insurance maintained
View 26 more Internal security procedures controls
Data and privacy
Data retention procedures established
Customer data deleted upon leaving
Data collected
Customer personally identifiable information
Employee personally identifiable information
Credit card information
Personal health information
FAQ
View all
Updates
View all
Security
No LangChain Impact from LiteLLM or PHP Compromises
Published October 23, 2026
LangChain completed an assessment of potential impact to our products and services. We confirmed that the compromised LiteLLM release was not used in our environment and that the affected PHP component was not present in our products or services.
Customer impact
No LangChain products or services were impacted.
No customer data was impacted.
No customer action is required.
Customers with questions may contact our Security team at security@langchain.dev.
Best, LangChain Security
General
LangChain is now ISO/IEC 42001:2023 certified
Published October 19, 2026
Dear LangChain Customer,
We're glad to share that LangChain has achieved ISO/IEC 42001:2023 certification for our Artificial Intelligence Management System (AIMS).
ISO/IEC 42001 is the international standard for AI management systems. Certification requires an independent, accredited auditor to verify that an organization has the governance, risk assessment, and oversight processes in place for the AI it builds and operates.
Our certification was issued by Armanino Certified, LLC, an ANAB-accredited certification body, and covers the systems, teams, and information assets supporting the AI features in LangSmith for which LangChain manages the model.
The certificate is available in our Trust Center.
Questions? Contact us at trust@langchain.dev.
Thank you for being a valued customer.
Regards, LangChain Security Team
Privacy
2026 September Subprocessor Update: Typesafe and Modal
Published September 27, 2026
Dear LangChain Customer,
We are writing to inform you of additions to LangChain's subprocessor list in connection with AI-powered features in LangSmith.
New Subprocessors (effective October 27, 2026, or upon earlier customer enablement):
Typesafe: to provide AI model inference services
Modal Labs, Inc.: to provide AI model inference services
Features using these subprocessors are opt-in.
Our updated subprocessor list is available at our Trust CenterOpens in new tab. Questions? Contact privacy@langchain.dev.
Thank you for being a valued customer.
Regards, LangChain Privacy Team
Privacy
2026 September Subprocessor Update: Parallel
Published September 11, 2026
Dear LangChain Customer,
We are writing to inform you of an addition to LangChain's subprocessor list in connection with a new built-in web search feature for agents built in LangSmith.
New Subprocessor (effective October 11, 2026, or upon earlier customer enablement):
Parallel: to provide web search services for the LangSmith built-in search tool
The search tool is opt-in. When used, Parallel receives the requests issued by the agent, and nothing from your stored LangSmith data.
Our updated subprocessor list is available at our [Trust Center (https://trust.langchain.com/subprocessorsOpens in new tab). Questions? Contact privacy@langchain.dev.
Thank you for being a valued customer.
Regards,
LangChain Privacy Team