Langfuse procurement policy evidence
Only topics backed by verified findings appear below. Each row preserves the platform's exact policy words and capture provenance.
| Topic | Plan or tier | Risk | Their words | Source |
|---|---|---|---|---|
| DPA, audit rights & data residency | All applicable tiers | low | “ These Terms and Conditions (' Agreement ' or ' T&Cs '), together with (a) the Data Processing Agreement (' DPA ') available at https://langfuse.com/security/dpa (incorporated by reference and applicable whenever Client provides Client Personal Data (as defined in the DPA) to Langfuse) and (b) if Client is provisioned on Langfuse's HIPAA instance and meets the eligibility requirements set out in the Business Associate Agreement (' BAA ') available at https://langfuse.com/security/hipaa (incorporated by reference), form the entire contract between Langfuse GmbH (' Langfuse ') and the respective client (' Client '). Langfuse and its Affiliates may perform obligations under these T&Cs; Langfuse remains responsible for their performance. Engagement of Affiliates that process Personal Data is also subject to the DPA's subprocessor terms.” | Captured 2026-06-08Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “ 'PHI' has the meaning given in the BAA and is a subset of Client Data; for clarity, PHI may also constitute personal data under certain laws, but where information qualifies as both PHI and personal data, the BAA controls to the extent of any inconsistency.” | Captured 2026-06-08Open source →Finding permalink → |
| Data retention | All applicable tiers | low | “ Survival. Sections 3 (to the extent restricting use), 4 (Confidentiality), 6 (Client Data), 7 (Warranty – disclaimers), 8 (Liability), 9 (Indemnities), 11.4–11.6, and 12 (Miscellaneous) survive.” | Captured 2026-06-08Open source →Finding permalink → |
| Data retention | All applicable tiers | low | “ During the Subscription Term, Client may export Client Data via the Solution's export features. Following termination, deletion of Client Personal Data is governed by DPA §9 and deletion of PHI is governed by BAA §10; all other Client Data is deleted under Section 11.4” | Captured 2026-06-08Open source →Finding permalink → |
| Data retention | All applicable tiers | low | “ Langfuse will within thirty (30) days after termination or expiration of the Agreement close the account of the Client maintained on the IT systems of Langfuse and delete or destroy any Client Data in a manner designed to preserve its confidentiality, except to the limited extent retention is required by law or for the establishment, exercise, or defense of legal claims or persists solely in back-ups; any retained copies will remain subject to this Agreement and applicable data-protection terms and will be deleted in the ordinary course. For the avoidance of doubt the DPA shall govern the destruction or deletion of Client Personal Data and the BAA shall govern the destruction of PHI.” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ its professional advisors, service providers, or subprocessors (such as legal counsel, auditors, or consultants) who are subject to legal, professional, or contractual duties of confidentiality at least as protective as those in this Agreement.” | Captured 2026-06-08Open source →Finding permalink → |
| Tier differences | All applicable tiers | low | “ Free Tier and Free Trial. Langfuse may, at its sole discretion, provide either (a) a free subscription tier (e.g. currently the 'Hobby' plan), or (b) a time-limited free trial of certain paid plan features (each, a 'Free Offer').” | Captured 2026-06-08Open source →Finding permalink → |
| Tier differences | All applicable tiers | medium | “ Only for Clients on an enterprise plan or with an Order Form that includes a Service Level Agreement (a 'SLA'). Langfuse will use commercially reasonable efforts to meet the target availability for core services stated in the Order Form, measured by Langfuse's production monitoring/status records. If the target is not met, Client may request service credits as specified in the Order Form; credits are Client's sole remedy and will not exceed fees for the affected period. Exclusions include scheduled/emergency maintenance, Client/third-party causes, beta/preview features, and force majeure. Langfuse may update this Section, but will not materially reduce commitments during the then-current term; any reduction applies only at renewal.” | Captured 2026-06-08Open source →Finding permalink → |
| Tier differences | All applicable tiers | low | “ Free Tier (Hobby Plan). The Free Tier is provided without charge and does not automatically convert into a paid subscription. Client will only incur charges if it affirmatively upgrades to a paid plan.” | Captured 2026-06-08Open source →Finding permalink → |
Informational only, not legal advice. Terms can change; verify every cited source and capture date during procurement review.
📢 POLICY UPDATES ALERT
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.