Skip to main content
Platform Review
PricingSign in
← All platforms
Developer / Coding · langchain.com

LangChain

Graded against 804 verified platforms, from its own policy text. Automated assessment against a published rubric — not legal advice.

Overall riskMEDReviewed 2026-06-08
Creator: low · GRC: medium · Counsel: medium
creator band
Exemplary
enterprise · Exemplary
Exhibit A · Terms of Service · verbatim

LangChain agrees that it will not use Customer Data to train on, develop, or otherwise improve its products, including any large language models. 4.3 Operational Metadata.  Customer agrees that LangChain may collect and use Operational Metadata to operate, maintain, improve, and support the LangSmith Platform, including for diagnostics, analytics, system

highest-risk verified finding on training use — tap for the citation
56 verified findings10 policy surfaces2/2 core docs verified
Risk triage

Watch: indemnity liability

Start here. These are the highest-risk verified clauses AIRIN found in the platform's own policy text.

0
high
17
medium
39
low
2/2
docs
Trains on your data?
No training on your content by default
from 1 cited finding
Who owns outputs?
Not yet assessed
no verified finding covers this surface yet
Commercial use?
Not yet assessed
no verified finding covers this surface yet
Every rating:verbatim-citedsnapshot-datedchange-loggedHow we keep ratings honest →
Risk by role
Select a role to tailor the summary and reorder the findings below.

Scores derived from 33 enriched findings — same verbatim citations as below. AI-generated, not legal advice.

What this means for you
  • LangChain's terms explicitly protect your inputs from training use — the policy is affirmatively favorable on this point.
  • Your outputs and prompts are explicitly yours — LangChain's terms include affirmatively protective IP language.
  • Data handling is conditional — 6 privacy or retention clauses warrant review before using LangChain at scale.

Derived from AI-enriched analysis of the verified findings below — informational only, not legal advice.

How to read this page: Overall risk rates what LangChain's own policy terms mean for your prompts, outputs, and data. The benchmark bands below grade those same verified terms relative to peers — a platform in a risky-by-default category can rate HIGH risk and still grade STRONG against its peer set. Both trace to the cited findings.

Creator lens
Your prompts, your outputs, your IP
EXEMPLARY

Based on 77 verified, verbatim-cited findings below — read the citations.

Enterprise lens
Data use, retention, subprocessors, audit
EXEMPLARY

Based on 87 verified, verbatim-cited findings below — read the citations.

Automated assessment against a published rubric — not legal advice.

Fully verifiedDeveloper / Coding

Fully verified — complete core corpus captured and read in full.

Document status
  • Terms of Service
    Verified - read in full - 29 citationsstaticLast captured 2026-06-08
  • Privacy Policy
    Verified - read in full - 27 citationsstaticLast captured 2026-06-08
Tier conditions

Only citation-backed plan differences are shown here; absent cells mean AIRIN has not verified a tier-specific claim.

plan language
Training on your content

Explicitly prohibits LangChain from using Customer Data to train, develop, or improve its products including large language models, while separately permitting LangChain to collect and use Operational Metadata for platform operations, diagnostics, analytics, and performance, with restrictions on external disclosure requiring aggregation/anonymization that does not identify Customer.

"LangChain agrees that it will not use Customer Data to train on, develop, or otherwise improve its products, including any large language models. 4.3 Operational Metadata.  Customer agrees that LangChain may collect and use Operational Met..."
plan language
Privacy & data use

Enumerates the purposes for which LangChain processes personal data (service delivery, communications, marketing, fraud prevention), including the user's right to opt out of marketing—establishing both processing purpose obligations and a corresponding user right.

" Provide, operate, maintain, secure and improve our Services. Provide information about our Services. Communicate with you about our Services, including by sending you announcements, updates, security alerts, and support and administrativ..."
📍 Privacy Policy › “We may use the following tools for automatic data collection:”Jump to exact text →
plan language
Privacy & data use

States that data subjects may exercise their rights free from discrimination, withdraw consent, and contact LangChain to invoke rights, while noting exceptions where full compliance may not be possible due to legal retention requirements—balancing the right with a legal exception.

"You are entitled to exercise the rights described above free from discrimination. In addition, where you have provided your consent to processing for the purposes indicated above, you may withdraw your consent at any time (or otherwise exe..."
📍 Privacy Policy › “Your choices”Jump to exact text →
plan language
Privacy & data use

Enumerates the specific categories of personal data (account credentials, payment information, business contact information) that LangChain collects from users, establishing the company's data-collection obligations and disclosing third-party payment processor involvement.

" Account information:  When you create an account to use the Services, we collect information such as your email address, password, and other similar account registration information. Payment Information: If you are using a paid version of..."
📍 Privacy Policy › “Information you provide to us:”Jump to exact text →
plan language
Privacy & data use

Discloses the categories of personal data collected from job applicants (contact info, credentials, diversity data) and the purposes for which it is processed (recruitment, evaluation, monitoring), constituting a data collection and use disclosure obligation for that data subject class.

" When you visit the careers portion of our website, we collect personal information that you provide to us in connection with your job application. This includes business and personal contact information, professional credentials and skills..."
📍 Privacy Policy › “Job Applicants”Jump to exact text →
plan language
Privacy & data use

Defines LangChain as the data controller, identifies the Services (LangSmith platform), and declares the scope and purpose of the Privacy Policy—establishing the foundational definitions for all downstream data-use obligations.

" LangChain, Inc. (“ LangChain, ” “ we ,” “ us ,” or “ our ”) has prepared this Privacy Policy to explain (1) what personal information we collect, (2) how we use and share that information, and (3) your choices concerning our privacy and in..."
📍 Privacy Policy › “Last updated: April 28, 2024”Jump to exact text →
plan language
Moderation & enforcement

Restricts both parties from publicly announcing the Agreement without prior written consent or legal requirement, while granting LangChain a limited permission to include Customer in promotional materials subject to Customer's right to revoke that use; also imposes export control compliance obligations on both parties.

" 10.1 Publicity and Reference.  Except as otherwise outlined in the Order Form, neither party may publicly announce this Agreement except with the other party's prior written consent or as required by applicable laws.  However, LangChain ma..."
plan language
Moderation & enforcement

Obligates Customer to pay all Fees per the Order Form, authorizes LangChain to collect usage metrics for Self-Hosted Deployments to monitor Subscription Metric compliance, and establishes that excess usage will be invoiced, and that payment obligations are non-cancelable and Fees non-refundable.

" 3.1 Fees.  Customer will pay LangChain all fees as outlined in the applicable Order Form (“ Fees ”). For Self-Hosted Deployments, LangChain may collect usage metrics via the LangSmith Platform or upon request to monitor compliance with app..."

Evidence appendix

Showing priority citations first. The full appendix is available for audit trails; not every citation is a severe risk.

High - 0
Medium - 17
Tier-specific - 0
Total citations - 56
Severity
Surface
Document
Tier
Privacy & data use
CautionHigh
" Online activity data, such as pages or screens you viewed, how long you spent on a page or screen, browsing history, navigation paths between pages or screens, information about your activity on a page or screen, access times, and duration of access, and whether you have opened our marketing emails or clicked links within them. We may use third party tools to assist with capturing online activity data. Email Open/Click Information. We may use pixels in our email campaigns that allow us to collect your email and IP address as well as the date and time you open an email or click on any links in the email that we may send to you."
Privacy Policy › “Information you provide to us:”Jump to exact text →
Source: Privacy Policy- Snapshot 2026-06-08- View source
Permalink to this finding →
Automated analysis

Identifies online activity data and email engagement data (open/click pixels) collected automatically, and discloses use of third-party tools for such collection, constituting a mandatory disclosure of data collection practices.

AI-generated interpretation, not legal advice.

Privacy & data use
CautionHigh
" We may use both persistent cookies and session cookies. Persistent cookies stay on your device for a set period of time or until you delete them, while session cookies are deleted once you close your web browser. The cookies placed through your use of our website are either set by us (first-party cookies) or by a third party at our request (third-party cookies). We may also allow our advertising partners to collect this information through our website."
Privacy Policy › “How do we use cookies and other similar technologies?”Jump to exact text →
Source: Privacy Policy- Snapshot 2026-06-08- View source
Permalink to this finding →
Automated analysis

Discloses that LangChain uses both persistent and session cookies set by first-party and third-party sources, and permits advertising partners to collect information through the website, establishing the scope of third-party data sharing via cookies.

AI-generated interpretation, not legal advice.

Privacy & data use
CautionHigh
" Note that because these opt out mechanisms are specific to the device or browser on which they are exercised, you will need to opt out on every browser and device that you use. Do Not Track. Some Internet browsers can be configured to send “Do Not Track” signals to the online services that you visit. We currently do not respond to “Do Not Track” or similar signals. To find out more about “Do Not Track,” please visit http://www.allaboutdnt.co"
Privacy Policy › “Facebook”Jump to exact text →
Source: Privacy Policy- Snapshot 2026-06-08- View source
Permalink to this finding →
Automated analysis

Disclaims any obligation to honor 'Do Not Track' signals, informing users that LangChain does not respond to such browser signals, and notes that opt-out mechanisms are device/browser-specific, limiting the scope of opt-out rights.

AI-generated interpretation, not legal advice.

Data retention
CautionHigh
" We may retain your personal information for as long as it is reasonably needed in order to maintain and expand our relationship and provide you with our services; in order to comply with our legal and contractual obligations; or to protect ourselves from any potential disputes. To determine the appropriate retention period for personal information, we consider the amount, nature, and sensitivity of such information, the potential risk of harm from unauthorized use or disclosure of such information, the purposes for which we process it, and the applicable legal requirements.  "
Privacy Policy › “Data Retention”Jump to exact text →
Source: Privacy Policy- Snapshot 2026-06-08- View source
Permalink to this finding →
Automated analysis

Establishes LangChain's data retention obligation, specifying that personal data is retained as long as reasonably needed for service delivery, legal/contractual compliance, and dispute protection, and enumerates the criteria used to determine the appropriate retention period.

AI-generated interpretation, not legal advice.

Data retention
CautionHigh
" (A) Data Export. During a Subscription Term or within thirty (30) days thereafter upon Customer's written request (subject to Customer's configured retention period), Customer may export Customer Data from Cloud Deployments as described in the Documentation. The thirty (30) day post-termination export right does not apply to No Charge Access."
Source: Terms of Service- Snapshot 2026-06-08- View source
Permalink to this finding →
Automated analysis

Grants Customer the right to export Customer Data from Cloud Deployments during the Subscription Term or within 30 days after termination upon written request, subject to configured retention periods, and explicitly excludes this right for No Charge Access.

AI-generated interpretation, not legal advice.

Indemnity & liability
CautionHigh
" Our Services may contain links to other websites, mobile applications, and other online services operated by third parties. These links are not an endorsement of, or representation that we are affiliated with, any third party. In addition, our content may be included on web pages or in mobile applications or online services that are not associated with us. We do not control third party websites, mobile applications or online services, and we are not responsible for their actions. Other websites and services follow different rules regarding the collection, use and sharing of your personal information. We encourage you to read the privacy policies of the other websites and mobile applications and online services you use."
Privacy Policy › “Other sites, mobile applications and services”Jump to exact text →
Source: Privacy Policy- Snapshot 2026-06-08- View source
Permalink to this finding →
Automated analysis

Disclaims responsibility for third-party websites, apps, and services linked from LangChain's platform, stating that LangChain does not control them and that their separate privacy rules apply—limiting LangChain's liability for third-party data practices.

AI-generated interpretation, not legal advice.

Indemnity & liability
High
" 8.1 Limitation of Liability.   TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, EXCEPT FOR LIABILITY (A) ARISING FROM EITHER PARTY’S INTENTIONAL MISUSE OF THE OTHER PARTY’S CONFIDENTIAL INFORMATION, (B) ARISING FROM EITHER PARTY’S INDEMNIFICATION OBLIGATIONS UNDER SECTION 7, OR (C) RESULTING FROM EITHER PARTY’S GROSS NEGLIGENCE, FRAUD OR WILLFUL MISCONDUCT, EACH PARTY’S TOTAL CUMULATIVE LIABILITY TO THE OTHER PARTY FOR ANY CLAIM ARISING OUT OF OR RELATING TO THIS AGREEMENT WILL NOT EXCEED THE FEES PAID OR PAYABLE TO LANGCHAIN UNDER THIS AGREEMENT DURING THE TWELVE (12) MONTHS IMMEDIATELY PRECEDING THE DATE OF THE CLAIM. THE PARTIES AGREE THAT THIS LIMITATION REPRESENTS AN AGREED ALLOCATION OF RISK AND REFLECTS THE RIGHTS AND OBLIGATIONS SET FORTH IN THIS AGREEMENT, AND APPLIES REGARDLESS OF THE THEORY OF LIABILITY, WHETHER IN CONTRACT, TORT (INCLUDING NEGLIGENCE), STATUTE, OR OTHERWISE. 8.2 Damages Exclusion . IN NO EVENT WILL EITHER PARTY OR ITS AFFILIATES HAVE ANY LIABILITY ARISING OUT OF OR RELATED TO THIS AGREEMENT FOR ANY LOST PROFITS, REVENUES, GOODWILL, OR INDIRECT, SPECIAL, INCIDENTAL, CONSEQUENTIAL, COST OF COVER, BUSINESS INTERRUPTION, OR PUNITIVE DAMAGES, WHETHER AN ACTION IS IN CONTRACT OR TORT AND REGARDLESS OF THE THEORY OF LIABILITY, EVEN IF A PARTY OR ITS AFFILIATES HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES OR IF A PARTY’S OR ITS AFFILIATES’ REMEDY OTHERWISE FAILS OF ITS ESSENTIAL PURPOSE. THE FOREGOING DISCLAIMER WILL NOT APPLY TO THE EXTENT PROHIBITED BY LAW."
Source: Terms of Service- Snapshot 2026-06-08- View source
Permalink to this finding →
Automated analysis

Caps each party's total cumulative liability to the other at fees paid in the preceding 12 months, subject to carve-outs for intentional misuse of confidential information, indemnification obligations, and gross negligence/fraud/willful misconduct.

AI-generated interpretation, not legal advice.

Privacy & data use
NeutralHigh
" Provide, operate, maintain, secure and improve our Services. Provide information about our Services. Communicate with you about our Services, including by sending you announcements, updates, security alerts, and support and administrative messages. Respond to your requests, questions and feedback. Marketing and advertising. We may from time-to-time send you direct marketing communications as permitted by law, including, but not limited to, notifying you of special promotions, offers and events via email. You may opt out of our marketing communications as described in the “ Opt out of marketing communications ” section below. For research and development. We may use your personal information for research and development purposes, including to analyze and improve our Services and our business. As part of these activities, we may create aggregated, de-identified, or other anonymous data from personal information we collect. We make personal information into anonymous data by removing information that makes the data personally identifiable to you. We may use this anonymous data and share it with third parties for our lawful business purposes, including to analyze and improve our Services and promote our business. Compliance and protection. We may use personal information to: Comply with applicable laws, lawful requests, and legal process, such as to respond to subpoenas or requests from government authorities. Protect our, your or others’ rights, privacy, safety or property (including by making and defending legal claims). "
Privacy Policy › “We may use the following tools for automatic data collection:”Jump to exact text →
Source: Privacy Policy- Snapshot 2026-06-08- View source
Permalink to this finding →
Automated analysis

Enumerates the purposes for which LangChain processes personal data (service delivery, communications, marketing, fraud prevention), including the user's right to opt out of marketing—establishing both processing purpose obligations and a corresponding user right.

AI-generated interpretation, not legal advice.

Privacy & data use
NeutralHigh
" Cookies , which are text files that websites store on a visitor’s device to uniquely identify the visitor’s browser or to store information or settings in the browser for the purpose of helping you navigate between pages efficiently, remembering your preferences, enabling functionality, helping us understand user activity and patterns, and facilitating online advertising. Local storage technologies, like HTML5, that provide cookie-equivalent functionality but can store larger amounts of data, including on your device outside of your browser in connection with specific applications. Web beacons , also known as pixel tags or clear GIFs, which are used to demonstrate that a webpage or email was accessed or opened, or that certain content was viewed or clicked. For additional details, please see our Cookie Policy below."
Privacy Policy › “We may use the following tools for automatic data collection:”Jump to exact text →
Source: Privacy Policy- Snapshot 2026-06-08- View source
Permalink to this finding →
Automated analysis

Describes specific automated tracking technologies (cookies, local storage/HTML5, web beacons) employed by LangChain, their purposes, and their effects—constituting a disclosure obligation regarding data collection mechanisms.

AI-generated interpretation, not legal advice.

Privacy & data use
NeutralHigh
" Blocking advertising ID use in your mobile settings. Your mobile device settings can provide functionality to limit use of the advertising ID associated with your mobile device for interest-based advertising purposes. Using privacy plug-ins or browsers . You can block our websites from setting cookies used for interest-based ads by using a browser with privacy features, like Brave , or installing browser plugins like Privacy Badger , Ghostery , or uBlock Origin , and configuring them to block third party cookies/trackers. Platform opt-outs . Some advertising companies offer opt-out features that let you opt out of use of your information for interest-based advertising, including: Google "
Privacy Policy › “How can you control the use of cookies?”Jump to exact text →
Source: Privacy Policy- Snapshot 2026-06-08- View source
Permalink to this finding →
Automated analysis

Describes additional procedures users may employ to limit interest-based advertising tracking via mobile device settings, privacy browsers, and browser plugins, further operationalizing user opt-out rights for data processing.

AI-generated interpretation, not legal advice.

Privacy & data use
NeutralHigh
" We may use the following categories of cookies: Strictly Necessary Cookies: These cookies are necessary for the Services to function and cannot be switched off in our systems. They allow us to enable security, prevent fraud and debug the Services and are usually only set in response to actions made by you which amount to a request for services, such as setting your privacy preferences, logging in or filling in forms. You can set your browser to block or alert you about these cookies, but then some parts of the Services will not work. Functional Cookies. These cookies are used to recognize you when you return to our Services or to enable the Services to provide enhanced functionality and personalisation. They may be set by us or by third party providers whose services we have added to our pages. If you do not allow these cookies then some or all of the Services may not function properly. Analytics Cookies. These cookies allow us to count visits and traffic sources so we can measure and improve the performance of our Services. They help us to know which pages are the most and least popular and see how visitors move around the Services. All information these cookies collect is aggregated. If you do not allow these cookies we will not know when you have visited our Services and will not be able to monitor its performance. "
Privacy Policy › “What types of cookies and similar technologies do we use?”Jump to exact text →
Source: Privacy Policy- Snapshot 2026-06-08- View source
Permalink to this finding →
Automated analysis

Defines and categorizes the types of cookies used (Strictly Necessary, Functional, etc.) and their respective purposes, establishing the definitional framework for lawful basis and consent requirements applicable to each category.

AI-generated interpretation, not legal advice.

Privacy & data use
NeutralHigh
" Account information:  When you create an account to use the Services, we collect information such as your email address, password, and other similar account registration information. Payment Information: If you are using a paid version of the Services, you may need to provide us with payment information, such as credit card information, banking information, or a billing address. We may use third-party payment providers to process payments on the Services.  In particular, credit card information is stored and processed by our payment providers on our behalf. Business Contact Information: If you are a representative of one of our actual or prospective customers, suppliers or business partners, we may collect personal information about you (such as your name, contact details and role) when entering into an agreement with your company or otherwise during the course of our relationship with your company.   Feedback or correspondence , such as information you provide when you contact us with questions, feedback, reviews, or otherwise correspond with us online. Usage information, such as information about how you use the Services and interact with us. Marketing information , such as your preferences for receiving communications about our activities, services, newsletters, and publications, and details about how you engage with our communications. Other information that we may collect which is not specifically listed here, but which we will use in accordance with this Privacy Policy or as otherwise disclosed at the time of collection. "
Privacy Policy › “Information you provide to us:”Jump to exact text →
Source: Privacy Policy- Snapshot 2026-06-08- View source
Permalink to this finding →
Automated analysis

Enumerates the specific categories of personal data (account credentials, payment information, business contact information) that LangChain collects from users, establishing the company's data-collection obligations and disclosing third-party payment processor involvement.

AI-generated interpretation, not legal advice.

Privacy & data use
NeutralHigh
" When you visit the careers portion of our website, we collect personal information that you provide to us in connection with your job application. This includes business and personal contact information, professional credentials and skills, educational and work history, and other information of the type that may be included in a resume. This may also include diversity information that you voluntarily provide. We use this information to facilitate our recruitment activities and process employment applications, such as by evaluating a job candidate for an employment activity, and monitoring recruitment statistics. We may also use and share this information to provide improved administration of the website, and as otherwise necessary: (a) to comply with relevant laws or to respond to subpoenas or warrants served on us; (b) to protect and defend the rights or property of us or others; or (c ) in connection with a legal investigation."
Privacy Policy › “Job Applicants”Jump to exact text →
Source: Privacy Policy- Snapshot 2026-06-08- View source
Permalink to this finding →
Automated analysis

Discloses the categories of personal data collected from job applicants (contact info, credentials, diversity data) and the purposes for which it is processed (recruitment, evaluation, monitoring), constituting a data collection and use disclosure obligation for that data subject class.

AI-generated interpretation, not legal advice.

Indemnity & liability
High
"Customer will defend LangChain from and against any third-party claim to the extent resulting from Customer Data, when used by LangChain as authorized in this Agreement, including allegations that Customer Data infringes a third party’s patent, copyright, trademark or trade secret rights, and will indemnify and hold harmless LangChain against any damages or costs awarded against LangChain (including reasonable attorneys’ fees) or agreed to in settlement by Customer resulting from the claim. The foregoing obligation does not apply to the extent the claim arises from LangChain's unauthorized modification or non-compliant use of Customer Data under this Agreement. 7.3 Procedures. The indemnifying party’s obligations in this Section 7 are subject to receiving (a) prompt notice of the claim, (b) the exclusive right to control and direct the investigation, defense, and settlement of the claim, and (c) all reasonably necessary cooperation of the indemnified party, at the indemnifying party’s expense. The indemnifying party may not settle any claim without the indemnified party’s prior consent if the settlement would require the indemnified party to admit fault or take or refrain from taking any action (other than relating to use of the LangSmith Platform, when LangChain is the indemnifying party). The indemnified party may participate in a claim with its own counsel at its own expense. 7.4 Exclusive Remedy. This Section 7 sets out each party’s exclusive remedy and the other party’s entire liability regarding infringement of third-party intellectual property rights."
Source: Terms of Service- Snapshot 2026-06-08- View source
Permalink to this finding →
Automated analysis

Imposes an obligation on Customer to defend, indemnify, and hold harmless LangChain against third-party claims arising from Customer Data (including IP infringement allegations), while carving out claims arising from LangChain's unauthorized conduct.

AI-generated interpretation, not legal advice.

Indemnity & liability
High
" 6.1 General Warranty.  Each party represents and warrants that it has the authority to enter into this Agreement and perform its obligations hereunder.  6.2 LangChain Limited Warranties. LangChain warrants that the LangSmith Platform will perform materially in accordance with the applicable Documentation during the applicable Subscription Term. Customer’s sole and exclusive remedy, and LangChain’s entire liability, for any breach of the foregoing warranty is for LangChain to use commercially reasonable efforts to correct the nonconformity. If LangChain is unable to do so within a commercially reasonable period, Customer may terminate the affected Order Form and LangChain will refund any prepaid, unused Subscription Fees for the terminated portion of the Subscription Term. With respect to Services, LangChain warrants only that the Services will be performed in a professional manner consistent with generally accepted industry standards. Customer must notify LangChain in writing of any warranty claim within thirty (30) days of delivery of the relevant Services. Customer’s exclusive remedy for breach of this warranty is re-performance of the non-conforming Services. 6.3 Disclaimers. EXCEPT AS EXPRESSLY STATED IN THIS AGREEMENT, THE LANGSMITH PLATFORM AND SERVICES ARE PROVIDED “AS IS.” TO THE MAXIMUM EXTENT PERMITTED BY LAW, EACH PARTY AND ITS LICENSORS DISCLAIM ALL WARRANTIES, WHETHER EXPRESS, IMPLIED, STATUTORY, OR OTHERWISE, INCLUDING ANY IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, AND NON-INFRINGEMENT.  LANGCHAIN DOES NOT WARRANT THAT THE LANGSMITH PLATFORM WILL BE ACCURATE, COMPLETE, ERROR-FREE OR UNINTERRUPTED, MEET CUSTOMER’S REQUIREMENTS, OR PREVENT UNAUTHORIZED THIRD-PARTY ACCESS TO CUSTOMER DATA."
Source: Terms of Service- Snapshot 2026-06-08- View source
Permalink to this finding →
Automated analysis

Establishes LangChain's limited warranty that the platform will materially perform per Documentation, and specifies Customer's sole and exclusive remedy for breach as LangChain's commercially reasonable effort to correct nonconformity, limiting Customer's recourse and capping LangChain's warranty liability.

AI-generated interpretation, not legal advice.

Subprocessors & data sharing
High
" Service providers. We may share your personal information with third party companies and individuals that provide services on our behalf or help us operate our Services (such as lawyers, bankers, auditors, insurers, and providers that assist with hosting, analytics, email delivery, marketing, and database management). Authorities and others. We may disclose your personal information to law enforcement, government authorities, and private parties, as we believe in good faith to be necessary or appropriate for the compliance and protection purposes described above. Business transfers. We may transfer or otherwise share some or all of our business or assets, including your personal information, in connection with a business transaction (or potential business transaction) such as a corporate divestiture, merger, consolidation, acquisition, reorganization or sale of assets, or in the event of bankruptcy or dissolution. In such a case, we will make reasonable efforts to require the recipient to honor this Privacy Policy. Affiliates: We may share personal information with our current and future affiliates, meaning an entity that controls, is controlled by, or is under common control with us. Our affiliates may use the personal information we share in a manner consistent with this Privacy Policy."
Privacy Policy › “How we share your personal information”Jump to exact text →
Source: Privacy Policy- Snapshot 2026-06-08- View source
Permalink to this finding →
Automated analysis

Discloses that LangChain shares personal data with service providers, law enforcement/government authorities, and in the context of business transfers—establishing subprocessor and third-party data-sharing disclosure obligations.

AI-generated interpretation, not legal advice.

Audit rights / DPA / residency
High
" We are headquartered in the United States. To provide and operate our services, it is necessary for us to process your personal information in the United States. If we transfer personal information across borders such that we are required to apply appropriate safeguards to personal information under applicable data protection laws, we will do so. Please contact us for further information about any such transfers or the specific safeguards applied."
Privacy Policy › “Cross-border processing of your personal information”Jump to exact text →
Source: Privacy Policy- Snapshot 2026-06-08- View source
Permalink to this finding →
Automated analysis

Confirms LangChain's obligation to apply appropriate transfer safeguards when moving personal data across borders and offers to provide further information about such safeguards upon request.

AI-generated interpretation, not legal advice.

Moderation & enforcement
CautionHigh
" thereof (except to the extent expressly permitted by applicable law notwithstanding this restriction); (b) sell, resell, license, sublicense, distribute, rent, or lease the LangSmith Platform, including in a service bureau or outsourcing offering; (c) use the LangSmith Platform to develop a similar or competing product or service, or to publish or disclose benchmarks, performance results, or comparative information regarding the LangSmith Platform; (d) transmit unlawful, infringing, harmful, or malicious data or code (including viruses, worms, Trojan horses, or other harmful routines) to or from the LangSmith Platform; (e) alter or remove any trademarks or proprietary notices contained in or on the LangSmith Platform or Documentation; (f) circumvent or interfere with the LangSmith Platform’s operation, access, or use restrictions, or conduct security or vulnerability testing without LangChain’s prior written authorization; (g) use the LangSmith Platform for High-Risk Activities; or (h) use the LangSmith Platform in violation of this Agreement. "
Source: Terms of Service- Snapshot 2026-06-08- View source
Permalink to this finding →
Automated analysis

Restricts Customer from reverse engineering, reselling, sublicensing, distributing, renting, leasing, or using the LangSmith Platform to develop competing products, publish benchmarks, or transmit harmful code, defining the boundaries of permissible commercial use and competitive exploitation.

AI-generated interpretation, not legal advice.

Common questions about LangChain's policies

Does LangChain train its AI models on your data?
No training on your content by default — based on 1 verified finding from LangChain's published policy. Informational only, not legal advice.

Clause detail — protections, your obligations, and coverage

Every clause below is a verbatim quote from LangChain's own published policy, read in full and linked to its exact location. Protections and user obligations are reported separately from risk because they are different kinds of clause — an obligation on you is not a risk to your data. Informational only, not legal advice.

✅ Protections found

19 verified clauses

Clauses in LangChain's policies that work in your favour — commitments the platform made to you.

  • Model trainingdoes-not-train
    LangChain agrees that it will not use Customer Data to train on, develop, or otherwise improve its products, including any large language models. 4.3 Operational Metadata.  Customer agrees that LangChain may collect and use Operational Metadata to operate, ma…

    Explicitly prohibits LangChain from using Customer Data to train, develop, or improve its products including large language models, while separately permitting LangChain to collect and use Operational Metadata for platfo…

  • Prompt ownership
    4.1 Ownership; Reservation of Rights.  As between LangChain and Customer, all rights, title, and interest in and to all intellectual property rights in the LangSmith Platform and LangChain’s Confidential Information are and will remain owned exclusively by Lan…

    Establishes that all intellectual property rights in the LangSmith Platform and LangChain's Confidential Information remain exclusively with LangChain and its licensors, and that ownership of all updates, derivatives, mo…

  • Privacy & data use
    Personal information requests: In certain circumstances (including based on where you are located), you may have the following rights in relation to your personal information: the right to learn more about what personal information of yours is being processed…

    Enumerates data subject rights under applicable law (access, rectification, erasure, portability, objection, etc.) and explains how those rights may be exercised, constituting a legally operative statement of individual…

    📍 Privacy Policy › “Your choices”Jump to exact text →
  • Privacy & data use
    You are entitled to exercise the rights described above free from discrimination. In addition, where you have provided your consent to processing for the purposes indicated above, you may withdraw your consent at any time (or otherwise exercise your aforement…

    States that data subjects may exercise their rights free from discrimination, withdraw consent, and contact LangChain to invoke rights, while noting exceptions where full compliance may not be possible due to legal reten…

    📍 Privacy Policy › “Your choices”Jump to exact text →
  • Indemnity & liabilityindemnity direction
    7.1 Indemnification by LangChain. LangChain will defend Customer from and against any third-party claim to the extent alleging that the LangSmith Platform, when used by Customer as authorized in this Agreement, infringes a third party's patent, copyright, trad…

    Obligates LangChain to defend and indemnify Customer against third-party IP infringement claims arising from authorized use of the LangSmith Platform, covering damages, costs, and attorneys' fees, and grants LangChain op…

  • Confidentiality
    5.1 Definition of Confidential Information. “ Confidential Information ” means all non-public information disclosed by a party (“ Disclosing Party ”) to the other party (“ Receiving Party ”), whether oral or written, that is designated as confidential or that…

    Defines 'Confidential Information' for both parties, specifying that Customer Data constitutes Customer's Confidential Information and the LangSmith Platform constitutes LangChain's Confidential Information, establishing…

+ 13 more verified clauses of this kind on this platform, cited in full in the report.

📋 Rules you must follow

3 verified clauses

What LangChain requires of YOU. These are your obligations, not risks to your data or IP, so they are cited here and excluded from this platform's risk rating.

  • Moderation & enforcement
    2.2 Access to Users. Only authorized Users are permitted to access and use the LangSmith Platform. Customer is solely responsible for (a) approving and maintaining access, identifying and authenticating Users, and controlling against unauthorized access by Use…

    Places sole responsibility on Customer to manage User access, maintain credential confidentiality, and bear accountability for all activities under User accounts, establishing Customer's enforcement obligations for platf…

  • Moderation & enforcement
    10.1 Publicity and Reference.  Except as otherwise outlined in the Order Form, neither party may publicly announce this Agreement except with the other party's prior written consent or as required by applicable laws.  However, LangChain may include Customer an…

    Restricts both parties from publicly announcing the Agreement without prior written consent or legal requirement, while granting LangChain a limited permission to include Customer in promotional materials subject to Cust…

  • Moderation & enforcementconduct restrictions
    thereof (except to the extent expressly permitted by applicable law notwithstanding this restriction); (b) sell, resell, license, sublicense, distribute, rent, or lease the LangSmith Platform, including in a service bureau or outsourcing offering; (c) use the…

    Restricts Customer from reverse engineering, reselling, sublicensing, distributing, renting, leasing, or using the LangSmith Platform to develop competing products, publish benchmarks, or transmit harmful code, defining…

What the policies actually cover

10 topics
  • Product telemetry & usage tracking2 clauses
  • Advertising & tracking2 protective9 clauses
  • Children's data1 protective1 clause
  • Government & law-enforcement disclosure1 protective3 clauses
  • Does not train on your content1 protective1 clause
  • Damages & liability cap2 clauses
  • Indemnity direction1 protective2 clauses
  • Deletion rights & post-termination survival1 protective2 clauses
  • Breach-notification promises1 clause
  • Conduct restrictions1 obligation1 clause

32 further verified clauses are cited on this page but not yet assigned a topic.

Cross-clause notes

Cross-referenceacross documents

Two verified clauses intersect on the same subject matter: the Privacy Policy, Privacy Policy › “Data Retention” addresses how long content is retained, and the Terms of Service, § 4.2 addresses use of content in connection with model training or service improvement. Both clauses are in force at the same time — read them together.

Ambiguity — Cautionacross documents

Verified retention clauses point in different directions: the Privacy Policy, Privacy Policy › “Data Retention” describes broad or open-ended retention, while the Terms of Service, § 9.5 describes deletion or erasure. Which clause controls in a given situation is not resolved by the documents' text alone — this is surfaced as an ambiguity, treated as Caution.

Automated cross-reference against the published rubric — not legal advice.

Clause intelligence

Canonical clauses and stance patterns extracted from the same gate-verified citations shown on this page.

98
clauses
25
patterns
25
stances
privacy sharing · 13legal burden · 5ip license · 4tier conditionality · 2training use · 1
ip licenseHIGH§ 2.1

The clause includes sublicensable, transferable, or assignable rights.

(B) For Self-Hosted Deployment Subscriptions. During the relevant Subscription Term, grant to Customer a limited, non-exclusive, non-transferable (except as set forth in Section 10.8 below), non-sublicensable, license to install and use the LangSmith Platform on Customer Infrastructure for Customer’s internal business use per applicable configuration parameters, as outlined in the Documentation, according to the S...
Open source citation
ip licenseHIGH§ 2.4

The clause includes sublicensable, transferable, or assignable rights.

thereof (except to the extent expressly permitted by applicable law notwithstanding this restriction); (b) sell, resell, license, sublicense, distribute, rent, or lease the LangSmith Platform, including in a service bureau or outsourcing offering; (c) use the LangSmith Platform to develop a similar or competing product or service, or to publish or disclose benchmarks, performance results, or comparative informatio...
Open source citation
ip licenseHIGH§ 2.1

The clause includes sublicensable, transferable, or assignable rights.

(B) For Self-Hosted Deployment Subscriptions. During the relevant Subscription Term, grant to Customer a limited, non-exclusive, non-transferable (except as set forth in Section 10.8 below), non-sublicensable, license to install and use the LangSmith Platform on Customer Infrastructure for Customer’s internal business use per applicable configuration parameters, as outlined in the Documentation, according to the S...
Open source citation
ip licenseMEDIUM§ 4.2

The clause grants a broad content license.

LangChain agrees that it will not use Customer Data to train on, develop, or otherwise improve its products, including any large language models. 4.3 Operational Metadata. Customer agrees that LangChain may collect and use Operational Metadata to operate, maintain, improve, and support the LangSmith Platform, including for diagnostics, analytics, system performance, and reporting purposes. LangChain will only disc...
Open source citation
legal burdenMEDIUM§ 7.1

The clause requires defense, indemnity, or hold-harmless obligations.

7.1 Indemnification by LangChain. LangChain will defend Customer from and against any third-party claim to the extent alleging that the LangSmith Platform, when used by Customer as authorized in this Agreement, infringes a third party's patent, copyright, trademark, or trade secret rights, and will indemnify and hold harmless Customer against any damages or costs awarded against Customer (including reasonable...
Open source citation

Tier matrix

Plan-level conditions detected from citation-backed clauses. Empty tiers mean AIRIN has not captured decisive tier language yet.

TierSurfaceVerdictRiskCitations
All applicable tierscommercial useworsensHIGH1
All applicable tiersconfidentialityconditionalMEDIUM1
All applicable tiersdata retentionconditionalMEDIUM2
All applicable tiersindemnity liabilityconditionalMEDIUM3
All applicable tiersprivacy data useconditionalMEDIUM2
All applicable tierssubprocessors data sharingconditionalMEDIUM1
Freedata retentionconditionalMEDIUM1
Freeindemnity liabilityconditionalMEDIUM1
Freeprivacy data useconditionalMEDIUM1
Freetier differencesconditionalMEDIUM1
Freetraining useconditionalMEDIUM2
Governmentprivacy data useconditionalMEDIUM1

Policy evolution

Open full timeline

Before/after stance changes across captured policy versions. When no material delta exists yet, AIRIN shows the latest citation-backed stance events instead.

Jun 17, 2026data sharingMEDIUM

Latest stance: third party or vendor sharing on data retention

Personal information requests: In certain circumstances (including based on where you are located), you may have the following rights in relation to your personal information: the right to learn more about what personal information of yours is being processed, how and why such information is processed and the third parties who have access to such personal information. We have made this information available to you without having to request it by including it in this Privacy Policy; the right to access your personal information; the right to rectify/correct your personal information; the right to restrict the use of your personal information where permitted under applicable law; the right to request that your personal information is erased/deleted where permitted under applicable law; the right to data portability (i.e. receive your personal information or have it transferred to another controller in a structured, commonly-used, machine readable format) where permitted under applicable law; and the right to object to processing of your personal information or to direct us not to share your personal information with a non-affiliated third party where permitted under applicable law. To make a request, please contact us as provided in the “ How to Contact Us ” section below. We may ask for specific information from you to help us confirm your identity. We will require authorized agents to confirm their identity and authority, in accordance with applicable laws.
Open timeline citation
Jun 17, 2026data sharingMEDIUM

Latest stance: third party or vendor sharing on subprocessors data sharing

Service providers. We may share your personal information with third party companies and individuals that provide services on our behalf or help us operate our Services (such as lawyers, bankers, auditors, insurers, and providers that assist with hosting, analytics, email delivery, marketing, and database management). Authorities and others. We may disclose your personal information to law enforcement, government authorities, and private parties, as we believe in good faith to be necessary or appropriate for the compliance and protection purposes described above. Business transfers. We may transfer or otherwise share some or all of our business or assets, including your personal information, in connection with a business transaction (or potential business transaction) such as a corporate divestiture, merger, consolidation, acquisition, reorganization or sale of assets, or in the event of bankruptcy or dissolution. In such a case, we will make reasonable efforts to require the recipient to honor this Privacy Policy. Affiliates: We may share personal information with our current and future affiliates, meaning an entity that controls, is controlled by, or is under common control with us. Our affiliates may use the personal information we share in a manner consistent with this Privacy Policy.
Open timeline citation
Jun 17, 2026data sharingMEDIUM

Latest stance: third party or vendor sharing on privacy data use

Personal information requests: In certain circumstances (including based on where you are located), you may have the following rights in relation to your personal information: the right to learn more about what personal information of yours is being processed, how and why such information is processed and the third parties who have access to such personal information. We have made this information available to you without having to request it by including it in this Privacy Policy; the right to access your personal information; the right to rectify/correct your personal information; the right to restrict the use of your personal information where permitted under applicable law; the right to request that your personal information is erased/deleted where permitted under applicable law; the right to data portability (i.e. receive your personal information or have it transferred to another controller in a structured, commonly-used, machine readable format) where permitted under applicable law; and the right to object to processing of your personal information or to direct us not to share your personal information with a non-affiliated third party where permitted under applicable law. To make a request, please contact us as provided in the “ How to Contact Us ” section below. We may ask for specific information from you to help us confirm your identity. We will require authorized agents to confirm their identity and authority, in accordance with applicable laws.
Open timeline citation
Jun 17, 2026data sharingMEDIUM

Latest stance: third party or vendor sharing on privacy data use

You are entitled to exercise the rights described above free from discrimination. In addition, where you have provided your consent to processing for the purposes indicated above, you may withdraw your consent at any time (or otherwise exercise your aforementioned rights in relation to your personal information) by contacting us below(see contact details below). Please note that in some circumstances, we may not be able to fully comply with your request, for example if we are required to retain certain information about you to comply with applicable laws and regulations or if the information is necessary in order for us to provide the services you requested. In particular, we, and our collection and processing of your personal information, may be governed by laws and regulations on anti-money laundering, fraud prevention, taxation and financial services. We will not discriminate against you for exercising your rights. We will not deny you access to our services, or provide you a lower quality of services if you exercise your rights. You also have the right to lodge a complaint with the relevant authority (as applicable) or a supervisory authority in the UK or EU member state of your usual residence or place of work or of the place of the alleged breach, if you consider that the processing of your personal information carried out by LangChain or any of our affiliates or third-party service providers, has breached data protection laws.
Open timeline citation
Jun 17, 2026data sharingMEDIUM

Latest stance: third party or vendor sharing on subprocessors data sharing

Information we obtain from third parties. We may obtain your personal information from other third parties, such as marketing partners, publicly-available sources and data providers, for the purposes of marketing products and services that may interest you, delivering personalized communications, and other similar activities. In addition, we may maintain pages on social media platforms, such as Facebook, Twitter, Instagram, and other third-party platforms. When you visit or interact with our pages on those platforms, the platform provider’s privacy policy will apply to your interactions and their collection, use and processing of your personal information. You or the platforms may provide us with information through the platform, and we will treat such information in accordance with this Privacy Policy. Automatic data collection. We and our service providers may automatically log information about you, your computer or mobile device, and your interaction over time with our Services, our communications and other online services, such as: Device data , such as your computer’s or mobile device’s operating system type and version, manufacturer and model, browser type, screen resolution, RAM and disk size, CPU usage, device type (e.g., phone, tablet), IP address, unique identifiers (including identifiers used for advertising purposes), language settings, mobile device carrier, radio/network information (e.g., WiFi, LTE, 4G), and general location information such as city, state or geographic area.
Open timeline citation
Jun 17, 2026data sharingMEDIUM

Latest stance: third party or vendor sharing on data retention

You are entitled to exercise the rights described above free from discrimination. In addition, where you have provided your consent to processing for the purposes indicated above, you may withdraw your consent at any time (or otherwise exercise your aforementioned rights in relation to your personal information) by contacting us below(see contact details below). Please note that in some circumstances, we may not be able to fully comply with your request, for example if we are required to retain certain information about you to comply with applicable laws and regulations or if the information is necessary in order for us to provide the services you requested. In particular, we, and our collection and processing of your personal information, may be governed by laws and regulations on anti-money laundering, fraud prevention, taxation and financial services. We will not discriminate against you for exercising your rights. We will not deny you access to our services, or provide you a lower quality of services if you exercise your rights. You also have the right to lodge a complaint with the relevant authority (as applicable) or a supervisory authority in the UK or EU member state of your usual residence or place of work or of the place of the alleged breach, if you consider that the processing of your personal information carried out by LangChain or any of our affiliates or third-party service providers, has breached data protection laws.
Open timeline citation
Jun 17, 2026data sharingMEDIUM

Latest stance: third party or vendor sharing on privacy data use

Provide, operate, maintain, secure and improve our Services. Provide information about our Services. Communicate with you about our Services, including by sending you announcements, updates, security alerts, and support and administrative messages. Respond to your requests, questions and feedback. Marketing and advertising. We may from time-to-time send you direct marketing communications as permitted by law, including, but not limited to, notifying you of special promotions, offers and events via email. You may opt out of our marketing communications as described in the “ Opt out of marketing communications ” section below. For research and development. We may use your personal information for research and development purposes, including to analyze and improve our Services and our business. As part of these activities, we may create aggregated, de-identified, or other anonymous data from personal information we collect. We make personal information into anonymous data by removing information that makes the data personally identifiable to you. We may use this anonymous data and share it with third parties for our lawful business purposes, including to analyze and improve our Services and promote our business. Compliance and protection. We may use personal information to: Comply with applicable laws, lawful requests, and legal process, such as to respond to subpoenas or requests from government authorities. Protect our, your or others’ rights, privacy, safety or property (including by making and defending legal claims).
Open timeline citation
Jun 17, 2026data sharingMEDIUM

Latest stance: third party or vendor sharing on privacy data use

Information we obtain from third parties. We may obtain your personal information from other third parties, such as marketing partners, publicly-available sources and data providers, for the purposes of marketing products and services that may interest you, delivering personalized communications, and other similar activities. In addition, we may maintain pages on social media platforms, such as Facebook, Twitter, Instagram, and other third-party platforms. When you visit or interact with our pages on those platforms, the platform provider’s privacy policy will apply to your interactions and their collection, use and processing of your personal information. You or the platforms may provide us with information through the platform, and we will treat such information in accordance with this Privacy Policy. Automatic data collection. We and our service providers may automatically log information about you, your computer or mobile device, and your interaction over time with our Services, our communications and other online services, such as: Device data , such as your computer’s or mobile device’s operating system type and version, manufacturer and model, browser type, screen resolution, RAM and disk size, CPU usage, device type (e.g., phone, tablet), IP address, unique identifiers (including identifiers used for advertising purposes), language settings, mobile device carrier, radio/network information (e.g., WiFi, LTE, 4G), and general location information such as city, state or geographic area.
Open timeline citation

Capture recency

  • Terms of Service:Last captured 2026-06-08· verified 2026-06-08verified once — no re-scan in 94 days
  • Privacy Policy:Last captured 2026-06-08· verified 2026-06-08verified once — no re-scan in 94 days

Dates state when our pipeline captured and verified each document — not when the vendor last changed it. Documents are re-scanned on a recurring cadence; a document verified once says so until a re-scan confirms it again.

↑ 52 more findings this quarter vs last (112 vs 60). First scan: June 2026.

Claim this profile

Compare and stack are saved in your browser. Open compare · View your stack. A correction triggers an automated re-read of LangChain's policies — no human edits the data.

Need this for procurement or legal diligence?

Free shows today's risk. A Stack Audit gives you a citable, verbatim-sourced PDF across your whole AI stack — and flags the moment a vendor's terms change.

Every finding above is a verbatim quote from LangChain's own published policy, captured to an immutable snapshot and read in full through a two-gate verification pipeline. Confidence labels and any analysis are AI-generated and informational only — not legal advice.

📢 POLICY UPDATES ALERT

AIRIN Brief

Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.