---
title: "Logfire Compliance Standards & Security Protocols"
description: "Overview of Logfire compliance standards. We are SOC2 Type II certified and HIPAA compliant, offer BAAs, and provide an EU Data Region for GDPR compliance."
---
For more about our security posture, see the Pydantic security page and our trust page.
To request our SOC2 report or any other compliance documentation, use our compliance request form. For anything else, feel free to [get in touch](help.md).
## SOC2
{ width="150" }
{ width="150" }
Logfire is SOC2 Type II certified. We did not receive any exceptions in our report. Request a copy of our SOC2 report via our compliance request form.
## HIPAA
{ width="150" }
{ width="150" }
Logfire is HIPAA compliant.
HIPAA requires a Business Associate Agreement (BAA) between you and us if your use of Logfire involves Protected Health Information (PHI). We offer a boilerplate BAA on our Growth plan and a custom BAA on any Enterprise plan (see pricing). To put one in place, email [sales@pydantic.dev](mailto:sales@pydantic.dev).
## GDPR
{ width="150" }
{ width="150" }
Pydantic is GDPR compliant.
The General Data Protection Regulation (GDPR) requires a Data Processing Addendum (DPA) between you and us when Logfire processes personal data on your behalf. Our standard DPA applies on every plan. It is part of the Terms of Service, so it takes effect with the Terms and needs no separate signature.
The DPA covers the EU GDPR, the UK GDPR, and the Swiss Federal Act on Data Protection. For transfers of personal data out of the European Economic Area (EEA) or Switzerland, it applies the EU Standard Contractual Clauses (SCCs). For transfers out of the UK, it applies the UK International Data Transfer Addendum.
Our subprocessors page lists the third parties that process data on our behalf. We give 14 days' notice of changes to that list, and you can subscribe to those notices by email. To keep your data in the EU, use our [EU Data Region](reference/data-regions.md). Enterprise customers can negotiate custom DPA terms: email [sales@pydantic.dev](mailto:sales@pydantic.dev).
## EU Region
For customers who need data to be kept in the EU, we offer an [EU Data Region](reference/data-regions.md).