Get the weekly research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean. No account.
The policy discloses that CoreWeave may transfer personal data internationally, including to countries without equivalent data protection standards, and states that Standard Contractual Clauses are used as a transfer mechanism where required.
This analysis describes what Weights & Biases's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
Under this clause, personal data of EEA, UK, and other users may be transferred to countries with different data protection standards, with CoreWeave stating it uses Standard Contractual Clauses as a transfer safeguard where required by law.
How other platforms handle this
We use encryption to keep your data private while in transit
We utilize appropriate encryption techniques to protect your data from unauthorized access.
In order to provide certain Services, we may require access to location information, including geolocation information collected from your device. If you do not consent to collection of this information, certain Services may not function properly...
Monitoring
Weights & Biases has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
"CoreWeave operates globally and may transfer personal data to countries that may not provide the same level of data protection as your country of residence. Where required, we use appropriate safeguards, such as Standard Contractual Clauses.Excerpt from Weights & Biases's Privacy Policy
(1) REGULATORY LANDSCAPE: International data transfers from the EEA are governed by GDPR Chapter V, which requires an adequacy decision, Standard Contractual Clauses, Binding Corporate Rules, or another listed derogation. The UK operates its own International Data Transfer Agreement framework post-Brexit. The European Data Protection Board has issued guidance requiring Transfer Impact Assessments to accompany SCCs in certain transfer contexts. (2) GOVERNANCE EXPOSURE: Medium. The policy's reference to SCCs as a transfer mechanism is consistent with GDPR Chapter V on its face, but the absence of Transfer Impact Assessment disclosure and the lack of specificity about transfer routes may be relevant to enterprise customers conducting vendor assessments under GDPR Article 28. (3) JURISDICTION FLAGS: EEA and UK users face the most direct regulatory exposure regarding international transfers. Enterprise customers in regulated industries may face sector-specific data localization or transfer restrictions beyond the general GDPR framework. (4) CONTRACT AND VENDOR IMPLICATIONS: Enterprise customers should request copies of CoreWeave's SCCs and any Transfer Impact Assessments as part of due diligence for GDPR-compliant vendor management. UK customers should confirm whether CoreWeave uses the UK International Data Transfer Agreement or an equivalent mechanism for UK-origin data. (5) COMPLIANCE CONSIDERATIONS: Legal teams should document the transfer routes relevant to their CoreWeave deployments and confirm that CoreWeave's SCCs cover those specific routes. Transfer Impact Assessments should be reviewed or requested where transfers involve high-risk jurisdictions. DPAs should incorporate transfer mechanism references consistent with applicable law.
Full institutional analysis
Regulatory citations, enforcement risk, and due diligence action items.
Monitor: same-day alerts on the platforms you choose. Analyst: full institutional analysis.
Compliance Governance Intelligence
Need to monitor specific governance provisions?
Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
The policy discloses that CoreWeave may transfer personal data internationally, including to countries without equivalent data protection standards, and states that Standard Contractual Clauses are used as a transfer mechanism where required.
Under this clause, personal data of EEA, UK, and other users may be transferred to countries with different data protection standards, with CoreWeave stating it uses Standard Contractual Clauses as a transfer safeguard where required by law.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Weights & Biases.