NVIDIA AI Workbench Data Privacy and Data Collection

Version	Date	Description
1.0.0	2024.03.18	Initial version.

Important

The NVIDIA Corporation does not collect any personal data through the NVIDIA AI Workbench application.

The AI Workbench application requires no authentication to install or use and is freely available for download.

• You do not need to sign in to an NVIDIA site or have an account to download it.

• There is no user authentication required within the application itself.

• AI Workbench has no ‘phone home’ capabilities or telemetry. However, your local AI Workbench instance subscribes anonymously to update alerts for the application and default base images.

  • The update subscription is mandatory and part of our Shared Security Model. You will receive notifications, but updating is optional and at your discretion.

  • Base image subscription alerts apply only to base images actively used in your projects. If an upstream change occurs, you will be notified, but updates remain optional.

• Default base images for project creation are public on NGC and do not require an API key or authentication. However, an API key is required to access private registries or APIs.

  • These API keys and tokens require an NGC account, governed by the Terms of Use for NGC and other NVIDIA platforms and services.

  • AI Workbench is not connected to any data collection performed by other NVIDIA platforms and services.

• Connecting GitHub or GitLab integrations grants AI Workbench access to your platform profile and the ability to modify repositories.

  • This access is limited to your local AI Workbench instance and connected remote AI Workbench locations. It is temporary and can be revoked either in AI Workbench or directly within the platform.

  • It does not grant NVIDIA Corporation any access to your platform profile or repositories.

Connecting Git Server Integrations

AI Workbench can access your Git platform account using one of two methods:

• OAuth Integration – Authenticates your local AI Workbench directly to your platform account, granting read/write access to repositories.

• Personal Access Token (PAT) – A manually generated token from your platform, which you add to AI Workbench to enable read/write repository access.

OAuth Integration

The OAuth integration requires you to sign in to your Git platform and explicitly authorize AI Workbench to access your account.

GitHub OAuth Permissions

AI Workbench requires the following permissions when integrated with GitHub:

• Read organization and team membership, and read organization projects.

• Download packages from GitHub Package Registry.

• Full control over private repositories.

• Update all user data.

GitLab OAuth Permissions

AI Workbench requires the following permissions when integrated with GitLab:

• Read/write access to all APIs, including: - Groups and projects - Container registry - Dependency proxy - Package registry

OAuth Integration and Visibility

• Using OAuth adds to the aggregate count of accounts that have authorized AI Workbench.

  • This count is visible to NVIDIA Corporation and is managed by the Git platform itself.

• No identifying information about your account is shared with NVIDIA.

• NVIDIA cannot associate your Git platform account with your AI Workbench application.