service aws-bedrockvendor Amazon Web Servicescategory Inference hosts & routers
No (Favourable)Not used to train AWS or third-party models; not shared with model providers.
Not used to train AWS or third-party models; not shared with model providers.
AWS and the third-party model providers will not use any inputs to or outputs from Amazon Bedrock to train Amazon Nova, Amazon Titan, or any third-party models.
Zero-operator-access model, except: OpenAI models retain classifier-flagged traffic 30 days; Claude Fable 5/5.1 retain ALL traffic 30 days.
For Anthropic Claude Fable 5 and Claude Fable 5.1, all traffic will be retained for up to 30 days for automated offline abuse detection.
Against the 21 tools that state a period (grey dots):
Full ZDR for OpenAI models is available on request via the AWS account team. Enterprise Frontier Safeguards customers get ZDR on Fable models only until Dec 31, 2026.
Eligible customers may request full ZDR through their AWS account team.
Retained data stays with AWS and lands in the destination region if cross-region inference is on. Flagged Fable traffic may get human review by AWS.
Classifier-flagged traffic will be subject to potential human review performed by AWS.
Stored at rest in the Region you use. Runtime endpoint exists in Asia Pacific (Singapore) ap-southeast-1. Malaysia (ap-southeast-5) appears for the control plane only.
Any customer content processed by Amazon Bedrock is encrypted and stored at rest in the AWS Region where you are using Amazon Bedrock.
Amazon Bedrock is included in the scope of the SOC 1, 2, 3 reports
Covered under the AWS BAA as a HIPAA-eligible service.
Health Insurance Portability and Accountability Act (HIPAA) eligibility
Bedrock is a fully managed AWS service. Open-weight models can be self-hosted elsewhere, but not through Bedrock.
Amazon Bedrock is a fully managed service
Spotted something wrong or out of date? Corrections are welcome; see how to send one. How statuses are assigned.