Configure your deployment

After you deploy a self-hosted data plane, use these settings to tune it for your environment. Most are optional, with defaults suitable for typical deployments, and are grouped by concern:

Security and access: Control which organizations can authenticate, secure customer data, validate outbound URLs, harden pods, and enable audit headers.
Networking and connectivity: Configure client URLs, outbound request security, rate limits, and load balancer timeouts.
Scaling and storage: Size the API and Brainstore compute for your workload.
Telemetry and data retention: Control the telemetry your data plane sends to Braintrust and enable data retention.

To change the infrastructure the module provisions instead, such as networking, encryption, resource tags, or cloud identity, see Customize the infrastructure on the Deploy page. Most settings are applied through Terraform (AWS) or Helm (GCP and Azure), and each notes whether it applies to AWS, GCP and Azure, or all clouds, along with the minimum module or chart version required. A few are client-side or API-level settings rather than deployment configuration, and are labeled as such.

Deploy Braintrust

Security and access

⌘I

Start

Instrument

Observe

Annotate

Evaluate

Deploy

Admin

Best practices

Configure your deployment