
Compliance
W&B Multi-tenant Cloudโs hosting platform meets the requirements of the Service and Organization Controls (SOC) 2 Type 2, published by the Auditing Standards Board of the American Institute of Certified Public Accountants (AICPA). A SOC 2 report evaluates a service organizationโs controls for security, availability, processing integrity, confidentiality, and privacy. W&B Multi-tenant Cloud is subject to periodic internal and external audits to verify continued compliance. Refer to the W&B Security Portal to request the SOC 2 report and other security and compliance documents.Data security
For users on Free or Pro plans, W&B stores all data only in the shared cloud storage and processes it with shared cloud compute services. Depending on your pricing plan, you may be subject to storage limits. Users on an Enterprise plan can bring their own bucket (BYOB) using the secure storage connector at the team level to store their files such as models, datasets, and more. You can configure a single bucket for multiple teams or you can use separate buckets for different W&B Teams. If you donโt configure BYOB for a team, W&B stores the teamโs data in the shared cloud storage. You are responsible for ensuring that your deployment complies with your organizationโs policies and Security Technical Implementation Guidelines (STIG), if applicable.Data retention policy
Multi-tenant Cloud retains the following items for 7 days after deletion:- Runs and history.
- Non-artifact run files, such as media, configuration files, and log files.
- Artifacts and artifact references.
Identity and access management (IAM)
If youโre on an Enterprise plan, identity and access management features support secure authentication and authorization for your W&B deployment:- Authenticate users with SSO using OIDC or SAML. Contact your W&B team or support if youโd like to configure SSO for your organization.
- Configure user roles at the scope of the organization and within a team.
- Define the scope of a W&B project to limit who can view, edit, and submit W&B runs to it with restricted projects.