Logfire Compliance Standards & Security Protocols
For more about our security posture, see the Pydantic security page and our trust page.
To request our SOC2 report or any other compliance documentation, use our compliance request form. For anything else, feel free to get in touch.
Logfire is SOC2 Type II certified. We did not receive any exceptions in our report. Request a copy of our SOC2 report via our compliance request form.
Logfire is HIPAA compliant.
HIPAA requires a Business Associate Agreement (BAA) between you and us if your use of Logfire involves Protected Health Information (PHI). We offer a boilerplate BAA on our Growth plan and a custom BAA on any Enterprise plan (see pricing). To put one in place, email sales@pydantic.dev.
Pydantic is GDPR compliant.
The General Data Protection Regulation (GDPR) requires a Data Processing Addendum (DPA) between you and us when Logfire processes personal data on your behalf. Our standard DPA applies on every plan. It is part of the Terms of Service, so it takes effect with the Terms and needs no separate signature.
The DPA covers the EU GDPR, the UK GDPR, and the Swiss Federal Act on Data Protection. For transfers of personal data out of the European Economic Area (EEA) or Switzerland, it applies the EU Standard Contractual Clauses (SCCs). For transfers out of the UK, it applies the UK International Data Transfer Addendum.
Our subprocessors page lists the third parties that process data on our behalf. We give 14 days’ notice of changes to that list, and you can subscribe to those notices by email. To keep your data in the EU, use our EU Data Region. Enterprise customers can negotiate custom DPA terms: email sales@pydantic.dev.
To erase personal data on request, see Delete data from a project.
For customers who need data to be kept in the EU, we offer an EU Data Region.