Data handling and privacy

data handling
privacy
confidentiality
activity
auditing
validmind platform
validmind library
Published

July 4, 2026

How does ​ValidMind handle the processing of PII?

​ValidMind does not send any personally identifiable information (PII) through our ValidMind Library Python API.1

Access to the ValidMind Platform is facilitated through AWS PrivateLink, which provides private connectivity between ​ValidMind and your on-premises networks without exposing your traffic to the public internet.2

What assets are automatically imported into ​ValidMind?

​ValidMind stores the following assets in documents via our ValidMind Library Python API:

  • Dataset and model (any type of record) object metadata which allow generating documentation snippets programmatically (example: stored definition for “common logistic regression limitations” when a logistic regression model has been passed to the ​ValidMind test suite execution)
  • Quality and performance metrics collected from the dataset and record
  • Outputs from executed test suites
  • Images, plots, and visuals generated as part of extracting metrics and running tests

How is data retained within ​ValidMind?

  • ​ValidMind is a multi-tenant or single-tenant solution hosted on cloud providers.
  • With multi-tenant deployments, infrastructure is shared but with strict data isolation protocols that ensure that no tenant can access another’s sensitive information.
NoneFor organizations requiring the highest degree of data security, ​ValidMind offers a Virtual Private ValidMind (VPV)3 option to host the solution in a dedicated single-tenant cloud instance on the ​ValidMind cloud account.

Furthermore, ​ValidMind’s data retention policy complies with the SOC 2 security standard.

What about the confidentiality or size of data sent to ​ValidMind?

  • ​ValidMind does not send datasets outside the client’s environment.
  • The ValidMind Library executes test suites and functions locally in your environment and is not limited by dataset size.

Is activity on records, documents, and artifacts logged?

  • Yes, the ValidMind Platform4 provides an audit trail functionality, enabling you to track or audit all the events associated with a specific record (such as a model).
  • You can review a full history of updates to a record, such as changes to record fields and stakeholders, workflow activity and stage transitions, modifications to documents, artifacts, and test results or metrics, and comment thread activity.5

Are updates to organization settings or configuration tracked?

  • Yes, the ValidMind Platform provides an audit trail functionality, enabling you to track or audit all the events associated with a specific organization’s settings.
  • You can review a full history of updates to organization settings, such as changes to users and groups, permissions and roles, inventory record or artifact settings, document settings, governance settings, workflow and integration setup, and more.6

Learn more