# Langfuse

Langfuse declares [12 subprocessors](https://thirdpartyindex.com/vendors/langfuse#subprocessors), plus 1 of its own affiliates, in [its subprocessor list](https://clickhouse.com/legal/agreements/langfuse-subprocessors), which we last checked on 2026-11-11 ([evidence](https://thirdpartyindex.com/evidence/166267)). They include [Amazon Web Services](https://thirdpartyindex.com/vendors/amazon-web-services), [Google Cloud](https://thirdpartyindex.com/vendors/google-cloud) and [Salesforce](https://thirdpartyindex.com/vendors/salesforce). No published changes since we first read it on 2026-09-22. [41 tracked vendors](https://thirdpartyindex.com/vendors/langfuse#used-by) name Langfuse as a subprocessor, including [ClickHouse](https://thirdpartyindex.com/vendors/clickhouse), [Brevo](https://thirdpartyindex.com/vendors/brevo) and [Appcues](https://thirdpartyindex.com/vendors/appcues).

Langfuse (langfuse.com): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index.

- Page: https://thirdpartyindex.com/vendors/langfuse
- Documents last verified: 2026-11-11
- Transparency rating: 89/100 (how much it publishes, not how secure it is): Subprocessor list 30/30; Processing locations 8/8; Purposes 7/7; Data processing addendum 12/12; Trust center 8/8; Privacy policy 6/6; security.txt 0/6 (not found); Security page 5/5; Status page 5/5; Vulnerability disclosure 0/5 (not found); Pages still reachable 8/8
- Part of: [ClickHouse](https://thirdpartyindex.com/vendors/clickhouse)
- Supply chain: relies on 7 tracked vendors directly, 85 within two hops, 309 within three; 41 tracked vendors rely on it directly, 361 within two hops, 2229 within three
- Cite as: Langfuse, Third Party Index, https://thirdpartyindex.com/vendors/langfuse (data CC BY 4.0)

## Documents

| Document | URL | Last verified | Last changed |
|---|---|---|---|
| Trust center | https://trust.clickhouse.com/ | 2026-11-11 | 2026-11-09 |
| Subprocessor list | https://clickhouse.com/legal/agreements/langfuse-subprocessors | 2026-11-11 | 2026-10-27 |
| Data processing addendum | https://clickhouse.com/legal/agreements/data-processing-addendum | 2026-11-11 | 2026-09-22 |
| Privacy policy | https://langfuse.com/privacy | 2026-11-11 | 2026-11-11 |
| Terms | https://clickhouse.com/legal/clickhouse-general-terms-and-conditions | 2026-11-11 | 2026-10-25 |
| Security page | https://langfuse.com/security | 2026-11-11 | 2026-11-11 |
| Status page | https://status.langfuse.com/ | 2026-11-11 | 2026-11-01 |
| security.txt (parent company's) | https://clickhouse.com/.well-known/security.txt | 2026-11-11 | 2026-09-21 |

## Subprocessors (12)

As its own list states them.

| Subprocessor | Purpose | Location | Listed since |
|---|---|---|---|
| [Amazon Web Services (AWS)](https://thirdpartyindex.com/vendors/amazon-web-services.md) | Cloud hosting and infrastructure provider | Customer Selected | 2026-09-22 |
| [AWS Bedrock](https://thirdpartyindex.com/vendors/amazon-web-services.md) (AI model provider: Amazon Bedrock) | Generative AI services | Same as Customer Selected Location for Cloud Provider | 2026-09-22 |
| [ClickHouse, Inc.](https://thirdpartyindex.com/vendors/clickhouse.md) | Provision of technical services, support services, and supporting the provision, management and maintenance of the Langfuse Cloud Services. | Germany; Japan; Singapore; The Netherlands; United States of America | 2026-09-22 |
| [ClickHouse Australia Pty Ltd](https://thirdpartyindex.com/vendors/clickhouse.md) | Provision of technical services, support services, and supporting the provision, management and maintenance of the Langfuse Cloud Services. | Australia | 2026-09-22 |
| [ClickHouse India Private Limited](https://thirdpartyindex.com/vendors/clickhouse.md) | Provision of technical services, support services, and supporting the provision, management and maintenance of the Langfuse Cloud Services. | India | 2026-09-22 |
| [ClickHouse UK Co. Ltd.](https://thirdpartyindex.com/vendors/clickhouse.md) | Provision of technical services, support services, and supporting the provision, management and maintenance of the Langfuse Cloud Services. | United Kingdom | 2026-09-22 |
| [Github, Inc.](https://thirdpartyindex.com/vendors/github.md) | Support escalations | United States of America | 2026-09-22 |
| [Google LLC (Workspace)](https://thirdpartyindex.com/vendors/google-cloud.md) | Email and office applications | United States of America | 2026-09-22 |
| [kapa.ai, Inc.](https://thirdpartyindex.com/vendors/kapa-ai.md) | Support deflection with AI | United States of America | 2026-09-22 |
| [Pylon Labs, Inc.](https://thirdpartyindex.com/vendors/pylon.md) | Customer support chat platform | United States of America | 2026-09-22 |
| [Salesforce, Inc.](https://thirdpartyindex.com/vendors/salesforce.md) | Customer support case management, messaging services (Slack) | United States of America | 2026-09-22 |
| Waypoint Tech Inc. | Support knowledge management | United States of America | 2026-09-22 |

Read from ([evidence](https://thirdpartyindex.com/evidence/2555)). CSV: https://thirdpartyindex.com/vendors/langfuse/subprocessors.csv

AI model providers (or a cloud provider's AI model service) among these entries: 1. All vendors that list one: https://thirdpartyindex.com/ai

### Its own affiliates (1)

- Langfuse GmbH (Germany)

## Compliance

As its trust center lists them.

- Audited: SOC 2 Type II, ISO/IEC 27001, ISO/IEC 27701, PCI DSS ([evidence](https://thirdpartyindex.com/evidence/2551))
- Claimed: HIPAA, GDPR, CCPA/CPRA, Data Privacy Framework ([evidence](https://thirdpartyindex.com/evidence/2551))

## Web Technologies

Langfuse's homepage made 345 requests to 14 domains, 5 services controlled by another company, and 1 domain not identified. Loaded on 2026-11-04 by a browser that accepted nothing; other visits may load more or less. What a page loads is not a list of who receives customer data.

5 third parties by category: Analytics 1 (Google Cloud); Marketing automation 1 (HubSpot); Cookie compliance 1 (CookieYes); Development 1 (reviewed: GitHub); SEO 1 (Ahrefs). Each company that appears controlled by another organization is counted once, under the main category of the technologies detected from it on this homepage or, when none was, the category recorded from the company's own page (marked reviewed) or else the one it is usually detected as on other published homepages (marked as such); unclassified: none of these.

### Third parties (5)

- CookieYes: 8 requests to cdn-cookieyes.com, cookieyes.com; CookieYes
- Google Cloud: 5 requests to googletagmanager.com, fonts.googleapis.com, google-analytics.com, googlesyndication.com; Google Analytics, Google Tag Manager (its subprocessor list names it too)
- HubSpot: 4 requests to hs-analytics.net, hs-banner.com, hs-scripts.com, hubspot.com; HubSpot
- Ahrefs: 1 request to ahrefs.com; Ahrefs
- GitHub: 1 request to github.com (its subprocessor list names it too)

### Unknown (1)

Domains not identified yet: hex.site

### First party (1)

- Langfuse: 325 requests to langfuse.com; Framer Motion, HSTS, Lucide, Next.js 16.3.8, Next.js App Router, Open Graph, PostHog, Priority Hints, Radix UI, React, Turbopack, Vercel, Vercel Speed Insights 2.0.0, Webpack

3 tracked companies loaded by the homepage are not in Langfuse's subprocessor list. A website can use a service without it processing customer data.

## Subprocessor of (41)

Tracked vendors whose own subprocessor lists name it, and what they say they use it for.

- [Aleph](https://thirdpartyindex.com/vendors/aleph.md): AI observability
- [Appcues](https://thirdpartyindex.com/vendors/appcues.md): Provides monitoring and quality testing tools for optional Appcues AI features
- [Blinq](https://thirdpartyindex.com/vendors/blinq.md)
- [Brevo](https://thirdpartyindex.com/vendors/brevo.md): AI provider
- [Chatwoot](https://thirdpartyindex.com/vendors/chatwoot.md): AI observability; Used to monitor, trace, and evaluate AI requests and responses for Chatwoot AI features.
- [ClickHouse](https://thirdpartyindex.com/vendors/clickhouse.md): Provision of technical services, support services, and supporting the provision, management and maintenance of the Cloud Services.
- [Close](https://thirdpartyindex.com/vendors/close.md): AI functionality and tools
- [commercetools](https://thirdpartyindex.com/vendors/commercetools.md): LLM datastream monitoring and production support for optional AI-powered features.
- [Cora AI](https://thirdpartyindex.com/vendors/cora-ai.md): LLM Observability; Observability/tracing tool for LLM calls; logs prompts, responses and metadata for debugging and analytics
- [Dear Lucy](https://thirdpartyindex.com/vendors/dear-lucy.md): LLM engineering and monitoring
- [DevRev](https://thirdpartyindex.com/vendors/devrev.md): Observability provider/Observability for AI/Processing of AI system inputs and outputs for monitoring, diagnostics, and performance analysis of AI functionaliti…
- [DoiT](https://thirdpartyindex.com/vendors/doit.md): AI application observability and analytics platform
- [Donut](https://thirdpartyindex.com/vendors/donut.md): Monitoring LLM performance
- [Frontify](https://thirdpartyindex.com/vendors/frontify.md): Monitoring and analysis of the AI Features’ input and outputs
- [Genezio](https://thirdpartyindex.com/vendors/genezio.md): AI observability and analytics
- [HeyOrca!](https://thirdpartyindex.com/vendors/heyorca.md)
- [Hubstaff](https://thirdpartyindex.com/vendors/hubstaff.md)
- [Juma](https://thirdpartyindex.com/vendors/juma.md): LLM observability and tracing; Provides observability, tracing, and analytics for LLM application performance.
- [Landbot](https://thirdpartyindex.com/vendors/landbot.md): Cloud monitoring; LLM Engineering Platform to analyze and monitor our AI features. \*Conversations processed by the AI Agents, which may include current user inp…
- [Lansweeper](https://thirdpartyindex.com/vendors/lansweeper.md): Observability and logging platforms for AI usage
- [LogicMonitor](https://thirdpartyindex.com/vendors/logicmonitor.md): AI Model Tracing Observability & Audit
- [MacPaw](https://thirdpartyindex.com/vendors/macpaw.md): LLM observability and tracing platform
- [Maybe\*](https://thirdpartyindex.com/vendors/maybe.md): LLM Observability
- [OfficeRnD](https://thirdpartyindex.com/vendors/officernd.md): (Optional\* data sub-processor for Flex); \*applicable when AI Hub add-on is activated; AI observability, analytics and; performance monitoring for AI Hub
- [OpenTag](https://thirdpartyindex.com/vendors/opentag.md): Application observability
- [Outlit](https://thirdpartyindex.com/vendors/outlit.md): AI observability, analytics, model monitoring
- [Parallel Web Systems](https://thirdpartyindex.com/vendors/parallel-web-systems.md): Logging and observability
- [Pin](https://thirdpartyindex.com/vendors/pin.md): To help debug AI and LLM services
- [Pipedream](https://thirdpartyindex.com/vendors/pipedream.md): AI services (application monitoring)
- [Productlane](https://thirdpartyindex.com/vendors/productlane.md): AI observability: traces of AI feature runs, including prompts and model outputs, for debugging and quality monitoring
- [Ravenna](https://thirdpartyindex.com/vendors/ravenna.md)
- [Revealbot](https://thirdpartyindex.com/vendors/revealbot.md): Observability and quality-assurance logging for the agent that generates draft rules, the Stage agent and automated routines; stores the instruction text (promp…
- [Revenue Grid](https://thirdpartyindex.com/vendors/revenue-grid.md): Monitor and improve LLM application performance and reliability
- [Sendbird](https://thirdpartyindex.com/vendors/sendbird.md): Open Source LLM Engineering Platform for tracing, evaluation, prompt management, and metrics to debug and improve the LLM application
- [Sliq](https://thirdpartyindex.com/vendors/sliq.md): Tracing and monitoring of AI agent runs
- [StarRez](https://thirdpartyindex.com/vendors/starrez.md): Engineering platform; Platform for observing, debugging, and optimizing large language model (LLM) applications.
- [superglue](https://thirdpartyindex.com/vendors/superglue.md): AI observability, tracing, evaluation, and performance monitoring
- [Teramot](https://thirdpartyindex.com/vendors/teramot.md): AI observability
- [Uberall](https://thirdpartyindex.com/vendors/uberall.md): Observability, Prompt management and debugging for features of SaaS Product feature category/-ies “AI-powered Features” & “UB-I”
- [Worknet.ai](https://thirdpartyindex.com/vendors/worknet-ai.md): LLM observability: tracing of model and tool calls, prompt and response logging, and evaluation
- [Zero](https://thirdpartyindex.com/vendors/zero.md): Tracing and observability of AI features

## Service status

Incidents it reported on its own status page.

- Last 90 days: 16 reported incidents (1 major or critical, 14 minor, 1 with no impact stated)
- Typical time to resolve: 1 h 11 min
- Status page last read: 2026-11-12
- 2026-10-21: Slow trace data retirival across API and UI in EU (minor)
- 2026-10-20: Degraded performance in Halo (Langfuse Assistant) (no impact stated)
- 2026-10-20: Degraded data serving in EU (minor)
- 2026-10-19: Degraded public API performance (minor)
- 2026-09-30: Degraded ingestion for 20 projects (major)
- 2026-09-23: Elevated error rates in In App Agent (minor)
- 2026-09-16: OTEL ingestion queue delay over 10 minutes in US (minor)
- 2026-09-14: Delayed Ingestion for non v4 SDKs (minor)

## Incidents reported by Langfuse's subprocessors

Incidents reported in the last 30 days on their own status pages by 3 vendors Langfuse lists as subprocessors. A subprocessor list names a company, not the service an incident touched.

- 2026-11-11: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Langfuse lists as a subprocessor, reported Impact across multiple GitHub products including Actions, Pages, and Copilot products. (critical)
- 2026-11-11: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Langfuse lists as a subprocessor, reported Incident with Webhooks (minor)
- 2026-11-11: [ClickHouse](https://thirdpartyindex.com/vendors/clickhouse#status), which Langfuse lists as a subprocessor, reported Provisioning and scaling operations may take longer in AWS ap-northeast-1 Tokyo (minor)
- 2026-11-11: [Pylon](https://thirdpartyindex.com/vendors/pylon#status), which Langfuse lists as a subprocessor, reported Slack Integration Connection Issues (major)
- 2026-11-10: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Langfuse lists as a subprocessor, reported Incident with Git Operations and Pull Requests (critical)
- 2026-11-09: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Langfuse lists as a subprocessor, reported Degraded availability for GPT-5.3 Codex and GPT-5.6 models in Copilot (major)
- 2026-11-09: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Langfuse lists as a subprocessor, reported Incident with Actions and Checks API (critical)
- 2026-11-09: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Langfuse lists as a subprocessor, reported Incident with Webhooks and Actions (major)
- 2026-11-09: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Langfuse lists as a subprocessor, reported Increased timeouts due to surge in anonymous users (minor)
- 2026-11-08: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Langfuse lists as a subprocessor, reported Increase in timeouts for some unauthenticated users (minor)
- 2026-11-05: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Langfuse lists as a subprocessor, reported Degraded performance for multiple GitHub services (minor)
- 2026-11-05: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Langfuse lists as a subprocessor, reported Incident with Actions (minor)
- 2026-11-05: [Pylon](https://thirdpartyindex.com/vendors/pylon#status), which Langfuse lists as a subprocessor, reported Delay in Analytics Data (minor)
- 2026-11-04: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Langfuse lists as a subprocessor, reported Incident with Actions (major)
- 2026-11-04: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Langfuse lists as a subprocessor, reported Incident with Actions and Pages (major)
- 2026-11-04: [Pylon](https://thirdpartyindex.com/vendors/pylon#status), which Langfuse lists as a subprocessor, reported Inbound Email Delays (minor)
- 2026-11-04: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Langfuse lists as a subprocessor, reported Incident with Pull Requests, Git Operations and Issues (major)
- 2026-11-04: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Langfuse lists as a subprocessor, reported Increased task-related errors for Copilot Mission Control (minor)
- 2026-11-03: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Langfuse lists as a subprocessor, reported Incident with Git Operations (minor)
- 2026-11-03: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Langfuse lists as a subprocessor, reported Incident with API, Git, and Copilot requests (minor)
- 2026-11-02: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Langfuse lists as a subprocessor, reported Elevated errors on GPT-5.4 Nano (minor)
- 2026-11-02: [ClickHouse](https://thirdpartyindex.com/vendors/clickhouse#status), which Langfuse lists as a subprocessor, reported SQL Console database connection outage (minor)
- 2026-10-30: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Langfuse lists as a subprocessor, reported Incident with Dependabot (minor)
- 2026-10-30: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Langfuse lists as a subprocessor, reported Incident with Actions, Pages, and Webhooks (major)
- 2026-10-30: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Langfuse lists as a subprocessor, reported Disruption with GitHub services (critical)
- 2026-10-29: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Langfuse lists as a subprocessor, reported Disruption with Copilot Cloud services (minor)
- 2026-10-28: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Langfuse lists as a subprocessor, reported Disruption with some Copilot services (critical)
- 2026-10-27: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Langfuse lists as a subprocessor, reported Elevated 404s for GitHub App s2s tokens in git/API (no impact stated)
- 2026-10-26: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Langfuse lists as a subprocessor, reported Incident with Actions, Issues, API Requests and Pull Requests (minor)
- 2026-10-23: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Langfuse lists as a subprocessor, reported Grok 4.6 and Grok 4.7 Service Issues (minor)
- 2026-10-23: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Langfuse lists as a subprocessor, reported Disruption with Dependabot Alerts (minor)
- 2026-10-23: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Langfuse lists as a subprocessor, reported Delayed Actions status check results (minor)
- 2026-10-23: [ClickHouse](https://thirdpartyindex.com/vendors/clickhouse#status), which Langfuse lists as a subprocessor, reported Degraded support ticket submission and response (minor)
- 2026-10-22: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Langfuse lists as a subprocessor, reported Project updates delayed (minor)
- 2026-10-22: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Langfuse lists as a subprocessor, reported Incident with Actions (minor)
- 2026-10-21: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Langfuse lists as a subprocessor, reported Delays for Pull Requests and Webhook deliveries (critical)
- 2026-10-20: [ClickHouse](https://thirdpartyindex.com/vendors/clickhouse#status), which Langfuse lists as a subprocessor, reported Google Cloud Outage (minor)
- 2026-10-19: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Langfuse lists as a subprocessor, reported Degraded availability for GitHub Actions, GitHub Pages and Webhooks (critical)
- 2026-10-15: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Langfuse lists as a subprocessor, reported CCA Automations are delayed when starting an Automation (minor)
- 2026-10-14: [Pylon](https://thirdpartyindex.com/vendors/pylon#status), which Langfuse lists as a subprocessor, reported Platform loading issues (no impact stated)
- 2026-10-13: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Langfuse lists as a subprocessor, reported \[Retroactive\] Actions workflow run logs delayed (minor)

The subprocessor list as we read it on any date: https://thirdpartyindex.com/labs/time-machine/langfuse

## Security contact

From its security.txt (https://clickhouse.com/.well-known/security.txt) ([evidence](https://thirdpartyindex.com/evidence/201)):

- Contact: mailto:security@clickhouse.com
- Disclosure policy: https://github.com/ClickHouse/ClickHouse/blob/master/SECURITY.md
- Valid until 2027-07-28
- The parent company's file

---

Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api
