The terms authorize AWS to process customer inputs and outputs for the purposes of providing and maintaining Bedrock services, and additionally to use this content to improve Bedrock and its features unless the customer has exercised the available opt-out through account settings or documentation-specified instructions.
This analysis describes what AWS Bedrock's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes that service improvement use of customer content is the default state unless an opt-out is actively exercised; customers who do not take affirmative action to opt out operate under terms that permit use of their inputs and outputs for feature improvement purposes.
Interpretive note: The precise scope of content categories subject to service improvement use and the full technical mechanism for the opt-out require review of the Bedrock documentation; the truncated source document does not provide complete detail on opt-out procedures.
The updated terms establish that customers operating Amazon RDS databases on end-of-life software versions are now required to upgrade to supported versions. The agreement authorizes AWS to scan extension code used with Trusted Language Extensions for security and performance purposes, and establishes that extension code constitutes customer content. AWS disclaims responsibility for service failures caused by extensions or end-of-life database software. If a customer does not upgrade before an engine reaches end of life, AWS may snapshot the customer's data and delete the instance or cluster running the unsupported software, after providing prior notice of the engine end-of-life date.
View change record →The updated terms establish new operational requirements for any organization using Amazon Connect Talent to make or inform employment decisions. Customers must now obtain legally adequate privacy notices and consents from job applicants before their data is processed by the service. The terms require customers to review all AI output before making hiring decisions, implement processes for applicants to request information about the AI's role in decisions, and ensure their use of the tool complies with applicable labor, anti-discrimination, disability, data privacy, AI, wiretap, recordkeeping, and biometrics laws. Customers can configure an AI services opt-out policy through AWS Organizations to prevent their data from being used to train or improve AWS AI technologies.
View change record →The updated terms establish that Reserved Cache Nodes and Amazon DynamoDB Reserved Capacity purchases are noncancellable obligations, and you will owe the full amount charged for the duration of the term you selected, even if the AWS agreement is terminated. For Kiro Free Tier users, the revised policy authorizes AWS to store your inputs for up to 60 days for purposes of detecting agreement violations and improving detection capabilities. You can review your existing reserved capacity commitments and their terms at any time, but the updated language does not provide an opt-out mechanism for this noncancellation obligation.
View change record →This addition explicitly permits AWS to use customer inputs/outputs for service improvement while providing an opt-out mechanism, addressing a significant customer concern about data usage and transparency.
View full change record →Under this clause, customer inputs to and outputs from Bedrock may be used by AWS for service improvement purposes by default. The agreement provides an opt-out mechanism accessible through Bedrock documentation and account settings for customers who do not wish their content used in this manner.
How other platforms handle this
If you are a California resident, you have the right to: Know what personal information is being collected about you; Know whether your personal information is sold or disclosed and to whom; Say no to the sale of personal information; Access your personal information; Request deletion of your person...
Redfin may offer interactive features such as chat services, forums, and social media pages. We may collect the information you submit or make available through these features. Any content you provide on the public sections of these channels will be considered "public" and will not be subject to the...
We process the information you share with us when you create your profile or send messages. This includes photos, videos, messages, and other content you share on the platform. We may use this content to improve our services, ensure safety, and comply with legal obligations.
Monitoring
AWS Bedrock has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
"AWS may use your inputs to and outputs from Amazon Bedrock to provide and maintain the services. You may opt out of having your inputs and outputs used to improve Amazon Bedrock and Amazon Bedrock features by following the opt-out instructions available in the Amazon Bedrock documentation.— Excerpt from AWS Bedrock's AWS Service Terms
(1) REGULATORY LANDSCAPE: This opt-out default structure may require evaluation under GDPR where customer content processed for service improvement constitutes personal data; GDPR's purpose limitation and consent requirements may constrain the use of personal data for service improvement without explicit legal basis beyond the service contract. The California Consumer Privacy Act's requirements regarding service provider use restrictions are also relevant where the improvement use extends beyond the original service provision purpose. (2) GOVERNANCE EXPOSURE: Medium. The default-on structure for service improvement use means customers who do not actively review and exercise the opt-out are consenting by inaction to this use; enterprise procurement processes should include opt-out activation as a standard Bedrock onboarding step. (3) JURISDICTION FLAGS: EU customers have the highest exposure under GDPR Article 6 legitimate interest or contract performance bases for processing; legal teams should assess whether service improvement use is covered by the existing AWS Data Processing Addendum or requires a separate legal basis assessment. CCPA-covered businesses should confirm whether service improvement use is consistent with service provider restrictions. (4) CONTRACT AND VENDOR IMPLICATIONS: The opt-out right should be documented in customer data governance records and activated where organizational policy restricts use of customer content for vendor product improvement. Vendor management processes should include verification that the opt-out has been activated for Bedrock accounts processing sensitive or confidential data. (5) COMPLIANCE CONSIDERATIONS: Data protection teams should review the Bedrock opt-out process and confirm activation status for all organizational AWS accounts using Bedrock. The service improvement use should be assessed as part of GDPR Records of Processing Activities documentation. Where Bedrock processes data subject to sector-specific confidentiality requirements, the opt-out should be treated as a mandatory control rather than an optional preference.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Monitor: 25 platforms + same-day alerts. No credit card required.
Compliance Governance Intelligence
Need to monitor specific governance provisions?
Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
This provision establishes that service improvement use of customer content is the default state unless an opt-out is actively exercised; customers who do not take affirmative action to opt out operate under terms that permit use of their inputs and outputs for feature improvement purposes.
Under this clause, customer inputs to and outputs from Bedrock may be used by AWS for service improvement purposes by default. The agreement provides an opt-out mechanism accessible through Bedrock documentation and account settings for customers who do not wish their content used in this manner.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by AWS Bedrock.