Registry / AWS Bedrock (platform)
AWS Bedrock (platform)
Amazon Bedrock is AWS's managed platform for serving foundation models from multiple providers. This platform-level row covers AWS's own audit scope, contractual terms, and Bedrock-wide data-handling commitments; model-specific behavior (e.g. provider data sharing for certain Anthropic models) is noted where it deviates from the platform default.
Watch-outs 2
The cells where this offering is not a clean public yes. This is what to check before you sign.
- SOC 2 Type II: Yes, sales-gated Bedrock is listed as in‑scope for SOC 2 in AWS Services in Scope page
- HIPAA BAA: Yes, sales-gated BAA is accessed via the AWS Artifact portal (requires AWS account login)
AWS provides a SOC 2 Type II report via Artifact behind an NDA, and Bedrock is included in the SOC 2 scope, so the report is available but gated.
An NDA is required to review the AWS SOC 1 and SOC 2 reports. The AWS SOC 1 and SOC 2 are available to customers by using AWS Artifact, a self‑service portal for on‑demand access to AWS compliance reports.
AWS's official ISO‑IEC 27001 compliance page lists Amazon Bedrock (the Bedrock platform) as in scope, confirming public verification.
Amazon Bedrock [excludes amazon Bedrock Marketplace]
The AWS blog publicly states that the ISO/IEC 42001 certification explicitly includes Amazon Bedrock.
AWS is excited to be the first major cloud service provider to announce ISO/IEC 42001 accredited certification for AI services, covering: Amazon Bedrock, Amazon Q Business, Amazon Textract, and Amazon Transcribe.
AWS Artifact is an official AWS self‑service portal providing on‑demand access to compliance reports, confirming a maintained trust/compliance portal.
Save time with on-demand access to AWS and Independent Software Vendor (ISV) compliance reports in a self‑service portal.
Bedrock is listed as a HIPAA‑eligible service and the page requires an AWS BAA, which is obtained through the gated AWS Artifact portal, making the agreement sales‑gated.
NOTE: If you are a Covered Entity or Business Associate ... you agree not to use these HIPAA Eligible Services ... without first entering into an AWS business associate agreement.
AWS provides a publicly accessible Data Processing Addendum that includes Standard Contractual Clauses language and explicitly references a publicly available sub‑processor list page, meeting the DPA with SCCs and published subprocessor list requirement.
Customer agrees that it is unlikely that AWS would become aware that Customer Data transferred under the Standard Contractual Clauses is inaccurate or outdated... 6.1 Authorized Sub‑processors. ... The AWS website (currently posted at https://aws.amazon.com/compliance/sub‑processors/) lists Sub‑processors that are currently engaged by AWS.
The AWS Bedrock privacy page publicly states that customer prompts and outputs are not used to train the models by default, confirming the commitment.
No, prompts that AWS customers enter into Amazon FMs and outputs produced in response to Amazon FM prompts are not used to train the underlying Amazon FMs, unless a customer consents.
AWS Bedrock documentation publicly lists the 'none' retention mode with a description confirming zero-data-retention is available as a self‑serve setting.
`none` | Zero data retention. No request or response data is written to durable storage by AWS or shared with the model provider.
AWS Bedrock documentation publicly describes an In-Region option guaranteeing data stays within the chosen AWS Region, enabling region‑pinning including EU regions.
In-Region: Your requests never leave the AWS Region you specify. Use this when regulations require strict single-Region data processing.
The GPAI Code of Practice is an obligation of the GPAI model provider, not of a distribution platform, so it does not attach to Bedrock as a platform serving third-party models. For the record: Amazon IS on the EC signatory list, having signed the full Code (no chapter limitation noted, unlike xAI's
The Art 53(1)(d) public training-data summary is a GPAI provider obligation; AWS Bedrock as a serving platform is not the provider of the third-party models it hosts, so the obligation does not attach to this platform row. Whether Amazon has published an EU-template training-data summary for its own
Spotted an error? Submit a correction with evidence, corrections with a primary source are folded in and credited in the changelog.