Understanding pricing model (self-hosting vs cloud serving) from security perspective

[uahmad235]

Hello team. Hope you are having great time.

I am an AI engineer at a health-tech startup and we are looking to integrate langfuse to our current workflow. However, there are a few confusions regarding pricing model and features that we are looking to clarify.

1. According to this, in self-hosting (FOSS), SOC2 and SSO are not available. Well, the confusion is that if we have the hosting on-prem on a cloud provider such as AWS/GCP, we already have SOC2. But on the features list, it's crossed. This is a bit of confusion.
   Regarding SSO, i think we should be able to configure the SSO on custom domain even with self-hosting, no?

2. Also there is no mention of 2FA in the features list which could also be configured via custom auth providers via self-hosting (FOSS)?

3. Moreover, the reason it is difficult to make these decision is the pricing model. Cloud - Team and self-hosted enterprise have almost same pricing and features. What's the benefit for a startup vs an enterprise customer if they have to pay the same amount with different scale of data usage.? A startup may not require more than a team of 3-5 people so it might be too much for them to pay 500$ min.

Am i missing something here? Looking forward to the response.

[dosubot[bot]]

Hello @uahmad235! How can I assist you today? If you have any questions or need help with anything, feel free to ask.

Security Features and Pricing Model Clarifications

1. SOC2 and SSO in Self-Hosting (FOSS)

• SOC2: While your cloud provider (AWS/GCP) may be SOC2 compliant, the Langfuse self-hosted (FOSS) version itself does not include SOC2 certification. The SOC2 certification for Langfuse Cloud ensures that the software and its deployment meet specific security standards.
• SSO: You are correct that SSO can be configured in the self-hosted version. Langfuse supports SSO with providers like Google, GitHub, Azure AD, Okta, Auth0, and AWS Cognito. Additional providers can be added based on your requirements ^[1].

2. 2FA in Self-Hosting (FOSS)

• 2FA: The documentation does not explicitly mention 2FA for the self-hosted (FOSS) version. However, it is possible to configure 2FA via custom authentication providers in your self-hosted setup ^[1].

3. Pricing Model: Cloud - Team vs. Self-Hosted Enterprise

• Cloud - Team Plan: This plan includes all features such as tracing, integrations, prompt management, analytics, datasets, scores, API access, automated evaluations, prompt playground, DPA, SOC2 & ISO27001 reports, SSO enforcement, and project-level RBAC roles. However, UI customization is not available ^[2].
• Self-Hosted Enterprise Plan: This plan also includes all the features mentioned above, with the addition of UI customization. Automated evaluations are marked as "coming soon" ^[2].

Pricing Considerations for Startups

• Cost: Both the Cloud - Team plan and the Self-Hosted Enterprise plan start at $500/month. For a startup with a small team (3-5 people), this might seem high. However, the pricing reflects the comprehensive feature set and security compliance provided.
• Scale: The primary difference lies in the deployment preference (cloud vs. on-premises) and the need for UI customization. If your startup does not require extensive customization and prefers managed services, the Cloud - Team plan might be more convenient. Conversely, if you need more control over the deployment and customization, the Self-Hosted Enterprise plan would be suitable ^[2].

If you have further questions or need a more tailored solution, it might be beneficial to reach out to Langfuse's sales team to discuss your specific needs and potential pricing adjustments.

To continue talking to Dosu, mention @dosu.

[jannikmaierhoefer]

Discussion moved to discord: https://discord.langfuse.com/m/1282978584985866261