Customers select the AWS regions where their content is stored and consent to storage and transfer in those regions. AWS states it will not access, use, or disclose customer content except as required to provide services or comply with law or governmental orders, and will not move content outside selected regions except as legally required. AWS commits to notifying customers of legal requirements or orders unless prohibited by law.
This analysis describes what AWS's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
Section 1.4 establishes customer control over content location by region and contractually limits AWS's authority to access or move content outside those regions. The notification commitment for governmental access requests, qualified by legal prohibition, is operationally significant for customers with data residency and compliance obligations under GDPR, CCPA, and sector-specific frameworks.
Under Section 1.4, the agreement states that AWS will not access, use, disclose, or relocate customer content except as required to provide services or comply with law, and will provide notice of governmental access requests unless legally prohibited from doing so. Customers' account information, as distinct from customer content, is governed by the AWS Privacy Notice rather than this section.
Cross-platform context
See how other platforms handle Data Privacy and Content Storage Controls and similar clauses.
Compare across platforms →"You may specify the AWS regions in which Your Content will be stored. You consent to the storage of Your Content in, and transfer of Your Content into, the AWS regions you select. We will not access or use Your Content except as necessary to maintain or provide the Services, or as necessary to comply with the law or a binding order of a governmental body. We will not (a) disclose Your Content to any government or third party or (b) move Your Content from the AWS regions selected by you; except in each case as necessary to comply with the law or a binding order of a governmental body. Unless it would violate the law or a binding order of a governmental body, we will give you notice of any legal requirement or order referred to in this Section 1.4.Excerpt from AWS's Customer Agreement
1.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
Section 1.4 establishes customer control over content location by region and contractually limits AWS's authority to access or move content outside those regions. The notification commitment for governmental access requests, qualified by legal prohibition, is operationally significant for customers with data residency and compliance obligations under GDPR, CCPA, and sector-specific frameworks.
Under Section 1.4, the agreement states that AWS will not access, use, disclose, or relocate customer content except as required to provide services or comply with law, and will provide notice of governmental access requests unless legally prohibited from doing so. Customers' account information, as distinct from customer content, is governed by the AWS Privacy Notice rather than this section.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by AWS.