AWS Bedrock updated its Professional Services Terms to incorporate a new data processing addendum (DPA) when customers expressly direct AWS to access regulated data in a Professional Services Order and applicable data protection laws apply. Previously, the terms prohibited disclosure of regulated data to AWS personnel except as expressly directed. The updated language now explicitly conditions the applicability of the AWS Professional Services DPA on two factors: explicit direction from the customer and the applicability of data protection laws to AWS's processing.
The updated terms establish that AWS Professional Services must operate under a separate Data Processing Addendum (DPA) whenever you direct AWS to access regulated data in a Professional Services Order and applicable data protection laws govern that processing. This formalizes contractual data processing obligations that apply when regulated customer data is involved in professional services work. The change clarifies the legal framework under which AWS processes sensitive data on behalf of customers.
→ Review the AWS Professional Services DPA if you direct AWS to access regulated customer data in Professional Services Orders
→ Evaluate DPA compliance with your applicable data protection laws (GDPR, CCPA, HIPAA, or equivalent)
Data Processing Addendum is now incorporated by terms when customer directs AWS to access regulated data in Professional Services Order and applicable data protection laws apply.
This change record describes what was added, removed, or modified in the document. Analysis reflects what the updated agreement states or permits. It does not constitute a legal determination about enforceability. Applicability may vary by jurisdiction. Methodology
This change formalizes the applicability of AWS Professional Services DPA for regulated data processing. The updated language conditions DPA incorporation on two elements: explicit customer direction to access regulated data in a Professional Services Order, …
Regulatory exposure, obligation change, escalation trigger, board-ready language, and recommended action for legal and compliance teams.
Unlock the full institutional analysis — InsightConductAtlas provides verified policy intelligence sourced directly from platform documents. All analysis is intended to support, not replace, legal and compliance review. Record CA-C-004397.
AWS Bedrock's service terms were updated in an update detected on July 30, 2026, with several operational refinements. The terms …
AWS updated its Service Terms on July 18, 2026 with several operational clarifications and restrictions. For On-Demand Capacity Reservations, the …
AWS Bedrock updated its AWS Clean Rooms service terms on July 11, 2026, revising how content deletion and resource removal …
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
Get alerted when this policy changes again, including what changed and why it matters.