Skip to main content
After you deploy a self-hosted data plane, use these settings to tune it for your environment. Most are optional, with defaults suitable for typical deployments, and are grouped by concern:
  • Security and access: Control which organizations can authenticate, secure customer data, validate outbound URLs, harden pods, and enable audit headers.
  • Networking and connectivity: Configure client URLs, outbound request security, outbound and inbound request rate limits, load balancer timeouts, and the Braintrust Gateway.
  • Scaling and storage: Size the API and Brainstore compute for your workload.
  • Telemetry and data retention: Control the telemetry your data plane sends to Braintrust and enable data retention.
You can also turn on these optional services, both disabled by default: To change the infrastructure the module provisions instead, such as networking, encryption, resource tags, or cloud identity, see Customize the infrastructure on the Deploy page. Most settings are applied through Terraform (AWS) or Helm (GCP and Azure), and each notes whether it applies to AWS, GCP and Azure, or all clouds, along with the minimum module or chart version required. A few are client-side or API-level settings rather than deployment configuration, and are labeled as such.