Security & Compliance Overview
At Langfuse, we prioritize data privacy and security. We understand that the data you entrust to us is a vital asset to your business, and we treat it with the utmost care.
We take active steps to demonstrate our commitment to data security and privacy such as annual SOC2 Type 2 and ISO27001 audits as well as External Penetration Tests. You can request access to the reports here.
Langfuse is built with enterprise needs in mind, focusing on:
- Security Measures: Robust Encryption, access controls, and regular Penetration Testing.
- Privacy Measures: Protecting user data according to regulations like GDPR. We offer a DPA and adhere to our Privacy Policy.
- Transparency: Open-source core and clear information on software dependencies.
- Reporting: Clear channels for Responsible Disclosure and Whistleblowing.
Compliance
We maintain internal policies and adhere to several industry-standard compliance frameworks.
Privacy
Langfuse is GDPR compliant, and offers data retention, data masking and data deletion capabilities to manage the processing of personal data. You can enter into a DPA with Langfuse.
Contact
- For security inquiries: [email protected]
- For privacy inquiries: [email protected]
- For compliance inquiries: [email protected]
General Information on Langfuse
What is Langfuse?
Langfuse is an open‑source LLM engineering platform that provides tracing, prompt management, evaluation, and metrics to help teams debug and continuously improve LLM‑based applications.
What deployment models are available?
- Langfuse Cloud – fully‑managed SaaS (multi‑tenant) with US, EU and HIPAA data regions
- Self‑hosted OSS – MIT‑licensed software that you can deploy on your own infrastructure
- Self‑hosted Enterprise Edition – commercial license with additional security/compliance features and vendor support.
Which cloud provider and regions do you use?
Langfuse Cloud mainly runs on AWS and Clickhouse via AWS:
- US region: us-west-2 (Oregon)
- EU region: eu-west-1 (Ireland)
Self‑hosted customers can choose any region / provider. Langfuse Self-Hosted can be run fully offline/air-gapped.