Baseten: Trust page changed

Trust pagechanged

Baseten’s trust page replaced Mistral AI with Buzz HPC in a subprocessor notice for cloud compute. It also replaced “Visitor procedures enforced” with “Password policy enforced” in the displayed security controls, changing the customer-facing disclosures about subprocessors and safeguards.

Trust pagechanged

Baseten’s Trust page replaced three listed infrastructure security controls with controls covering restricted encryption key access, unique account authentication, and restricted production application access. The page no longer lists access control procedures, access revocation upon termination, or unique network system authentication in that section; the diff does not establish whether underlying practices changed.

Trust pagechanged

Baseten’s trust page added “2026 Penetration Test - Baseten.pdf” to its document listing, giving customers another listed resource for security reviews.

Trust pagechanged

Baseten’s Trust page added “Access revoked upon termination” and removed “Remote access MFA” from its displayed infrastructure security controls. This changes the security assurances customers can verify on the page, but does not establish that the underlying controls changed.

Trust pagechanged

Baseten named Datasection as a subprocessor for cloud compute, relevant to customers’ vendor-risk reviews. The Trust page’s displayed controls added Remote access MFA and Visitor procedures enforced, while Production database access restricted and Employee background checks performed no longer appear in the changed sections; an ISO 27001 certification announcement was also removed.

Trust pagechanged

Baseten’s Trust page changed “Organizational security controls” to “Organizational security control”; this is wording only, with no substantive security change shown for customers.