{"schema":"https://policywatcher.online/schemas/evidence-packet/v1","schemaVersion":"1.1.0","mappingVersion":"2026-07-29.1","changeId":"5a7ffcf2-bee3-4d3c-9e4f-6162558fe211","screeningDate":"2026-10-31T03:56:56.509Z","publicationGate":"published","company":{"id":"edaffd5f-94d3-483c-8ae1-b5ae272d33ec","name":"Amazon","slug":"amazon","industry":"E-Commerce"},"policy":{"id":"cc0c6f48-46d4-444e-912b-5ae25e9c83ca","name":"AWS Customer Agreement","type":"terms","jurisdiction":"Global","sourceUrl":"https://aws.amazon.com/agreement/"},"sourceConfidence":{"state":"verified-retrieval","lastCheckedAt":"2026-10-31T03:56:56.499Z","retrievalChannel":"direct","dataStatus":"Available","publicSnapshotEvidence":true,"limitation":"Source confidence describes recorded retrieval and publication state. It does not rate the provider policy or certify source authenticity."},"snapshots":{"old":{"version":1,"sha256":"67ad5f05c29aba9eac158d2fe0b446bb0e73c670b84c71ffeedc0cc18263ff2e","capturedAt":"2026-10-02T04:54:52.710Z"},"current":{"version":2,"sha256":"d614cdbda964cb1cd0513eede34725cdb87657bbead7157a3333bf1bc1f0962c","capturedAt":"2026-10-31T03:56:56.499Z"}},"analysisLineage":{"status":"verified","requestSha256":"c881d54bdf78814e7e3cb6f430bdebddc3ec3a790ab336b6acbf55d0c834ba39","responseSha256":"12c9ff93152f3ce24a0c3dca37005a548efdffb8bffcb35e99350f53a5f18544","model":"gemini-2.5-flash","promptVersion":"policy-analysis.v3-full-document","schemaVersion":"policy-analysis.schema.v2","inputCoverage":"complete","semanticCoverage":"not_measured","documents":{"old":{"sha256":"67ad5f05c29aba9eac158d2fe0b446bb0e73c670b84c71ffeedc0cc18263ff2e","charLength":61410,"byteLength":61737,"rangeUnit":"utf16-code-unit","includedRanges":[[0,61410]],"excludedRanges":[]},"new":{"sha256":"d614cdbda964cb1cd0513eede34725cdb87657bbead7157a3333bf1bc1f0962c","charLength":61576,"byteLength":61903,"rangeUnit":"utf16-code-unit","includedRanges":[[0,61576]],"excludedRanges":[]}},"boundary":"Hash verification links retained inputs and the application SDK request. It does not prove provider execution, semantic completeness or legal correctness."},"captureLineage":{"old":{"provenance":"unknown","sourceUrl":null,"requestedUrl":null,"finalUrl":null,"capturedAt":"2026-10-02T04:54:52.710Z","urlDisclosure":"credentials-query-fragment-redacted"},"current":{"provenance":"captured","sourceUrl":"https://aws.amazon.com/agreement/","requestedUrl":"https://aws.amazon.com/agreement/","finalUrl":"https://aws.amazon.com/agreement/","capturedAt":"2026-10-31T03:56:56.499Z","urlDisclosure":"credentials-query-fragment-redacted"}},"assessment":{"summary":"The updated AWS agreement clarifies payment terms, requiring timely invoice payment and authorizing automatic charges to your default payment method.","overallRisk":"Medium","overallScore":6,"previousPublicChange":null,"scoreDelta":null,"direction":"baseline","reasons":[{"icon":"warning","textEn":"Explicit authorization to charge default payment method.","textIt":"Autorizzazione esplicita ad addebitare il metodo di pagamento predefinito.","deltaScore":-1,"evidenceQuote":"you authorize us to charge your default payment method for the invoiced amount.","evidenceSide":"new","relatedKpi":"kpiRegulatoryCompliance","anchorStatus":"verified"},{"icon":"warning","textEn":"New mandatory payment of invoices by due date.","textIt":"Nuovo obbligo di pagamento delle fatture entro la data di scadenza.","deltaScore":-1,"evidenceQuote":"You must pay all invoices by the due date set forth on the invoice","evidenceSide":"new","relatedKpi":"kpiRegulatoryCompliance","anchorStatus":"verified"},{"icon":"info","textEn":"Increased clarity on AWS's payment enforcement mechanisms.","textIt":"Maggiore chiarezza sui meccanismi di applicazione dei pagamenti di AWS.","deltaScore":-1,"evidenceQuote":null,"evidenceSide":null,"relatedKpi":"kpiRegulatoryCompliance","anchorStatus":"not-recorded"}],"keyPoints":[{"textEn":"Explicitly authorizes AWS to charge your default payment method for invoiced amounts.","textIt":"Autorizza esplicitamente AWS ad addebitare il metodo di pagamento predefinito per gli importi fatturati.","sentiment":"negative"},{"textEn":"Mandates payment of all invoices by their specified due date.","textIt":"Impone il pagamento di tutte le fatture entro la data di scadenza specificata.","sentiment":"negative"},{"textEn":"Reinforces AWS's ability to automatically collect payments, streamlining the billing process.","textIt":"Rafforza la capacità di AWS di riscuotere automaticamente i pagamenti, semplificando il processo di fatturazione.","sentiment":"negative"}],"regionImpacts":[{"region":"EU","perspective":"Enterprise","riskLevel":"Medium","impactAnalysisEn":"Enterprises must ensure their internal financial controls align with the explicit payment due dates and auto-charge authorizations. This impacts financial operations and compliance with internal policies.","complianceNoteEn":null},{"region":"EU","perspective":"Individual","riskLevel":"Low","impactAnalysisEn":"The changes clarify financial obligations, which are standard contractual terms. While GDPR focuses on data, clear payment terms are generally beneficial for transparency.","complianceNoteEn":null},{"region":"Global","perspective":"Enterprise","riskLevel":"Medium","impactAnalysisEn":"Global enterprises using AWS should ensure their financial departments are aware of and comply with the reinforced payment terms to maintain service continuity. This is a standard operational adjustment.","complianceNoteEn":null},{"region":"Global","perspective":"Individual","riskLevel":"Low","impactAnalysisEn":"These contractual clarifications on payment are globally applicable and aim to standardize billing practices across regions. Users should review their payment settings.","complianceNoteEn":null},{"region":"US","perspective":"Enterprise","riskLevel":"Medium","impactAnalysisEn":"Businesses should update their accounts payable processes to reflect the explicit due dates and automatic charging. This reduces ambiguity in billing and ensures smooth financial operations.","complianceNoteEn":null},{"region":"US","perspective":"Individual","riskLevel":"Low","impactAnalysisEn":"The updated terms formalize payment expectations, which is a common practice in service agreements. No specific consumer protection laws are directly impacted beyond general contract law.","complianceNoteEn":null}],"explanationBoundary":"Score reasons and deltaScore values are stored AI-assisted screening outputs. Verified anchors confirm only that the quoted passage occurs in the named snapshot; they do not prove the interpretation."},"governance":{"boundary":"Mappings identify review relevance between recorded PolicyWatcher KPI fields and framework topics. They are not legal interpretations, conformity assessments, certifications or compliance verdicts.","mappings":[{"framework":{"id":"eu-ai-act","name":"Regulation (EU) 2024/1689 (EU AI Act)","shortName":"EU AI Act","referenceUrl":"https://eur-lex.europa.eu/eli/reg/2024/1689/oj","referenceVersion":"Official Journal text, 2024","reviewQuestion":"Which recorded policy statements may be relevant to transparency, automated decisions, data use and human oversight review?","kpiFields":["kpiAiTrainingOptOut","kpiAlgoTransparency","kpiAutomatedDecision","kpiAiBiasFairness"]},"status":"mapped","assessedCount":3,"mappedFieldCount":4,"evidence":[{"field":"kpiAlgoTransparency","label":"Algorithmic transparency","value":"Opaque"},{"field":"kpiAutomatedDecision","label":"Automated decisions","value":"Opaque"},{"field":"kpiAiBiasFairness","label":"AI bias and fairness","value":"Absent"}]},{"framework":{"id":"iso-42001","name":"ISO/IEC 42001:2023","shortName":"ISO/IEC 42001","referenceUrl":"https://www.iso.org/standard/42001","referenceVersion":"ISO/IEC 42001:2023 overview","reviewQuestion":"Which recorded policy statements may inform an AI management-system review of transparency, risk oversight and independent assurance?","kpiFields":["kpiAlgoTransparency","kpiAiBiasFairness","kpiIndependentAudit","kpiRegulatoryCompliance"]},"status":"mapped","assessedCount":4,"mappedFieldCount":4,"evidence":[{"field":"kpiAlgoTransparency","label":"Algorithmic transparency","value":"Opaque"},{"field":"kpiAiBiasFairness","label":"AI bias and fairness","value":"Absent"},{"field":"kpiIndependentAudit","label":"Independent audit","value":"Absent"},{"field":"kpiRegulatoryCompliance","label":"Regulatory compliance","value":"Partial"}]},{"framework":{"id":"nist-ai-rmf","name":"NIST AI Risk Management Framework 1.0","shortName":"NIST AI RMF","referenceUrl":"https://www.nist.gov/itl/ai-risk-management-framework","referenceVersion":"AI RMF 1.0; NIST revision in progress, checked 2026-07-29","reviewQuestion":"Which recorded policy statements may support Govern, Map, Measure or Manage review questions?","kpiFields":["kpiAlgoTransparency","kpiAutomatedDecision","kpiAiBiasFairness","kpiContentModeration"]},"status":"mapped","assessedCount":4,"mappedFieldCount":4,"evidence":[{"field":"kpiAlgoTransparency","label":"Algorithmic transparency","value":"Opaque"},{"field":"kpiAutomatedDecision","label":"Automated decisions","value":"Opaque"},{"field":"kpiAiBiasFairness","label":"AI bias and fairness","value":"Absent"},{"field":"kpiContentModeration","label":"Content moderation","value":"Opaque"}]},{"framework":{"id":"oecd-ai-principles","name":"OECD AI Principles","shortName":"OECD AI Principles","referenceUrl":"https://oecd.ai/en/ai-principles","referenceVersion":"OECD AI Principles, updated 2024","reviewQuestion":"Which recorded policy statements may be relevant to transparency, fairness, accountability and user agency review?","kpiFields":["kpiConsentMechanism","kpiAlgoTransparency","kpiAiBiasFairness","kpiIndependentAudit"]},"status":"mapped","assessedCount":4,"mappedFieldCount":4,"evidence":[{"field":"kpiConsentMechanism","label":"Consent mechanism","value":"Implicit"},{"field":"kpiAlgoTransparency","label":"Algorithmic transparency","value":"Opaque"},{"field":"kpiAiBiasFairness","label":"AI bias and fairness","value":"Absent"},{"field":"kpiIndependentAudit","label":"Independent audit","value":"Absent"}]}]},"humanReviewQuestions":["Does the original AWS Customer Agreement source still match the recorded public snapshot version 2?","Do the cited source passages support each displayed reason, KPI value and regional note?","Which advisory framework topics require specialist legal, risk or governance review for this use case?","Has a later public change superseded this packet before it is reused in a decision or publication?"],"methodologyUrl":"https://policywatcher.online/methodology/confidence","changeUrl":"https://policywatcher.online/change/5a7ffcf2-bee3-4d3c-9e4f-6162558fe211","boundary":"This packet records PolicyWatcher evidence and AI-assisted screening for one public change. It is not legal advice, a compliance verdict, a certification, or proof that the external source remains unchanged.","contentDigest":"6bfdc00e38241d7e34401b15ea7577a86e0180536a229a4736e16eb9263e1f73"}