LLM API Compliance
Providers / Baseten

Baseten

Headquarters: United States. Trust center or security page: trust.baseten.co. Checked 2026-10-29. API prices: price tracker.

Certifications and attestations

NameScopeSource
SOC 2 Type 2This servicetrust.baseten.co
SOC 3This servicetrust.baseten.co
ISO/IEC 27001:2022This servicetrust.baseten.co
PCI DSS SAQ DThis servicetrust.baseten.co
GDPR
Listed under compliance; GDPR is a law, not a certificate
This servicetrust.baseten.co
FedRAMP 20x
A FedRAMP 20x package is listed; we could not confirm an authorization.
Other product onlytrust.baseten.co

Reports are usually available under NDA from the trust center. A company-wide certificate doesn't always cover every AI product; check the report's scope.

HIPAA: Listed in trust center

“HIPAA”

Listed as a compliance framework in the trust center.

Source: trust.baseten.co

Zero data retention: Offered

“Serve models with zero retention of inference inputs and outputs”

Source: baseten.co

Training on API data: not published

We found no statement about this on the provider's trust center, docs or terms. That doesn't mean the answer is no; ask the provider.

EU data residency: unknown

Model API regions not stated on the pricing page. Enterprise plan advertises 'full control over data residency' and custom global regions (dedicated/self-hosted deployments).

Source: baseten.co

From the BranoLabs price tracker provider registry.

Data processing agreement: mentioned at trust.baseten.co.

Something changed or wrong? Use the bug link in the footer. Back to all providers.