Artifact data privacy and compliance

Learn where W&B files are stored by default. Explore how to save, store sensitive information.

This page explains where W&B stores artifact files by default and how deletion and retention work. It also covers options for sensitive datasets that can’t reside in a multi-tenant environment.

When you log artifacts, W&B uploads files to a Google Cloud bucket that W&B manages. W&B encrypts the contents of the bucket both at rest and in transit. Only users who have access to the corresponding project can view artifact files.

When you delete a version of an artifact, W&B marks it for soft deletion in the database and removes it from your storage cost. When you delete an entire artifact, W&B queues it for permanent deletion and removes all of its contents from the W&B bucket.

If you have specific needs around file deletion, contact Customer Support.

By default, W&B retains deleted artifacts for 7 days, and you can restore them during this period. This period is configurable for Dedicated Cloud. Learn more about data retention in Multi-tenant Cloud or Dedicated Cloud.

For sensitive datasets that can’t reside in a multi-tenant environment, you can use W&B Dedicated Cloud or reference artifacts. Reference artifacts track references to private buckets without sending file contents to W&B, maintaining links to files on your buckets or servers. W&B only tracks the metadata associated with the files, not the files themselves.

For more information about deployment options, see Dedicated Cloud or Self-Managed. To discuss your specific requirements, contact [e-mail].