Get the weekly research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean. No account.
AWS reserves the right to use customer interaction and usage data to improve its services, without specifying the categories of interaction data collected or the scope of improvement activities.
This analysis describes what AWS Bedrock's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision authorizes AWS to use customer usage and interaction data for service improvement, which may engage data minimization and purpose limitation principles under GDPR where the customer is processing personal data through their AWS interactions.
Interpretive note: The provision does not specify the categories of interaction data collected or the scope of service improvement activities, and its relationship to the AWS DPA's purpose limitation clauses requires review of the incorporated addendum.
The updated terms establish new restrictions on how AWS Capacity Reservations may be used. Specifically, customers purchasing On-Demand Capacity Reservations can no longer resell them to other parties, and AWS reserves the right to cancel the purchase or terminate running instances if the company suspects resale activity. For Capacity Blocks for ML, the grace period before instance termination increased from 30 minutes to 60 minutes for UltraServer instance types, allowing slightly more time to complete workloads. The Amazon Sidewalk qualification program was renamed and simplified, but the underlying security and operational requirements remain in effect.
View change record →The updated terms establish a formal framework for AWS Bedrock's free exploration services, clarifying the operational boundaries and responsibilities. AWS reserves the right to discontinue these services at any time without prior notice, meaning customers cannot rely on their continuation for production planning. Customers are solely responsible for testing, deploying, and maintaining any code, documents, or AI solutions AWS provides, including determining whether those solutions comply with applicable law. AWS retains the right to develop competing products based on content it creates during these engagements, though this does not override existing non-disclosure agreements. Customers are prohibited from requiring AWS personnel to sign additional terms as a condition of receiving free services, and any such documentation signed by AWS personnel is void.
View change record →The updated terms establish new data-sharing mechanisms for users of Anthropic models on Amazon Bedrock. Specifically, AWS now explicitly authorizes notification to Anthropic of metadata present in requests sent to certain Anthropic products (e.g., Claude Code, computer use features), enabling Anthropic to conduct product-level usage attribution. Additionally, the terms introduce AWS WAF AI traffic monetization, which permits AWS to facilitate payment transactions between content publishers and buyers by sharing pricing, payment, and configuration information with payment providers and facilitators; the updated terms clarify that AWS does not provide regulated financial services and is not a party to fund flows, and that users' interactions with payment providers are governed by separate terms between the user and those parties. Users employing these features should review what metadata may be embedded in their requests and understand their own obligations to payment providers.
View change record →The agreement authorizes AWS to use data about how customers use and interact with services for service improvement purposes, with the scope of data and specific improvement activities not defined within the terms themselves.
Cross-platform context
See how other platforms handle AWS Use of Customer Usage Data for Service Improvement and similar clauses.
Compare across platforms →Monitoring
AWS Bedrock has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
"We may use information about how you use and interact with the Services to improve those Services.Excerpt from AWS Bedrock's AWS Service Terms
REGULATORY LANDSCAPE: This provision may engage GDPR Article 5(1)(b) purpose limitation and Article 5(1)(c) data minimization principles where customer interactions with AWS services involve personal data. The provision must be read in conjunction with the AWS Data Processing Addendum incorporated in Section 1.14.1, which governs AWS's processing of Customer Data. The FTC holds general authority over data use practices for US-based services. The distinction between aggregated usage analytics and individualized customer data is partially addressed by Section 1.19, which states AWS will not use Individualized Usage Data or customer content to compete with customer products. GOVERNANCE EXPOSURE: Low to Medium. Section 1.19 provides a carve-out stating that AWS will not use Individualized Usage Data or customer content to compete with customer products and services, which partially limits the scope of this provision. However, the provision does not specify what categories of interaction data are collected or retained for service improvement, nor does it define the duration for which such data may be used. JURISDICTION FLAGS: EU and EEA customers should assess whether usage data collected under this provision constitutes personal data under GDPR and, if so, whether the DPA's scope and purpose limitation clauses adequately govern this use. UK and Swiss customers face analogous considerations under UK GDPR and FDPA respectively. CONTRACT AND VENDOR IMPLICATIONS: Customers whose data processing agreements with their own clients restrict secondary use of interaction data should assess whether this provision is compatible with those obligations. The DPA incorporated in Section 1.14.1 should be reviewed to determine whether it limits the scope of usage data that AWS may use under this provision. COMPLIANCE CONSIDERATIONS: Data protection officers should review the AWS DPA to determine the extent to which it constrains the service improvement data use described in this provision. Privacy notices provided to end users should accurately describe the processing of interaction data by AWS where that data constitutes personal data under applicable law.
Full institutional analysis
Regulatory citations, enforcement risk, and due diligence action items.
Monitor: same-day alerts on the platforms you choose. Analyst: full institutional analysis.
Compliance Governance Intelligence
Need to monitor specific governance provisions?
Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
This provision authorizes AWS to use customer usage and interaction data for service improvement, which may engage data minimization and purpose limitation principles under GDPR where the customer is processing personal data through their AWS interactions.
The agreement authorizes AWS to use data about how customers use and interact with services for service improvement purposes, with the scope of data and specific improvement activities not defined within the terms themselves.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by AWS Bedrock.