Weights & Biases · Weights & Biases Privacy Policy · View original document ↗

Data Disclosure to Third Parties

Medium severity Low confidence Inferredfromcontext Rare · 1 of 343 platforms
Share 𝕏 Share in Share 🔒 PDF
Recent governance activity Weights & Biases recorded 9 documented changes in the last 30 days.
Start monitoring updates
Monitor governance changes for Weights & Biases Create a free account to receive the weekly governance digest and monitor one platform for governance changes.
Create free account No credit card required.
Document Record

What it is

The document's metadata indicates the policy addresses how CoreWeave discloses personal information, but the specific third-party categories, conditions for disclosure, and any data sharing or sale provisions are not present in the available document fragment.

This analysis describes what Weights & Biases's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

ConductAtlas Analysis

Why it matters (compliance & governance perspective)

Third-party disclosure provisions determine which external entities receive user personal information and under what conditions, a material consideration for enterprise customers whose employees or end-users interact with CoreWeave's platform.

Interpretive note: The substantive policy body text was not rendered in the provided HTML; the existence and scope of third-party disclosure provisions are inferred from the document metadata description only.

Change history

modified May 21, 2026

Provision renamed from 'Third-Party Data Sharing' to 'Data Disclosure to Third Parties' for more precise legal terminology.

View full change record →

Consumer impact (what this means for users)

The agreement addresses personal information disclosure practices; the specific recipients, data categories disclosed, and any opt-out rights available to users cannot be assessed without the full policy text.

How other platforms handle this

Ledger Medium

At Ledger, earning and maintaining our users' trust is a top priority. That's why we are deeply committed not only to protecting your privacy and securing your personal data, but also to being fully transparent about how we handle it.

Garmin Medium

If you are located in the European Economic Area, Switzerland, or the United Kingdom, you have the right to access, correct, or erase your personal data; the right to restrict or object to our processing of your personal data; the right to data portability; and, where our processing is based on your...

Strava Medium

We use information to enhance the quality, reliability, and/or accuracy of our AI Features by creating, developing, training, testing, improving, and maintaining AI and ML models run by Strava or our service providers. We use aggregated, de-identified data for this purpose. We also use personal info...

See all platforms with this clause type →

Monitoring

Weights & Biases has changed this document before.

Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.

Start Monitor free trial Or create a free account →
ConductAtlas Analysis

Institutional analysis (Compliance & governance intelligence)

(1) REGULATORY LANDSCAPE: Third-party data disclosure provisions engage CCPA requirements around disclosure of categories of third parties to whom personal information is sold or shared, and GDPR requirements around identifying recipients or categories of recipients in privacy notices. FTC oversight applies to deceptive disclosure practices affecting US consumers. (2) GOVERNANCE EXPOSURE: Medium. Cloud infrastructure providers commonly disclose customer data to subprocessors (hosting partners, monitoring services, authentication providers) and may share usage data with analytics vendors. The actual scope of CoreWeave's disclosure arrangements cannot be confirmed from the available fragment. (3) JURISDICTION FLAGS: California residents have CCPA rights to know about and opt out of the sale or sharing of their personal information. EU residents have GDPR rights to be informed of data recipients. The policy's treatment of these obligations cannot be assessed without the full text. (4) CONTRACT AND VENDOR IMPLICATIONS: B2B customers who are themselves data controllers should ensure that CoreWeave's subprocessor list is contractually accessible and that downstream disclosure obligations align with their own privacy commitments to end users. (5) COMPLIANCE CONSIDERATIONS: Compliance teams should review the full policy's third-party disclosure section against their vendor management frameworks and assess whether subprocessor change notification procedures meet contractual and regulatory requirements.

Full compliance analysis

Regulatory citations, enforcement risk, and due diligence action items.

Track 1 platform — free Try Monitor free for 14 days

Free: track 1 platform + weekly digest. Monitor: 25 platforms + same-day alerts. No credit card required.

Applicable agencies

  • FTC
    The FTC oversees unfair or deceptive data sharing practices affecting US consumers.
    File a complaint →
  • State AG
    State Attorneys General enforce CCPA and analogous state privacy laws governing third-party data disclosure.
    File a complaint →

Applicable regulations

EU AI Act
European Union
CCPA/CPRA
California, USA
Colorado AI Act
US-CO
Connecticut Data Privacy Act Amendments
US-CT
EU AI Act - High Risk Provisions
EU
FTC Act Section 5
United States Federal
GDPR
European Union
Indiana Consumer Data Protection Act
US-IN
Kentucky Consumer Data Protection Act
US-KY
Universal Opt-Out Mechanism Expansion 2026
US

Provision details

Document information
Document
Weights & Biases Privacy Policy
Entity
Weights & Biases
Document last updated
May 5, 2026
Tracking information
First tracked
May 20, 2026
Last verified
May 20, 2026
Record ID
CA-P-012608
Document ID
CA-D-00494
Evidence Provenance
Source URL
Wayback Machine
Content hash (SHA-256)
08066b648851f8653a6dd61174706b8fbbfe3c2787a50d39305e0e5fbc5399b9
Analysis generated
May 20, 2026 23:25 UTC
Methodology
Evidence
✓ Snapshot stored   ✓ Hash verified
Citation Record
Entity: Weights & Biases
Document: Weights & Biases Privacy Policy
Record ID: CA-P-012608
Captured: 2026-05-20 23:25:30 UTC
SHA-256: 08066b648851f865…
URL: https://conductatlas.com/platform/weights-biases/weights-biases-privacy-policy/data-disclosure-to-third-parties/
Accessed: June 8, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Severity
Medium
Categories

Other risks in this policy

Compliance Governance Intelligence

Need to monitor specific governance provisions?

Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.

Arbitration clauses AI governance Data rights Indemnification Retention policies
Start Compliance free trial

Or start with Monitor →

Built from archived source documents, structured governance mappings, and historical version tracking.

Frequently Asked Questions

What does Weights & Biases's Data Disclosure to Third Parties clause do?

Third-party disclosure provisions determine which external entities receive user personal information and under what conditions, a material consideration for enterprise customers whose employees or end-users interact with CoreWeave's platform.

How does this clause affect you?

The agreement addresses personal information disclosure practices; the specific recipients, data categories disclosed, and any opt-out rights available to users cannot be assessed without the full policy text.

How many platforms have this type of clause?

ConductAtlas has identified this type of provision across 1 platforms. See the full comparison.

Is ConductAtlas affiliated with Weights & Biases?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Weights & Biases.