Vendors · Questionnaire · AWS
Read AWS’s own answers to nine buyer questions
Amazon Bedrock. Each answer quotes AWS’s own page or feed as kept on the day shown. Each question cites the NIST text that asks it. The answers are not a score and not a verdict.
Q1
Does the vendor train its models on business and API customers’ data?
NIST AI 600-1, action GV-6.2-007: “… contribute to unauthorized data collection by vendors or third-parties (e.g., secondary data use) …”
NIST AI RMF 1.0, MEASURE 2.10
No, for Amazon Nova, Amazon Titan and third-party models
No, AWS and the third-party model providers will not use any inputs to or outputs from Amazon Bedrock to train Amazon Nova, Amazon Titan, or any third-party models.
Answer to the FAQ “Will AWS and third-party model providers use customer inputs to or outputs from Amazon Bedrock to train Amazon Nova, Amazon Titan or any third-party models?” Amazon Bedrock FAQs, kept 24 Oct 2026 · sha256 b48072e9d736
Q2
Does the vendor train its models on free and consumer use of its products?
NIST AI 600-1, action GV-6.2-007: “… contribute to unauthorized data collection by vendors or third-parties (e.g., secondary data use) …”
NIST AI RMF 1.0, MEASURE 2.10
Not read
The vendor record does not read this point for AWS.
Q3
How long does the vendor keep the data that customers send?
NIST AI 600-1, action GV-6.1-004: “Draft and maintain well-defined contracts and service level agreements (SLAs) that specify content ownership, usage rights, quality standards, security requirements, and content provenance expectations for GAI systems.”
NIST AI RMF 1.0, MEASURE 2.10
Set by the model and the account's retention mode
Default means the data retention policy of the model applies. There is no change to previous model retention behavior; if ZDR applied previously, then ZDR still applies. Actual retention depends on the model — consult the model's terms for specifics.
Data retention, kept 24 Oct 2026 · sha256 a7a8c4c5f2f7
Q4
Can a customer have the vendor keep none of its data?
NIST AI 600-1, action GV-6.1-004: “Draft and maintain well-defined contracts and service level agreements (SLAs) that specify content ownership, usage rights, quality standards, security requirements, and content provenance expectations for GAI systems.”
NIST AI RMF 1.0, MEASURE 2.10
Zero data retention mode, for models that allow it; for other models, eligibility is evaluated per account and model
Zero data retention. No request or response data is written to durable storage by AWS or shared with the model provider.
In the “Data retention modes” table, the behavior of mode “none”. Under “Zero data retention (ZDR) access” the page says: “Some models require data retention for safety and abuse-prevention purposes.” and “ZDR access is evaluated on a per-account, per-model basis in coordination with the model provider.” Data retention, kept 24 Oct 2026 · sha256 a7a8c4c5f2f7
Q5
Where does the vendor process and store customer data?
NIST AI 600-1, action GV-6.1-009: “Update and integrate due diligence processes for GAI acquisition and procurement vendor assessments to include intellectual property, data privacy …”
NIST AI RMF 1.0, GOVERN 6.1
Stored at rest in the AWS Region in use
Any customer content processed by Amazon Bedrock is encrypted and stored at rest in the AWS Region where you are using Amazon Bedrock.
Amazon Bedrock FAQs, kept 24 Oct 2026 · sha256 b48072e9d736
Q6
Which other companies process customer data for the vendor?
NIST AI 600-1, action GV-6.1-007: “Inventory all third-party entities with access to organizational content and establish approved GAI technology and service provider lists.”
NIST AI RMF 1.0, GOVERN 6.1; NIST AI RMF 1.0, MANAGE 3.1
A published list, by Region and service
Sub-processors relevant to an individual customer will depend on the AWS Region the customer selects and the particular AWS services that the customer uses.
AWS Sub-processors, kept 26 Oct 2026 · sha256 f2060d7e4384
Q7
Which independent audits or certifications does the vendor name?
NIST AI 600-1, Appendix A.1.3: “statement on standards for attestation engagement (SSAE) reports to help with third-party transparency and risk management for GAI systems”
NIST AI RMF 1.0, GOVERN 6.1
In scope for FedRAMP Moderate, SOC, ISO and HIPAA eligibility
Amazon Bedrock is in scope for common compliance standards such as Fedramp Moderate, Service and Organization Control (SOC), International Organization for Standardization (ISO), Health Insurance Portability and Accountability Act (HIPAA) eligibility, and customers can use Bedrock in compliance with the General Data Protection Regulation (GDPR).
The same answer lists “ISO 9001, ISO 27001, ISO 27017, ISO 27018, ISO 27701, ISO 22301, and ISO 20000”. Amazon Bedrock FAQs, kept 24 Oct 2026 · sha256 b48072e9d736
Q8
Does the vendor publish a history of its service incidents?
NIST AI 600-1, action GV-6.2-007: “Service Level Agreements (SLAs) in vendor contracts that address incident response, response times, and availability of critical support.”
NIST AI RMF 1.0, GOVERN 6.2
No answer kept
AWS links one feed for each service in each region, not a history for Bedrock as a whole. The page.
Q9
Does the vendor publish the dates on which it retires its models?
NIST AI 600-1, action GV-6.2-007: “Review vendor contracts and avoid arbitrary or capricious termination of critical GAI technologies or vendor services …”
NIST AI RMF 1.0, GOVERN 6.2
Yes: Amazon Bedrock (“Model lifecycle (Legacy)”), with 48 dated retirements kept
Amazon Bedrock, “Model lifecycle (Legacy)”, kept 26 Oct 2026 · sha256 288d35192d09. The record.
- AWS, Amazon Bedrock FAQs, kept 24 Oct 2026.
- AWS, Data retention, kept 24 Oct 2026.
- AWS, AWS Sub-processors, kept 26 Oct 2026.
- AWS, Model lifecycle (Legacy), kept 26 Oct 2026.
- NIST, NIST AI 600-1, 2024-07. Republished courtesy of the National Institute of Standards and Technology.