This analysis describes what AWS's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
How other platforms handle this
We follow the Payment Card Industry Data Security Standard (PCI DSS) when handling credit card data.
We use encryption to keep your data private while in transit
We implement reasonable technical and organizational safeguards to protect the information we hold, and we require our service providers to do the same.
"We follow the Payment Card Industry Data Security Standard (PCI DSS) when handling credit card data.Excerpt from AWS's Privacy Notice
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
The clause states: “We follow the Payment Card Industry Data Security Standard (PCI DSS) when handling credit card data.”
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by AWS.