GOVERNATLAS / PRODUCT DOSSIER

Braintrust

Braintrust describes inspecting agent traces and comparing prompts and models using datasets and automated or human scoring.

01 / CONTEXT & SCOPE

Understand the proposition.
Define the boundary.

The decision to make

Evaluate the path from an observed failure to a dataset case and a reviewed comparison. Automated scores and human judgments serve different purposes; your trial should make disagreements visible rather than averaging them into an unexplained result.

What this record does not establish

The vendor describes traces, datasets and automated or human scoring. It does not establish that a chosen scorer agrees with your reviewers, that a dataset represents production or that one model is generally better.

2 current sources · 5 published assertions
Source coverage is a research boundary, not a quality score.

02 / YOUR EVALUATION

Turn interest into a useful trial.

Open the evaluation playbook ↗
A

A test worth running

Choose a small set of sanitized agent failures, compare two prompt or model configurations and ask two reviewers to label a disputed answer. Inspect how datasets, scorer versions, trace context and reviewer feedback are preserved for the final decision.

GovernAtlas editorial proposal. We have not performed this test.

B

Evidence to bring back

  1. Preserve item-level outcomes and disagreements so an improvement in average score cannot hide a critical regression.
  2. Export the experiment configuration and data identifiers needed to repeat the comparison.

03 / DOCUMENTED EVIDENCE

Read the claim. Inspect the basis.

Each statement retains its classification and preserved source. A vendor assertion is not an independent test result.

01
vendor asserted

Braintrust advertises GDPR compliance on its product page. This statement does not establish the applicable processor agreement, international-transfer mechanism, retention settings or lawfulness of a particular customer workflow.

Source, dates & preserved provenanceBraintrust — official product or documentation page ↗

Authority: vendor owned
Observed 2026-10-14 · Reviewed 2026-11-02 · current until 2026-12-02

Artifact SHA-256: 4749693893a956845d52e86df00394f1ab30859e398f1d83c903d2752f055d58

The hash identifies the preserved capture. The live source may have changed.

02
vendor asserted

Braintrust's public product page describes SOC 2 Type II and annually audited security controls. This is a vendor assertion: GovernAtlas has not inspected the underlying auditor opinion, reporting period, exceptions or system boundary.

Source, dates & preserved provenanceBraintrust — official product or documentation page ↗

Authority: vendor owned
Observed 2026-10-14 · Reviewed 2026-11-02 · current until 2026-12-02

Artifact SHA-256: 4749693893a956845d52e86df00394f1ab30859e398f1d83c903d2752f055d58

The hash identifies the preserved capture. The live source may have changed.

03
vendor asserted

Braintrust describes a hybrid deployment option with its Brainstore data plane on customer infrastructure. A deployment option alone does not establish the HIPAA contractual boundary or whether other services receive PHI.

Source, dates & preserved provenanceBraintrust — official product or documentation page ↗

Authority: vendor owned
Observed 2026-10-14 · Reviewed 2026-11-02 · current until 2026-12-02

Artifact SHA-256: 4749693893a956845d52e86df00394f1ab30859e398f1d83c903d2752f055d58

The hash identifies the preserved capture. The live source may have changed.

04
vendor asserted

Braintrust's pricing documentation lists a business associate agreement for HIPAA use involving PHI and states that it is available on Enterprise plans. Scope: documented plan availability, not proof of a signed agreement, coverage of every model provider, or compliance of a healthcare deployment.

Source, dates & preserved provenanceBraintrust — Plan scope and security options ↗

Authority: vendor owned
Observed 2026-11-02 · Reviewed 2026-11-02 · current until 2026-12-02

Artifact SHA-256: 13e6faa18f8f5c1fe1c435f805a0c283b82a6b22d60f08f3e3b51ced0e6c1f9f

The hash identifies the preserved capture. The live source may have changed.

05
vendor asserted

Braintrust describes inspecting agent traces and comparing prompts and models using datasets and automated or human scoring. Scope: vendor documentation only; edition and availability boundaries require confirmation.

Source, dates & preserved provenanceBraintrust — official product or documentation page ↗

Authority: vendor owned
Observed 2026-10-14 · Reviewed 2026-10-15 · current until 2026-11-13

Artifact SHA-256: 4749693893a956845d52e86df00394f1ab30859e398f1d83c903d2752f055d58

The hash identifies the preserved capture. The live source may have changed.

Source register

Braintrust — Plan scope and security options ↗vendor owned · captured 2026-11-02
Brand asset provenance

Organization identity asset from its official website; inclusion does not imply endorsement.

Official website ↗ · Original asset ↗

04 / BEFORE YOU COMMIT

Better questions.
A clearer decision.

Resolve these with the provider and your own evaluation team.

01

How are representative datasets, annotation decisions and experiment versions retained?

02

What deployment, retention and access-control evidence supports the intended use?

03

What underlying assurance documents are available, and which claims remain unverified?

Regulatory applicability requires a separate, current determination. Inclusion is not certification.

COMPLIANCE / CLAIMS, SCOPE & GAPS

Start with the requirement.
Inspect the support.

Prepare your vendor review ↗

These labels describe this dossier’s current evidence coverage. A published mention may be a framework mapping, a qualified assertion or a limitation; it is not a compliance finding.

HIPAA

Published mention available

US healthcare privacy & security

Vendor documents BAA availability

The pricing page places BAA availability on Enterprise. Confirm the covered services, hosting boundary and downstream model providers before PHI use.

Read the source-attributed statement

Braintrust describes a hybrid deployment option with its Brainstore data plane on customer infrastructure. A deployment option alone does not establish the HIPAA contractual boundary or whether other services receive PHI.

vendor asserted

Braintrust — official product or documentation page ↗
Read the source-attributed statement

Braintrust's pricing documentation lists a business associate agreement for HIPAA use involving PHI and states that it is available on Enterprise plans. Scope: documented plan availability, not proof of a signed agreement, coverage of every model provider, or compliance of a healthcare deployment.

vendor asserted

Braintrust — Plan scope and security options ↗

Explore HIPAA evidence ↗

GDPR

Published mention available

EU personal data protection

Vendor-reported assurance

Obtain the service-specific DPA, subprocessor list, data locations and rights/deletion process.

Read the source-attributed statement

Braintrust advertises GDPR compliance on its product page. This statement does not establish the applicable processor agreement, international-transfer mechanism, retention settings or lawfulness of a particular customer workflow.

vendor asserted

Braintrust — official product or documentation page ↗

Explore GDPR evidence ↗

SOC 2

Published mention available

Assurance report · not a law

Vendor-reported assurance

Request the current full report, auditor opinion, period, exceptions, subservice carve-outs and customer controls.

Read the source-attributed statement

Braintrust's public product page describes SOC 2 Type II and annually audited security controls. This is a vendor assertion: GovernAtlas has not inspected the underlying auditor opinion, reporting period, exceptions or system boundary.

vendor asserted

Braintrust — official product or documentation page ↗

Explore SOC 2 evidence ↗

For HIPAA-regulated use, request service-specific BAA eligibility, processing scope and responsibility details. Missing evidence here does not establish noncompliance. Payment cannot alter these evidence labels.

KEEP THE RECORD USEFUL

A dossier should stand up to scrutiny.

Have a source that changes this picture? Submit it for editorial review.

Raise an evidence issue ↗