Artifact data privacy and compliance

Learn where W&B files are stored by default. Explore how to save, store sensitive information.

When you log artifacts, W&B uploads the files to a Google Cloud bucket. The contents of the bucket are encrypted at rest and in transit. Only users with access to the project can see the files.

When you delete a version of an artifact, W&B marks it for soft deletion in the database and removes it from your storage cost. When you delete an entire artifact, W&B queues it for permanent deletion and removes all of its contents from the W&B bucket.

If you have specific needs around file deletion, contact Customer Support.

By default, W&B retains deleted artifacts for 7 days, and you can restore them during this period. This period is configurable for Dedicated Cloud. Learn more about data retention in Multi-tenant Cloud or Dedicated Cloud.

For sensitive datasets that can’t reside in a multi-tenant environment, you can use W&B Dedicated Cloud or reference artifacts. Reference artifacts track references to private buckets without sending file contents to W&B, maintaining links to files on your buckets or servers. W&B only tracks the metadata associated with the files, not the files themselves.

For more information about deployment options, see Dedicated Cloud or Self-Managed. To discuss your specific requirements, contact [e-mail].