Policy Details & Nuances
AWS Bedrock does not use customer data (inputs, outputs, or custom model weights) to train or improve any base models by default. Other AWS AI services may collect data by default but allow account-level opt-out.
Opt-out is the default for Bedrock (no action needed). For other AWS AI services, opt out via AWS Organizations by attaching an AI services opt-out policy.
Retention Period
No conversational data is stored by AWS for Bedrock inference. Customer data remains within their selected AWS region VPC.
Deletion on Request
YesYou have full ownership and control over your data. It can be deleted instantly through standard AWS console or API commands.
AWS does not share customer prompts or outputs with model providers (such as Anthropic, Meta, or Cohere) or any other third parties.
There is no human review of prompts or responses processed through Amazon Bedrock.
Context & Variations
Compliance is managed at the AWS region level (e.g., EU-West-1 for GDPR alignment, US-East-1 for US compliance).
AWS is a cloud developer platform restricted to users 18 years or older.
Bedrock is an enterprise developer service with comprehensive B2B compliance (HIPAA, SOC, GDPR), customer-managed encryption keys (KMS), and VPC connectivity.