Langfuse · Compliance

Langfuse compliance

Read from Langfuse's own page on 2026-11-09. 4 statements quoted word for word; anything the page does not say is shown as unstated, never guessed. APIs.io verifies none of it.

Trust center

url: https://langfuse.com/security

Attestations

framework: SOC2type: SOC 2 Type II auditscope: Langfuse Cloud production servicereport access: on_request

The production service is based on the same open-source Langfuse codebase, is covered by SOC 2 Type II and ISO 27001 audits, and undergoes annual third-party penetration tests.

Read from Langfuse's own page on 2026-11-09

framework: ISO27001type: ISO 27001 auditscope: Langfuse Cloud production servicereport access: on_request

is covered by SOC 2 Type II and ISO 27001 audits

Read from Langfuse's own page on 2026-11-09

framework: HIPAAtype: HIPAA-ready regionscope: HIPAA data regionreport access: unstated

We offer a DPA , provide a HIPAA-ready region , and adhere to our Privacy Policy .

Read from Langfuse's own page on 2026-11-09

framework: GDPRtype: GDPR compliance statementscope: Personal data processingreport access: unstated

Langfuse is GDPR compliant, and offers data retention, data masking and data deletion capabilities to manage the processing of personal data .

Read from Langfuse's own page on 2026-11-09

Document

Download YAML · schema: API Commons Compliance 0.1.0 · transcribed by claude-haiku-5-5, checked verbatim against the fetched page