Directory › Agent framework and platform › LangChain / LangSmith
Is LangChain / LangSmith UK GDPR compliant?
In plain English
LangSmith, LangChain's agent tracing and deployment platform, offers an EU region (GCP EU) on every plan, including Free. Its DPA covers the UK Addendum, it holds SOC 2 Type II, ISO 27001:2022 and ISO 42001, and its terms rule out training on Customer Data. Self-hosting is an Enterprise add-on.
The facts, with sources
| Field | What the vendor publishes | Source |
|---|---|---|
| UK/EU data residency | EU region (no UK) Organisations on eu.smith.langchain.com are hosted in GCP EU. No UK-specific region. | docs.langchain.com/langsmith/regions-faq |
| DPA and UK GDPR transfer terms | Yes, UK Addendum/IDTA DPA V.2 (31 Oct 2025): for UK transfers, the parties agree to be bound by the UK Addendum. Sign via support. | www.langchain.com/dpa |
| SOC 2 | Yes SOC 2 Type II (2026 attestation). | trust.langchain.com/ |
| ISO 27001 | Yes ISO 27001:2022 certificate (2026) and ISO/IEC 42001:2023. | trust.langchain.com/ |
| Self-hostable | Yes Self-hosted LangSmith is an add-on to the Enterprise plan (Kubernetes). | docs.langchain.com/langsmith/self-hosted |
| Sub-processor list | Public Sub-processors listed in the trust centre with locations. View list | trust.langchain.com/ |
| AI model providers | Google Cloud and AWS for AI features; Engine uses OpenAI, Anthropic, Fireworks, Baseten Per trust centre and Engine security docs. | docs.langchain.com/langsmith/engine-security |
| Customer data used for training? | No Terms s.4.2: 'LangChain agrees that it will not use Customer Data to train on, develop, or otherwise improve its products, including any large language models.' | www.langchain.com/terms-of-service |
Questions UK buyers ask
Is LangChain / LangSmith UK GDPR compliant?
No tool is UK GDPR compliant on its own. It depends on how you use it. On the vendor's side, LangChain / LangSmith offers EU (but not UK) data residency; its DPA status is "Yes, UK Addendum/IDTA"; SOC 2: Yes; ISO 27001: Yes. AgentSafe UK readiness score: 90/100 (Strong).
Does LangChain / LangSmith store data in the UK?
Organisations on eu.smith.langchain.com are hosted in GCP EU. No UK-specific region.
Does LangChain / LangSmith use my data to train AI models?
Terms s.4.2: 'LangChain agrees that it will not use Customer Data to train on, develop, or otherwise improve its products, including any large language models.'
Not legal advice. AgentSafe UK summarises what vendors publish about themselves. It is not legal advice and is not a statement that any tool is "compliant": UK GDPR compliance depends on how you use a tool. Always check the linked sources and take professional advice for your situation.