Baseten
Headquarters: United States. Trust center or security page: trust.baseten.co. Checked 2026-10-29. API prices: price tracker.
Certifications and attestations
| Name | Scope | Source |
|---|---|---|
| SOC 2 Type 2 | This service | trust.baseten.co |
| SOC 3 | This service | trust.baseten.co |
| ISO/IEC 27001:2022 | This service | trust.baseten.co |
| PCI DSS SAQ D | This service | trust.baseten.co |
| GDPR Listed under compliance; GDPR is a law, not a certificate | This service | trust.baseten.co |
| FedRAMP 20x A FedRAMP 20x package is listed; we could not confirm an authorization. | Other product only | trust.baseten.co |
Reports are usually available under NDA from the trust center. A company-wide certificate doesn't always cover every AI product; check the report's scope.
HIPAA: Listed in trust center
“HIPAA”
Listed as a compliance framework in the trust center.
Source: trust.baseten.co
Zero data retention: Offered
“Serve models with zero retention of inference inputs and outputs”
Source: baseten.co
Training on API data: not published
We found no statement about this on the provider's trust center, docs or terms. That doesn't mean the answer is no; ask the provider.
EU data residency: unknown
Model API regions not stated on the pricing page. Enterprise plan advertises 'full control over data residency' and custom global regions (dedicated/self-hosted deployments).
Source: baseten.co
From the BranoLabs price tracker provider registry.
Data processing agreement: mentioned at trust.baseten.co.
Something changed or wrong? Use the bug link in the footer. Back to all providers.