Artifact data privacy and compliance

When you log artifacts, Weights & Biases uploads the files to a Google Cloud bucket. The contents of the bucket are encrypted at rest and in transit. Only users with access to the project can see the files.

When you delete a version of an artifact, it is marked for soft deletion in our database and removed from your storage cost. When you delete an entire artifact, it is queued for permanent deletion and all of its contents are removed from the Weights & Biases bucket. If you have specific needs around file deletion, reach out to Customer Support. By default, deleted artifacts are retained for 7 days and can be restored during this period, which is configurable for Dedicated Cloud. Learn more about data retention in Multi-tenant Cloud or Dedicated Cloud. For sensitive datasets that cannot reside in a multi-tenant environment, you can use W&B Dedicated Cloud or reference artifacts. Reference artifacts track references to private buckets without sending file contents to Weights & Biases. Reference artifacts maintain links to files on your buckets or servers. Weights & Biases only keeps track of the metadata associated with the files, not the files themselves.

For more information about deployment options, see Dedicated Cloud or Self-Managed. To discuss your specific requirements, contact CoreWeave.