Vendors · Clouds · AWS

AWS says Bedrock inputs train no Nova, Titan or third-party model

Amazon Bedrock. Each line below quotes AWS’s own pages as kept on 3 Nov 2026.

AWS’s questionnaire: nine buyer questions, each answered from these pages.

AWS’s record as an AI bill of materials: CycloneDX · SPDX. Not signed.

What the pages say

each value, then the words it is read from
Training on business and API data
No, for Amazon Nova, Amazon Titan and third-party models

No, AWS and the third-party model providers will not use any inputs to or outputs from Amazon Bedrock to train Amazon Nova, Amazon Titan, or any third-party models.

Answer to the FAQ “Will AWS and third-party model providers use customer inputs to or outputs from Amazon Bedrock to train Amazon Nova, Amazon Titan or any third-party models?” Amazon Bedrock FAQs, kept 24 Oct 2026 · sha256 b48072e9d736

How long API data is kept
Set by the model and the account's retention mode

Default means the data retention policy of the model applies. There is no change to previous model retention behavior; if ZDR applied previously, then ZDR still applies. Actual retention depends on the model — consult the model's terms for specifics.

Data retention, kept 24 Oct 2026 · sha256 a7a8c4c5f2f7

Option to keep no data
Zero data retention mode, for models that allow it; for other models, eligibility is evaluated per account and model

Zero data retention. No request or response data is written to durable storage by AWS or shared with the model provider.

In the “Data retention modes” table, the behavior of mode “none”. Under “Zero data retention (ZDR) access” the page says: “Some models require data retention for safety and abuse-prevention purposes.” and “ZDR access is evaluated on a per-account, per-model basis in coordination with the model provider.” Data retention, kept 24 Oct 2026 · sha256 a7a8c4c5f2f7

Where data is processed and stored
Stored at rest in the AWS Region in use

Any customer content processed by Amazon Bedrock is encrypted and stored at rest in the AWS Region where you are using Amazon Bedrock.

Amazon Bedrock FAQs, kept 24 Oct 2026 · sha256 b48072e9d736

Sub-processors
A published list, by Region and service

Sub-processors relevant to an individual customer will depend on the AWS Region the customer selects and the particular AWS services that the customer uses.

AWS Sub-processors, kept 26 Oct 2026 · sha256 f2060d7e4384

Certifications and audits
In scope for FedRAMP Moderate, SOC, ISO and HIPAA eligibility

Amazon Bedrock is in scope for common compliance standards such as Fedramp Moderate, Service and Organization Control (SOC), International Organization for Standardization (ISO), Health Insurance Portability and Accountability Act (HIPAA) eligibility, and customers can use Bedrock in compliance with the General Data Protection Regulation (GDPR).

The same answer lists “ISO 9001, ISO 27001, ISO 27017, ISO 27018, ISO 27701, ISO 22301, and ISO 20000”. Amazon Bedrock FAQs, kept 24 Oct 2026 · sha256 b48072e9d736

Data processing agreement
The AWS Data Processing Addendum, under which AWS engages sub-processors

This page provides information about the sub-processors that AWS has engaged in accordance with the AWS Data Processing Addendum (AWS DPA) to provide processing activities on Customer Data (as defined in the AWS DPA) on behalf of customers.

AWS Sub-processors, kept 26 Oct 2026 · sha256 f2060d7e4384

Published usage limits
Default quotas on token use, and on requests for embedding models; an account’s own quotas can be lower

Model inference in Amazon Bedrock is controlled by quotas on token usage.

The page says the quotas that apply to an account “might be lower than the default values listed in the Amazon Bedrock service quotas.” It also says: “Quota increases aren't granted automatically.” Quotas for Amazon Bedrock, kept 3 Nov 2026 · sha256 9fb23c7957ae

Pages kept

each copy is held with the sha256 of its bytes as served
Each kept page of AWS, its own date line, and every check
Page The page’s date Newest copy Checks
Amazon Bedrock FAQsTraining on Bedrock inputs and outputs none printed 24 Oct 2026, 638 KBsha256 b48072e9d7367e42810904e0a76cd855f3583e22f714aa924bdf453312e751ce
  • 24 Oct 2026: kept
  • 26 Oct 2026: same text as 24 Oct 2026
Data retentionRetention modes and zero data retention none printed 24 Oct 2026, 43 KBsha256 a7a8c4c5f2f7d3fbcd9a722db22b01822e09ddbfc7ee27aae794c3e3a757d163
  • 24 Oct 2026: kept
  • 26 Oct 2026: same text as 24 Oct 2026
Amazon Bedrock abuse detectionRetention for abuse detection, by model none printed 24 Oct 2026, 16 KBsha256 ed4dfb6b08aaaad4bbd9091c6d79b82cc66e4063c8318a6c21ac1a0726d451fe
  • 24 Oct 2026: kept
  • 26 Oct 2026: same text as 24 Oct 2026
AWS Sub-processorsSub-processors under the AWS Data Processing Addendum Last Updated: July 28, 2026 26 Oct 2026, 375 KBsha256 f2060d7e438446b0ed1f7c951c195c9268e686dff08f34a64b33336d68bf2295
  • 26 Oct 2026: kept
Quotas for Amazon BedrockDefault quotas on model inference none printed 3 Nov 2026, 14 KBsha256 9fb23c7957aed30b8d8c5cc8144d8240c1808e0dff9c0ef7b6c9f6d4c75d06ad
  • 3 Nov 2026: kept

No kept page of AWS has changed

first kept on 24 Oct 2026