Is LangChain safe with your data?

No training on customer data

The terms state plainly that LangChain will not use Customer Data to train on, develop, or otherwise improve its products, including any large language models, and customer inputs and outputs remain owned by the customer under a licence limited to running the platform.

Deletion on a clock

After termination, LangChain deletes all Customer Data in its custody and control within thirty days of a written request, and customers can export their data during the same thirty-day window.

Retention left open-ended

The policy names no retention period, keeping personal information only "for as long as it is reasonably needed," with no shorter clock for AI traces or run logs and no data-minimization commitment.

Security and transfers described in generalities

Safeguards are "reasonable organizational, technical and administrative measures" with no named controls, breach notice carries no timeframe, cross-border transfers name no specific safeguard, and the policy claims no security certification.