Security architecture at a glance
| Feature | Implementation |
|---|---|
| Isolation | 1 browser per VM |
| Network security | Individual subnets and strict firewall rules |
| Logging control | Optional; disable logs and session video recordings at any time |
| Data residency | Configurable by region (US/EU/Asia) |
| Model control | BYO-LLM with full interceptor customization |
| Compliance | SOC 2 Type II, HIPAA, third-party pen testing |
Why enterprises trust Browserbase
Enterprise-grade compliance
- SOC 2 Type II Certified
- HIPAA compliant: Business Associate Agreements (BAAs) available
- Comprehensive third-party penetration testing with successful results
- Full access to security documentation (e.g., auditor attestations, compliance portal access) provided on request
Secure by design
Zero trust browser isolation
Browserbase follows a zero-trust architecture, assuming that any browser may be compromised. This design philosophy ensures comprehensive containment and minimizes risk.- Browser isolation: Each browser runs in a dedicated VM, providing strong isolation at the hardware virtualization layer.
- Network isolation: Every browser runs in an isolated subnet with strict firewalls to prevent lateral movement.
- No browser reuse: After each session, the virtual machine is killed and recreated from scratch, ensuring every browser session is completely fresh.
- No GPU access: To avoid known security risks associated with shared GPU memory attacks.
Patch management
- Continuous updates with fast turnaround for critical CVEs
- Browserbase patches Chrome versions proactively and automatically.
- Compatibility testing for enterprise environments ensures stability across browser updates
Transparent data handling
- Zero data retention: Disable logging and session recording via the Create Session API to ensure no data is recorded.
- Configurable browser regions: Choose your closest data center to minimize latency and ensure data sovereignty
- US West
- US East
- EU (Germany)
- Asia (Singapore)
Guardrails for AI web browsing
Browserbase offers AI-assisted browsing via Stagehand — it’s designed for safe, deterministic agent workflows.Stagehand benefits
- Atomic, auditable steps: Workflows are built as a series of deterministic, cacheable commands
- Self-healing actions: If a selector changes, Stagehand retries using an LLM fallback only for that atomic step
- No full-page hallucinations: Minimizes AI unpredictability by limiting LLM scope
- Prompt templating: Sensitive data can be parameterized and injected at runtime to avoid LLM exposure
- Bring your own model (BYO-LLM): Maintain full control with your preferred model, keys, and compliance framework