{"schema":"https://policywatcher.online/schemas/evidence-packet/v1","schemaVersion":"1.1.0","mappingVersion":"2026-07-29.1","changeId":"5fb011f8-bcba-43c2-917f-f3844bd6448e","screeningDate":"2026-10-31T16:40:34.167Z","publicationGate":"published","company":{"id":"edaffd5f-94d3-483c-8ae1-b5ae272d33ec","name":"Amazon","slug":"amazon","industry":"E-Commerce"},"policy":{"id":"c51f6ead-7964-41b8-92cb-c4434ad524d5","name":"AWS Service Terms","type":"terms","jurisdiction":"Global","sourceUrl":"https://aws.amazon.com/serviceterms/"},"sourceConfidence":{"state":"verified-retrieval","lastCheckedAt":"2026-10-31T16:40:34.138Z","retrievalChannel":"direct","dataStatus":"Available","publicSnapshotEvidence":true,"limitation":"Source confidence describes recorded retrieval and publication state. It does not rate the provider policy or certify source authenticity."},"snapshots":{"old":{"version":3,"sha256":"a33b28182df8ac8cf2e427695834578ab693eb63e489be9daa69dac202a2fd8c","capturedAt":"2026-10-28T13:38:49.450Z"},"current":{"version":4,"sha256":"28473c5a7d7f00644663ca883f818372d3d6553ba79ec8c9a1c312ddcfe43c6d","capturedAt":"2026-10-31T16:40:34.138Z"}},"analysisLineage":{"status":"verified","requestSha256":"b8e2932e79acd4a04af124346e2f74186d57ce0e37d5f4b6c33f0c3ca961154b","responseSha256":"048bc96afc3007e36ff86b682bdcbe7fe77795b6ccdddacf5d030cfd7b16db15","model":"gemini-3.5-flash-lite","promptVersion":"policy-analysis.v3-full-document","schemaVersion":"policy-analysis.schema.v2","inputCoverage":"complete","semanticCoverage":"not_measured","documents":{"old":{"sha256":"a33b28182df8ac8cf2e427695834578ab693eb63e489be9daa69dac202a2fd8c","charLength":291572,"byteLength":292868,"rangeUnit":"utf16-code-unit","includedRanges":[[0,291572]],"excludedRanges":[]},"new":{"sha256":"28473c5a7d7f00644663ca883f818372d3d6553ba79ec8c9a1c312ddcfe43c6d","charLength":292820,"byteLength":294116,"rangeUnit":"utf16-code-unit","includedRanges":[[0,292820]],"excludedRanges":[]}},"boundary":"Hash verification links retained inputs and the application SDK request. It does not prove provider execution, semantic completeness or legal correctness."},"captureLineage":{"old":{"provenance":"captured","sourceUrl":"https://aws.amazon.com/serviceterms/","requestedUrl":"https://aws.amazon.com/serviceterms/","finalUrl":"https://aws.amazon.com/service-terms/","capturedAt":"2026-10-28T13:38:49.450Z","urlDisclosure":"credentials-query-fragment-redacted"},"current":{"provenance":"captured","sourceUrl":"https://aws.amazon.com/serviceterms/","requestedUrl":"https://aws.amazon.com/serviceterms/","finalUrl":"https://aws.amazon.com/service-terms/","capturedAt":"2026-10-31T16:40:34.138Z","urlDisclosure":"credentials-query-fragment-redacted"}},"assessment":{"summary":"AWS added strict non-payment termination terms and restricted the use of EC2 Capacity Manager data.","overallRisk":"Medium","overallScore":4,"previousPublicChange":{"id":"ffa8f31e-15ff-4c58-b19c-4b29c2e41c6b","overallRisk":"High","overallScore":7,"screeningDate":"2026-10-28T13:38:49.475Z"},"scoreDelta":-3,"direction":"lower","reasons":[{"icon":"warning","textEn":"New non-payment termination clause allows AWS to close accounts and terminate resources.","textIt":"La nuova clausola di risoluzione per mancato pagamento consente ad AWS di chiudere gli account.","deltaScore":2,"evidenceQuote":"If you fail to pay amounts owed when due under your Agreement, AWS has the right to limit resource usage, suspend your account(s), terminate active resources, and close your account(s).","evidenceSide":"new","relatedKpi":"kpiDataRetention","anchorStatus":"verified"},{"icon":"alert","textEn":"Strict prohibitions on disclosing or competing with EC2 Capacity Manager Data.","textIt":"Rigorosi divieti di divulgare o competere con i dati di EC2 Capacity Manager.","deltaScore":2,"evidenceQuote":"You may use EC2 Capacity Manager Data solely for your internal capacity planning and workload management purposes.","evidenceSide":"new","relatedKpi":"kpiDataCollection","anchorStatus":"verified"},{"icon":"info","textEn":"Reference to external Non-Payment and Service Continuity Terms for procedures.","textIt":"Riferimento ai Termini di Continuità del Servizio e Mancato Pagamento esterni.","deltaScore":1,"evidenceQuote":"These rights and steps you can take to prepare, including backing up Your Content, are described in the AWS Non-Payment and Service Continuity Terms (or any successor URL).","evidenceSide":"new","relatedKpi":null,"anchorStatus":"verified"}],"keyPoints":[{"textEn":"Added clear non-payment and service continuity rules allowing account suspension.","textIt":"Aggiunte chiare regole di continuità del servizio e mancato pagamento che consentono la sospensione.","sentiment":"negative"},{"textEn":"Restricted EC2 Capacity Manager Data strictly to internal capacity planning.","textIt":"Limitati i dati di EC2 Capacity Manager esclusivamente alla pianificazione interna.","sentiment":"neutral"},{"textEn":"Prohibited using capacity manager data to build competing products.","textIt":"Vietato l'uso dei dati del capacity manager per creare prodotti concorrenti.","sentiment":"negative"}],"regionImpacts":[{"region":"EU","perspective":"Enterprise","riskLevel":"Medium","impactAnalysisEn":"Enterprise customers must align with new non-payment suspension workflows, ensuring financial compliance to prevent abrupt operational halts under EU data acts.","complianceNoteEn":"EU Data Act"},{"region":"EU","perspective":"Individual","riskLevel":"Low","impactAnalysisEn":"European individual users benefit from GDPR protections regarding data deletion upon account closure, though non-payment rules apply strictly.","complianceNoteEn":"GDPR Art 17"},{"region":"Global","perspective":"Enterprise","riskLevel":"Medium","impactAnalysisEn":"Global enterprises must update internal governance frameworks to account for AWS's explicit authority to terminate active resources upon payment default.","complianceNoteEn":null},{"region":"Global","perspective":"Individual","riskLevel":"Low","impactAnalysisEn":"Global individual users are subject to standardized account closure terms for unpaid balances without regional exceptions.","complianceNoteEn":null},{"region":"US","perspective":"Enterprise","riskLevel":"Medium","impactAnalysisEn":"US corporations utilizing EC2 Capacity Manager must restrict metric usage strictly internally, mitigating intellectual property and competitive compliance risks.","complianceNoteEn":"CCPA"},{"region":"US","perspective":"Individual","riskLevel":"Low","impactAnalysisEn":"US individual developers face clear resource limits and termination conditions if accounts fall into arrears, with minimal state-level overrides.","complianceNoteEn":null}],"explanationBoundary":"Score reasons and deltaScore values are stored AI-assisted screening outputs. Verified anchors confirm only that the quoted passage occurs in the named snapshot; they do not prove the interpretation."},"governance":{"boundary":"Mappings identify review relevance between recorded PolicyWatcher KPI fields and framework topics. They are not legal interpretations, conformity assessments, certifications or compliance verdicts.","mappings":[{"framework":{"id":"eu-ai-act","name":"Regulation (EU) 2024/1689 (EU AI Act)","shortName":"EU AI Act","referenceUrl":"https://eur-lex.europa.eu/eli/reg/2024/1689/oj","referenceVersion":"Official Journal text, 2024","reviewQuestion":"Which recorded policy statements may be relevant to transparency, automated decisions, data use and human oversight review?","kpiFields":["kpiAiTrainingOptOut","kpiAlgoTransparency","kpiAutomatedDecision","kpiAiBiasFairness"]},"status":"mapped","assessedCount":4,"mappedFieldCount":4,"evidence":[{"field":"kpiAiTrainingOptOut","label":"AI training opt-out","value":"Opt-Out"},{"field":"kpiAlgoTransparency","label":"Algorithmic transparency","value":"Opaque"},{"field":"kpiAutomatedDecision","label":"Automated decisions","value":"Transparent"},{"field":"kpiAiBiasFairness","label":"AI bias and fairness","value":"Mentioned"}]},{"framework":{"id":"iso-42001","name":"ISO/IEC 42001:2023","shortName":"ISO/IEC 42001","referenceUrl":"https://www.iso.org/standard/42001","referenceVersion":"ISO/IEC 42001:2023 overview","reviewQuestion":"Which recorded policy statements may inform an AI management-system review of transparency, risk oversight and independent assurance?","kpiFields":["kpiAlgoTransparency","kpiAiBiasFairness","kpiIndependentAudit","kpiRegulatoryCompliance"]},"status":"mapped","assessedCount":4,"mappedFieldCount":4,"evidence":[{"field":"kpiAlgoTransparency","label":"Algorithmic transparency","value":"Opaque"},{"field":"kpiAiBiasFairness","label":"AI bias and fairness","value":"Mentioned"},{"field":"kpiIndependentAudit","label":"Independent audit","value":"Mentioned"},{"field":"kpiRegulatoryCompliance","label":"Regulatory compliance","value":"Comprehensive"}]},{"framework":{"id":"nist-ai-rmf","name":"NIST AI Risk Management Framework 1.0","shortName":"NIST AI RMF","referenceUrl":"https://www.nist.gov/itl/ai-risk-management-framework","referenceVersion":"AI RMF 1.0; NIST revision in progress, checked 2026-07-29","reviewQuestion":"Which recorded policy statements may support Govern, Map, Measure or Manage review questions?","kpiFields":["kpiAlgoTransparency","kpiAutomatedDecision","kpiAiBiasFairness","kpiContentModeration"]},"status":"mapped","assessedCount":4,"mappedFieldCount":4,"evidence":[{"field":"kpiAlgoTransparency","label":"Algorithmic transparency","value":"Opaque"},{"field":"kpiAutomatedDecision","label":"Automated decisions","value":"Transparent"},{"field":"kpiAiBiasFairness","label":"AI bias and fairness","value":"Mentioned"},{"field":"kpiContentModeration","label":"Content moderation","value":"Transparent"}]},{"framework":{"id":"oecd-ai-principles","name":"OECD AI Principles","shortName":"OECD AI Principles","referenceUrl":"https://oecd.ai/en/ai-principles","referenceVersion":"OECD AI Principles, updated 2024","reviewQuestion":"Which recorded policy statements may be relevant to transparency, fairness, accountability and user agency review?","kpiFields":["kpiConsentMechanism","kpiAlgoTransparency","kpiAiBiasFairness","kpiIndependentAudit"]},"status":"mapped","assessedCount":4,"mappedFieldCount":4,"evidence":[{"field":"kpiConsentMechanism","label":"Consent mechanism","value":"Explicit Opt-In"},{"field":"kpiAlgoTransparency","label":"Algorithmic transparency","value":"Opaque"},{"field":"kpiAiBiasFairness","label":"AI bias and fairness","value":"Mentioned"},{"field":"kpiIndependentAudit","label":"Independent audit","value":"Mentioned"}]}]},"humanReviewQuestions":["Does the original AWS Service Terms source still match the recorded public snapshot version 4?","Do the cited source passages support each displayed reason, KPI value and regional note?","Which advisory framework topics require specialist legal, risk or governance review for this use case?","Has a later public change superseded this packet before it is reused in a decision or publication?"],"methodologyUrl":"https://policywatcher.online/methodology/confidence","changeUrl":"https://policywatcher.online/change/5fb011f8-bcba-43c2-917f-f3844bd6448e","boundary":"This packet records PolicyWatcher evidence and AI-assisted screening for one public change. It is not legal advice, a compliance verdict, a certification, or proof that the external source remains unchanged.","contentDigest":"255f8b6d253a0764dc72a17133d0ff7fbbaafb13fccc65d169ab5beec388ea97"}