Vendor record · braintrust.dev
What Braintrust promises about your data.
Where Braintrust publishes its promises, how long it gives you when it adds a sub-processor, and what has changed.
- Where it publishes
Braintrust lists its sub-processors at trust.braintrust.dev/subprocessors. We last read it on October 14, 2026, and a later attempt returned HTTP 429.
- What has changed
We've recorded no change to its sub-processor list or data processing agreement between August 31, 2026 and September 15, 2026. Subscribers hear about a change the morning we read it; the public record shows it 30 days later.
- Its window
When it adds a sub-processor, its clause at braintrust.dev/legal/dpa (read October 8, 2026) gives you 10 days' notice and 10 to object.
- Window
- 10
- Sub-processors
- 14
- Pages
- 5
- Copies
- 51
days' notice and 10 to object when it adds a sub-processor
sub-processors named
pages we watch
dated copies of all its pages, since August 31, 2026
Braintrust DPA
Braintrust's data processing agreement states a window of 10 days on new sub-processors. Here is the clause, from our October 8, 2026 copy:
10
days' notice and 10 to object
“At least ten (10) days before enabling any third party other than existing Authorized Subprocessors to access or participate in the processing of Personal Data, Company will add such third party to the List and notify Customer via email. Customer may object to such an engagement by informing Company within ten (10) days of receipt of the aforementioned notice to Customer, provided such objection is in writing and based on reasonable grounds relating to data protection.”
Found automatically and not yet checked by a person. The quote is exact, and the link goes to the source. Nothing here says whether the term is good or bad, only that Braintrust published it.
braintrust.dev/legal/dpa · read 2026-10-08 · fingerprint 7b1e1c574e1ac1d4…
How it says it sends notice
“Company may provide a mechanism to subscribe to notifications of new Authorized Subprocessors and Customer agrees to subscribe to such notifications where available.”
braintrust.dev/legal/dpa · read 2026-10-08
What it says if you do not object
“If Customer does not object during this period, that third party will be deemed an Authorized Subprocessor.”
braintrust.dev/legal/dpa · read 2026-10-08
Notice windows across every vendor we watch · Silence as consent
Braintrust sub-processors
Braintrust publishes a sub-processor list at trust.braintrust.dev/subprocessors; we last read it on October 14, 2026, and a later attempt returned HTTP 429. It names 14 entries. The entries, as the list prints them: Amazon Web Services; Anthropic; Baseten; Clerk; Cloudflare; Datadog; Fireworks AI; Google Cloud; OpenAI; Sentry; Supabase; TypeSafe AI; Upstash; Vercel. The same list is in the full table below. The public record holds no change to the list read before September 15, 2026. A change we read after September 15, 2026 is published 30 days after we read it.
14 named · full table
Every public change we have recorded · Where vendors publish their lists
How long Braintrust keeps your data
We hold no statement about data retention from Braintrust's watched pages. The pages we watch: changelog braintrust.dev/changelog; data processing agreement braintrust.dev/legal/dpa; pricing page braintrust.dev/pricing; privacy policy braintrust.dev/legal/privacy-policy; sub-processor list trust.braintrust.dev/subprocessors. On training with customer data, Braintrust's privacy policy (braintrust.dev/legal/privacy-policy, in the copy read October 10, 2026) says: “Such information includes: - Analytics data we receive from analytics providers such as Twilio Segment which we use to improve our website, communications and the Services. - Information we receive from career websites , such as LinkedIn, Monster, or Indeed, which we use to process your application for employment. - **Information we receive when you choose to link any social media platfor…”
Retention windows vendors publish · What vendors say about training
What the pages say
Read automatically from the pages below and shown as printed. A missing row is a gap in our reading, not proof it isn’t there.
Sub-processors named · 14 · 4 name an AI provider we list
Amazon Web Services
Cloud provider
US, EU
AnthropicAI · Anthropic
Inference
US
BasetenAI · Baseten
Inference provider for AI features
US, EU
Clerk
Authentication
US
Cloudflare
Cloud services
US
Datadog
Event monitoring
US
Fireworks AIAI · Fireworks AI
Inference services for Topics feature.
US, EU
Google Cloud
Inference
US
OpenAIAI · OpenAI
Inference
US
Sentry
Application monitoring
US
Supabase
Cloud provider
US
TypeSafe AI
Engineering
US
Upstash
Cloud data storage
US
Vercel
Cloud Provider
US
International transfer notice · European Union
“(a) The parties agree that Company may transfer Personal Data processed under this DPA outside the EEA, the UK, or Switzerland as necessary to provide the Services.”
braintrust.dev/legal/dpa · read 2026-10-08
Retirements announced · every vendor's retirements
undated
Add deprecation warning for parent_id field in the REST API
undated
@braintrust/openai-agents v0.1.6 - @braintrust/openai-agents is deprecated and this is its final release.
undated
Deprecate Anthropic Claude 3.5 models as they are no longer supported by Anthropic
undated
Deprecate the legacy dataset format (output in place of expected) in a new version of the SDK
undated
Deprecated braintrust.wrapper.langchain in favor of the new braintrust-langchain package
undated
OpenCode and pi tracing: Flush delivery in the background so a slow backend flush no longer blocks idle handling, shutdown, or the next inp…
The pages' own stamps: Last Updated 2023-09-21
The pages we watch
Every page we read, so you can check it. Each is re-read on a schedule, and we keep a dated copy when it changes.
What this page doesn’t tell you
No score.
Nothing here rates Braintrust. A short notice window is a contract term, not a criticism.
Public pages only.
Private notices and negotiated terms are invisible to us. Your agreement may say something different.
Wrong? Tell us.
Corrections are free, always. We reply within 2–3 business days.
How we read a page · The change log
Work at Braintrust? With an email at braintrust.dev you can claim this record, suggest pages we should watch, and take a free copy of it. Claiming changes nothing we publish.
Is Braintrust in your product? Hear the morning we read a change.
You get the lines that moved, in Braintrust’s own words, and the date any window closes. No card. Nothing to cancel.