diff --git a/.env.defaults b/.env.defaults
index c86a4985..307bfe55 100644
--- a/.env.defaults
+++ b/.env.defaults
@@ -26,3 +26,16 @@ AWS_REGION=us-west-2
 AWS_DEFAULT_REGION=us-west-2
 AWS_ACCESS_KEY_ID=test
 AWS_SECRET_ACCESS_KEY=test
+
+# Datadog environment defaults (note: RUM vars are not secret)
+DD_ENABLED=false
+DD_ENV=sandbox
+DD_VERSION=dev
+DD_RUM_ENABLED=false
+DD_RUM_APP_ID='270ea778-f8d7-4167-8a3c-21faa81fe7f0'
+DD_RUM_CLIENT_TOKEN='pub11b2bbdf13240ead0dfc59f187d11f7b'
+DD_RUM_SESSION_SAMPLE_RATE=100
+DD_RUM_SESSION_REPLAY_SAMPLE_RATE=20
+DD_RUM_TRACK_USER_INTERACTIONS=true
+DD_RUM_TRACK_RESOURCES=true
+DD_RUM_TRACK_LONG_TASKS=true
diff --git a/.github/workflows/deploy-staging.yml b/.github/workflows/deploy-staging.yml
index 0583aa9e..5c4acf8a 100644
--- a/.github/workflows/deploy-staging.yml
+++ b/.github/workflows/deploy-staging.yml
@@ -46,6 +46,10 @@ jobs:
       web-artifact-retention-days: 14
       web-dotenv: |
         API_URL=api.staging.cpf.usdr.dev
+        DD_RUM_ENABLED='true'
+        DD_ENABLED='true'
+        DD_ENV='staging'
+        DD_VERSION='${{ github.sha }}'
 
   aws-auth:
     name: Configure AWS Credentials
diff --git a/redwood.toml b/redwood.toml
index 06e02d74..220b932d 100644
--- a/redwood.toml
+++ b/redwood.toml
@@ -13,6 +13,18 @@
   includeEnvironmentVariables = [
     # Add any ENV vars that should be available to the web side to this array
     # See https://redwoodjs.com/docs/environment-variables#web
+    'DD_ENV',
+    'DD_RUM_APP_ID',
+    'DD_RUM_CLIENT_TOKEN',
+    'DD_RUM_ENABLED',
+    'DD_RUM_SESSION_REPLAY_SAMPLE_RATE',
+    'DD_RUM_SESSION_SAMPLE_RATE',
+    'DD_RUM_TRACK_USER_INTERACTIONS',
+    'DD_RUM_TRACK_RESOURCES',
+    'DD_RUM_TRACK_LONG_TASKS',
+    'DD_SERVICE',
+    'DD_SITE',
+    'DD_VERSION',
   ]
 
 [api]