This analysis describes what AWS Bedrock's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This clause establishes a hard boundary on AWS Bedrock personnel access to customer Content, which is a significant security and confidentiality assurance for workloads running on Nitro System EC2 instances.
The updated terms establish a formal framework for AWS Bedrock's free exploration services, clarifying the operational boundaries and responsibilities. AWS reserves the right to discontinue these services at any time without prior notice, meaning customers cannot rely on their continuation for production planning. Customers are solely responsible for testing, deploying, and maintaining any code, documents, or AI solutions AWS provides, including determining whether those solutions comply with applicable law. AWS retains the right to develop competing products based on content it creates during these engagements, though this does not override existing non-disclosure agreements. Customers are prohibited from requiring AWS personnel to sign additional terms as a condition of receiving free services, and any such documentation signed by AWS personnel is void.
View change record →The updated terms establish new data-sharing mechanisms for users of Anthropic models on Amazon Bedrock. Specifically, AWS now explicitly authorizes notification to Anthropic of metadata present in requests sent to certain Anthropic products (e.g., Claude Code, computer use features), enabling Anthropic to conduct product-level usage attribution. Additionally, the terms introduce AWS WAF AI traffic monetization, which permits AWS to facilitate payment transactions between content publishers and buyers by sharing pricing, payment, and configuration information with payment providers and facilitators; the updated terms clarify that AWS does not provide regulated financial services and is not a party to fund flows, and that users' interactions with payment providers are governed by separate terms between the user and those parties. Users employing these features should review what metadata may be embedded in their requests and understand their own obligations to payment providers.
View change record →The updated terms now require users of certain Anthropic models to provide explicit consent for AWS to transfer their content and associated metadata to Anthropic for abuse detection and processing. Previously, abuse detection was described as an AWS-only internal function. The revised terms clarify that Bedrock stores service inputs and outputs for up to 30 days on identified models solely for abuse detection purposes. Users of Anthropic models can provide this consent through the opt-in mechanism described in the applicable service documentation, as stated in section 50.12.2.2 of the updated terms.
View change record →Customers running workloads on AWS Nitro System EC2 instances can rely on the assurance that AWS Bedrock personnel cannot access their Content on those instances.
How other platforms handle this
authorize ZipRecruiter to connect your account to the account of a "Connected Site" (e.g., Google, LinkedIn, Monster, Facebook or Twitter), we may be able to access information you have provided to the Connected Site...
Category B: Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e))... bank account number, credit card number, debit card number, or any other financial information... Collected: Yes.
telemetry information collected includes: (i) microservice settings, (ii) usage data and (iii) hardware environment.
Monitoring
AWS Bedrock has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
"AWS personnel do not have access to Your Content on AWS Nitro System EC2 instances. There are no technical means or APIs available to AWS personnel to read, copy, extract, modify, or otherwise access Your Content on an AWS Nitro System EC2 instance or encrypted-EBS volume...— Excerpt from AWS Bedrock's AWS Service Terms
Netflix updated its Privacy Statement on April 18, 2026, disclosing voice recording collection and expanded household ad profiling for the first time.
Google's Privacy Policy covers Search, Gmail, YouTube, Maps, and every site running Google Analytics. Here is what it actually authorizes.
Compliance Governance Intelligence
Need to monitor specific governance provisions?
Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
This clause establishes a hard boundary on AWS Bedrock personnel access to customer Content, which is a significant security and confidentiality assurance for workloads running on Nitro System EC2 instances.
Customers running workloads on AWS Nitro System EC2 instances can rely on the assurance that AWS Bedrock personnel cannot access their Content on those instances.
ConductAtlas has identified this type of provision across 299 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by AWS Bedrock.