This analysis describes what AWS Bedrock's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This clause establishes a hard boundary on AWS Bedrock personnel access to customer Content, which is a significant security and confidentiality assurance for workloads running on Nitro System EC2 instances.
The updated terms establish a new project-based account structure for new AWS sign-ups, requiring automatic disclosure of billing and project activity to team members and granting AWS authority to suspend or permanently close accounts if spend limits are exceeded. Project owners become responsible for the conduct of invited team members and the content they contribute, which becomes the project owner's property under a nonexclusive license shared with all project members. The terms also introduce spend limit controls that allow AWS to suspend access immediately and permanently close accounts if spending thresholds are repeatedly exceeded or if AWS determines the use is fraudulent or abusive. You can configure AI services opt-out policies through AWS Settings.
View change record →The updated terms establish that when AWS Bedrock customers direct AWS to access regulated data (such as personal data, protected health information, or controlled unclassified information) in a Professional Services Order, and applicable data protection laws apply, the AWS Professional Services Supplementary Data Processing Addendum is automatically incorporated. This means customers engaging AWS professional services with regulated data now have formal data processing protections and obligations defined in the DPA, rather than relying solely on the general prohibition against disclosing regulated data. The automatic incorporation clarifies the legal framework governing how AWS processes such data.
View change record →The updated terms establish explicit restrictions on how AWS IoT SiteWise Scenario Discovery may be used. The agreement now states that this service is not designed for real-time vehicle control, transmission of operational commands to vehicles, direct vehicle system integration, or regulatory submissions. Users are prohibited from relying on data collected or curated through this service as the basis for determining vehicle safety, compliance, or fitness for deployment. AWS is not responsible for any such uses. These restrictions clarify the intended scope of the service and establish that users bear full responsibility for any safety-critical applications.
View change record →Customers running workloads on AWS Nitro System EC2 instances can rely on the assurance that AWS Bedrock personnel cannot access their Content on those instances.
How other platforms handle this
when you use Patreon to listen to a podcast that is hosted by a third-party hosting platform, your device connects directly to the third-party hosting platform to provide you with the requested material. When this happens, some of your personal data, like your IP address, browser and/or device type,...
When you create User Content, we may upload or import it to the Platform before you save or post the User Content (also known as pre-uploading).
We collect content from your use of the Services, which may include any information about you that you choose to upload to, store in, or otherwise provide to our Services.
"AWS personnel do not have access to Your Content on AWS Nitro System EC2 instances. There are no technical means or APIs available to AWS personnel to read, copy, extract, modify, or otherwise access Your Content on an AWS Nitro System EC2 instance or encrypted-EBS volume...Excerpt from AWS Bedrock's AWS Service Terms
Netflix updated its Privacy Statement on April 18, 2026, disclosing voice recording collection and expanded household ad profiling for the first time.
Google's Privacy Policy covers Search, Gmail, YouTube, Maps, and every site running Google Analytics. Here is what it actually authorizes.
Get the weekly coverage letter
Companies change their terms without announcing it. We capture governance documents, compare each new version with the last, and publish what changed, with the source text behind it. One email a week on what we found and what we could not reach.
This clause establishes a hard boundary on AWS Bedrock personnel access to customer Content, which is a significant security and confidentiality assurance for workloads running on Nitro System EC2 instances.
Customers running workloads on AWS Nitro System EC2 instances can rely on the assurance that AWS Bedrock personnel cannot access their Content on those instances.
ConductAtlas has identified this type of provision across 285 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by AWS Bedrock.