Compliance: For Langfuse Cloud, SOC 2 Type II; ISO/IEC 27001; HIPAA (under a conditionThe mark holds only under a setting or an agreement the line names.); GDPR; DPA; the software itself, set by whoever runs itThe answer belongs to whoever runs the software, because open-source software has no maker running it for you., for their own deployment.
Data: For Langfuse Cloud, training use, default retention, zero-retention option and data residency not stated on the pages readWe read a page that could answer and found no sentence that does. It says nothing about what the maker does.; the software itself, set by whoever runs itThe answer belongs to whoever runs the software, because open-source software has no maker running it for you., with telemetry not checked yetWe have not read a page of the right kind for this question yet..
Model and where it runs: Run by its operator, or hosted by the maker as Langfuse Cloud; for Langfuse Cloud, model provider not stated on the pages readWe read a page that could answer and found no sentence that does. It says nothing about what the maker does.; where it can run not checked yetWe have not read a page of the right kind for this question yet..
Details: What the maker's own pages state, not a compliance determination, unverified after 2026-12-26: trust page, langfuse.com.
What the maker's own pages said on the dates shown, not a compliance determination.
Sources
GitHub page: langfuse(the product's own site, from our list of products; not read for these lines)
Our reading of vendors' pages, as of the dates shown. Confirm on the vendor's page before relying on any line that cites it. To report an error write to report@crinaro.ai