Baseten: Baseten Sub-processors (Trust Center)
Full side-by-side comparison of both captured documents.
Both captured versions of this document, in full. Deleted text is struck through on the left; inserted text is underlined on the right.
direct captureBefore
Captured 2026-08-05 04:15:02 UTCMethod directHash 8d9f3e7f4e5e7d5edirect captureAfter
Captured 2026-08-11 03:06:59 UTCMethod directHash 8cc9c0b49296c6ffraw before · raw after · provider’s live document
| Before | After |
|---|---|
| ISO 27001 Certification |
Trust Center Start your security review View & download sensitive information | Trust Center Start your security review View & download sensitive information |
Get access Overview Welcome to Baseten's Trust Center. Baseten delivers infrastructure, tooling, and expertise needed to bring the most performant AI products to market. Baseten is committed to protecting our customers’ data and maintaining the highest standards of security, privacy, and reliability. Our platform is designed to help teams deploy and operate machine learning models with confidence, backed by strong technical safeguards and transparent practices. Reporting a Security Vulnerability: If you believe you've discovered a security vulnerability in our services, please report it to security@baseten.co with details of your findings. We will review all legitimate reports and work to investigate and remediate validated vulnerabilities as appropriate. Compliance CCPA | |
CSA STAR Level 1 GDPR HIPAA | CSA STAR Level 1 GDPR HIPAA |
ISO/IEC 27001 | |
PCI DSS SOC 2 Type 2 SOC 3 | PCI DSS SOC 2 Type 2 SOC 3 |
Baseten is reviewed and trusted by Abridge Ambience Healthcare Amp Clay Cursor Decagon Gamma Notion OpenEvidence Scaled Cognition Superhuman World Labs Documents All Public Private Get access Bulk download REPORTS Data Flow Diagram (DFD) REPORTS HIPAA Report REPORTS Pentest Report REPORTS SOC 2 Report REPORTS SOC 3 Report COMPLIANCE GDPR | |
COMPLIANCE HIPAA COMPLIANCE | COMPLIANCE HIPAA COMPLIANCE |
ISO/IEC 27001 COMPLIANCE | |
PCI DSS COMPLIANCE SOC 2 Type 2 | PCI DSS COMPLIANCE SOC 2 Type 2 |
COMPLIANCE | |
SOC 3 SELF-ASSESSMENTS CAIQ | SOC 3 SELF-ASSESSMENTS CAIQ |
| |
View all documents Policies Acceptable Use Policy | View all documents Policies Acceptable Use Policy |
Asset Management Policy Business Continuity Plan View more Reports Data Flow Diagram (DFD) HIPAA Report Pentest Report View more Legal Privacy Policy Cyber Insurance Data Processing Agreement View more Self-Assessments CAIQ SIG Lite Subprocessors | |
Trust Center Updates Subscribe | Trust Center Updates Subscribe |
ISO 27001 Certification Copy link Compliance We’re excited to share that our ISO 27001 certification is now available in the Trust Center. Achieving ISO 27001 is an important milestone in the continued growth of our security and compliance program and reflects our commitment to maintaining strong information security practices as we scale. Customers and partners can visit the Trust Center to learn more and request access to the certification. | |
Baseten's SOC 2 Type 2 is now available Copy link Compliance | Baseten's SOC 2 Type 2 is now available Copy link Compliance |
Our latest SOC 2 report and independent third-party HIPAA assessment report are now available in the Baseten Trust Center, reflecting our continued commitment to strong security, availability, confidentiality, and healthcare data protection controls. Customers and partners can request access directly through the Trust Center. Baseten's SOC 2 Type 2 report for the period of June 1, 2024 through May 31, 2025 is now available for download in the Trust Center. Subproccessor Update Copy link Subprocessors We are removing the following entities to our list of subprocessors: Hubspot, Stripe, Clazar, Salesforce, and Slack. These are no longer used or do not process personal data for Baseten. For the full list of subprocessors and their locations, refer to the Subprocessor section on the Trust Center. If you have any questions about these changes, please reach out at privacy@baseten.co . We are adding the following entities to our list of subprocessors: ScitiX, Hyperstack, and Latitude. These subprocessors will be used for cloud infrastructure. For the full list of subprocessors and their locations, refer to the Subprocessor section on the Trust Center. If you have any questions about these changes, please reach out at privacy@baseten.co . We are adding the following entities to our list of subprocessors: Ark Data Centers, Corvex AI, and Whitefiber. These subprocessors will be used for cloud infrastructure. For the full list of subprocessors and their locations, refer to the Subprocessor section on the Trust Center. If you have any questions about these changes, please reach out at privacy@baseten.co . We are adding the following entities to our list of subprocessors: Cirrascale Cloud Services, Boost Run, and Green AI. These subprocessors will be used for cloud infrastructure. For the full list of subprocessors and their locations, refer to the Subprocessor section on the Trust Center. If you have any questions about these changes, please reach out at privacy@baseten.co . We are updating the name of our subprocessor Ori Industries to Radiant to reflect the company’s new name following a recent merger. There are no changes to the services provided or the nature of data processing. We are adding the following entities to our list of subprocessors: Ori Industries and Fluid Stack. These subprocessors will be used for cloud infrastructure. For the full list of subprocessors and their locations, refer to the Subprocessor section on the Trust Center. If you have any questions about these changes, please reach out at privacy@baseten.co . We are adding the following entities to our list of subprocessors: WorkOS and Slack. WorkOS is used for cross-domain identity management and single sign on. Slack is used for communications. For the full list of subprocessors and their locations, refer to the Subprocessor section on the Trust Center. If you have any questions about these changes, please reach out at privacy@baseten.co . We are adding the following entities to our list of subprocessors: CoreWeave, Hydra Host, Nebius, Voltage Park, and Vultr. These subprocessors are used for cloud infrastructure. For the full list of subprocessors and their locations, refer to the Subprocessor section on the Trust Center. If you have any questions about these changes, please reach out at privacy@baseten.co . Shared Assessments - SIG Lite Copy link Compliance We're pleased to announce that the SIG Lite Questionnaire is now available in our Trust Center. This addition further expands the security resources available in our Trust Center, making it easier for customers to evaluate Baseten's security posture and compliance program. CSA STAR Level 1 Copy link Compliance We are pleased to announce Baseten has completed CSA STAR Level 1 registration. As part of our registration, we've published our completed Consensus Assessments Initiative Questionnaire (CAIQ) which can be found on our Trust Center or through CSA STAR's registry. | |