W&B's handling of personal data within your organization's account is governed by a separate Data Processing Addendum, not just this main agreement, and you need to find and review that document separately.
This analysis describes what Weights & Biases's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
The privacy and data protection obligations that matter most for GDPR and CCPA compliance are in a separate document that is incorporated by reference but not reproduced here, meaning organizations must actively obtain and review the DPA to understand their full data protection obligations.
Interpretive note: The DPA is incorporated by reference rather than reproduced, and the current DPA text is not available in the document provided, making it impossible to assess the adequacy of the privacy protections from this document alone.
The updated agreement no longer includes language stating that a previously executed written agreement between Customer and W&B would govern and supersede the master service agreement. This removal eliminates explicit recognition of contractual hierarchy that may have applied to customers with signed agreements predating the master terms. The practical effect depends on whether such customers have separate agreements in place and how contract interpretation and applicable law would treat the relationship between a posted master agreement and a signed customer agreement absent explicit supersession language.
View change record →The updated Terms of Service no longer include the previous statement that services would become inaccessible from certain locations starting September 1st, 2025. This removal means the geographic restriction that was previously announced in the agreement is no longer formally stated in the current terms. Users who were affected by or concerned about the prior restriction should review current documentation to confirm whether any geographic limitations remain in effect.
View change record →Subscribing organizations cannot assess their data protection compliance posture from this MSA alone; the DPA is a critical companion document that governs what W&B can do with personal data uploaded to the platform and what protections apply.
How other platforms handle this
to request that your data be transferred to a third party (data portability)
Your organization may allow you to access and export your data in order to back it up or transfer it to a service outside of Google.
Further, you may take legal actions in relation to any potential breach of your rights regarding the processing of your Personal Information, as well as to lodge complaints before the competent data prot...
"To the extent that W&B processes any Personal Data (as defined under applicable data protection law) on behalf of Customer in connection with Customer's use of the Services, the parties agree that such processing shall be subject to W&B's Data Processing Addendum ('DPA'), which is incorporated herein by reference and available at [DPA URL].Excerpt from Weights & Biases's Terms of Service
REGULATORY LANDSCAPE: This provision directly implicates GDPR Article 28, which requires a written contract between controller and processor that specifies the subject matter, duration, nature and purpose of the processing, the type of personal data, …
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
The privacy and data protection obligations that matter most for GDPR and CCPA compliance are in a separate document that is incorporated by reference but not reproduced here, meaning organizations must actively obtain and review the DPA to understand their full data protection obligations.
Subscribing organizations cannot assess their data protection compliance posture from this MSA alone; the DPA is a critical companion document that governs what W&B can do with personal data uploaded to the platform and what protections apply.
ConductAtlas has identified this type of provision across 290 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Weights & Biases.