Safety Consent And Governance

Crawler operator points Browserbase sessions at a site whose robots.txt disallows the path they want.

Honor robots.txt at the operator layer before issuing page.goto. Browserbase does not centrally enforce robots — it is operator responsibility. Document policy exceptions (e.g., authorized customer-own targets) explicitly.

New customer onboards a target site that Browserbase has flagged as ToS-sensitive.

Require customer attestation of ToS-compliant authorization (own site, explicit agreement, public-data carve-out) before enabling stealth + proxies + captcha for that target. Persist the attestation for audit.

Stagehand extract() returns a table including names and email addresses. Operator pipes the result into a downstream LLM.

Redact PII at the extract boundary before downstream LLM exposure (regex + named entity tagging). Persist the unredacted copy only in a tenant-scoped secure store. Treat extract output as untrusted until validated and redacted.