{"schema":"https://policywatcher.online/schemas/evidence-packet/v1","schemaVersion":"1.1.0","mappingVersion":"2026-07-29.1","changeId":"7deb6076-3311-47dc-8dac-cf74eba61d26","screeningDate":"2026-11-04T18:40:49.154Z","publicationGate":"published","company":{"id":"edaffd5f-94d3-483c-8ae1-b5ae272d33ec","name":"Amazon","slug":"amazon","industry":"E-Commerce"},"policy":{"id":"c51f6ead-7964-41b8-92cb-c4434ad524d5","name":"AWS Service Terms","type":"terms","jurisdiction":"Global","sourceUrl":"https://aws.amazon.com/serviceterms/"},"sourceConfidence":{"state":"verified-retrieval","lastCheckedAt":"2026-11-04T18:40:49.124Z","retrievalChannel":"direct","dataStatus":"Available","publicSnapshotEvidence":true,"limitation":"Source confidence describes recorded retrieval and publication state. It does not rate the provider policy or certify source authenticity."},"snapshots":{"old":{"version":4,"sha256":"28473c5a7d7f00644663ca883f818372d3d6553ba79ec8c9a1c312ddcfe43c6d","capturedAt":"2026-10-31T16:40:34.138Z"},"current":{"version":5,"sha256":"7acc7d6038bb32c67f9d26eae493a1283dfd17b7a724ededa2e4f6e8defaac4d","capturedAt":"2026-11-04T18:40:49.124Z"}},"analysisLineage":{"status":"verified","requestSha256":"041805b8d27d3bd17c24932197f2a037887e88224aebe4573f97d2ff14fedf74","responseSha256":"c4d21abc13bd1fec0d9f077653b1723803b63d2e61fa832e3d3f6661e908ea7b","model":"gemini-2.5-flash","promptVersion":"policy-analysis.v3-full-document","schemaVersion":"policy-analysis.schema.v2","inputCoverage":"complete","semanticCoverage":"not_measured","documents":{"old":{"sha256":"28473c5a7d7f00644663ca883f818372d3d6553ba79ec8c9a1c312ddcfe43c6d","charLength":292820,"byteLength":294116,"rangeUnit":"utf16-code-unit","includedRanges":[[0,292820]],"excludedRanges":[]},"new":{"sha256":"7acc7d6038bb32c67f9d26eae493a1283dfd17b7a724ededa2e4f6e8defaac4d","charLength":293162,"byteLength":294458,"rangeUnit":"utf16-code-unit","includedRanges":[[0,293162]],"excludedRanges":[]}},"boundary":"Hash verification links retained inputs and the application SDK request. It does not prove provider execution, semantic completeness or legal correctness."},"captureLineage":{"old":{"provenance":"captured","sourceUrl":"https://aws.amazon.com/serviceterms/","requestedUrl":"https://aws.amazon.com/serviceterms/","finalUrl":"https://aws.amazon.com/service-terms/","capturedAt":"2026-10-31T16:40:34.138Z","urlDisclosure":"credentials-query-fragment-redacted"},"current":{"provenance":"captured","sourceUrl":"https://aws.amazon.com/serviceterms/","requestedUrl":"https://aws.amazon.com/serviceterms/","finalUrl":"https://aws.amazon.com/service-terms/","capturedAt":"2026-11-04T18:40:49.124Z","urlDisclosure":"credentials-query-fragment-redacted"}},"assessment":{"summary":"AWS clarified that exploratory support services fall under 'Free Exploration Services,' reinforcing customer responsibility for compliance and validation.","overallRisk":"Medium","overallScore":6,"previousPublicChange":{"id":"5fb011f8-bcba-43c2-917f-f3844bd6448e","overallRisk":"Medium","overallScore":4,"screeningDate":"2026-10-31T16:40:34.167Z"},"scoreDelta":2,"direction":"higher","reasons":[{"icon":"info","textEn":"Clarified scope of AWS Support services for better transparency.","textIt":"Ambito dei servizi di supporto AWS chiarito per maggiore trasparenza.","deltaScore":1,"evidenceQuote":"As part of AWS Support (excluding AWS Managed Services), AWS may provide exploratory technical consulting and advisory services in non-production environments. That work will be governed by Section 110 of the AWS Service Terms, notwithstand","evidenceSide":"new","relatedKpi":"kpiRegulatoryCompliance","anchorStatus":"verified"},{"icon":"warning","textEn":"Reinforced customer liability for compliance and validation of advisory services.","textIt":"Rafforzata la responsabilità del cliente per conformità e validazione dei servizi di consulenza.","deltaScore":-1,"evidenceQuote":null,"evidenceSide":null,"relatedKpi":"kpiRegulatoryCompliance","anchorStatus":"not-recorded"},{"icon":"info","textEn":"No changes to core AI/ML data processing or privacy terms, maintaining status quo.","textIt":"Nessuna modifica ai termini principali di elaborazione dati AI/ML o privacy, mantenendo lo status quo.","deltaScore":0,"evidenceQuote":null,"evidenceSide":null,"relatedKpi":"kpiAiTrainingOptOut","anchorStatus":"not-recorded"}],"keyPoints":[{"textEn":"Exploratory technical consulting under AWS Support is now explicitly linked to 'Free Exploration Services' terms.","textIt":"La consulenza tecnica esplorativa nell'ambito del Supporto AWS è ora esplicitamente collegata ai termini dei 'Servizi di Esplorazione Gratuiti'.","sentiment":"neutral"},{"textEn":"Customers bear full responsibility for validating and ensuring compliance of solutions from exploratory services.","textIt":"I clienti sono pienamente responsabili della validazione e della conformità delle soluzioni derivanti dai servizi esplorativi.","sentiment":"negative"},{"textEn":"These services do not constitute financial, legal, or compliance advice from AWS.","textIt":"Questi servizi non costituiscono consulenza finanziaria, legale o di conformità da parte di AWS.","sentiment":"negative"},{"textEn":"No new clauses or modifications were made to AI content usage, data collection, or cross-border transfer policies.","textIt":"Nessuna nuova clausola o modifica è stata apportata all'uso dei contenuti AI, alla raccolta dati o alle politiche di trasferimento transfrontaliero.","sentiment":"neutral"}],"regionImpacts":[{"region":"EU","perspective":"Enterprise","riskLevel":"Medium","impactAnalysisEn":"Enterprises must note that exploratory support services are not legal advice, reinforcing their responsibility for GDPR and AI Act compliance. This clarifies liability for solutions developed during such engagements.","complianceNoteEn":"GDPR, EU AI Act"},{"region":"EU","perspective":"Individual","riskLevel":"Low","impactAnalysisEn":"The policy update has minimal direct impact on individual users in the EU. The changes primarily affect enterprise customers' understanding of support services.","complianceNoteEn":null},{"region":"Global","perspective":"Enterprise","riskLevel":"Medium","impactAnalysisEn":"Globally, enterprises must understand that AWS advisory services are not legal counsel. They are responsible for their own due diligence and compliance with international and local regulations for all deployments.","complianceNoteEn":"Global Data Laws"},{"region":"Global","perspective":"Individual","riskLevel":"Low","impactAnalysisEn":"The policy update has minimal direct impact on individual users globally. The changes primarily affect enterprise customers' understanding of support services.","complianceNoteEn":null},{"region":"US","perspective":"Enterprise","riskLevel":"Medium","impactAnalysisEn":"US enterprises need to be aware that AWS exploratory support services do not provide legal or compliance advice. They remain solely responsible for ensuring solutions comply with CCPA and other state-specific privacy and AI laws.","complianceNoteEn":"CCPA, State AI Laws"},{"region":"US","perspective":"Individual","riskLevel":"Low","impactAnalysisEn":"The policy update has minimal direct impact on individual users in the US. The changes primarily affect enterprise customers' understanding of support services.","complianceNoteEn":null}],"explanationBoundary":"Score reasons and deltaScore values are stored AI-assisted screening outputs. Verified anchors confirm only that the quoted passage occurs in the named snapshot; they do not prove the interpretation."},"governance":{"boundary":"Mappings identify review relevance between recorded PolicyWatcher KPI fields and framework topics. They are not legal interpretations, conformity assessments, certifications or compliance verdicts.","mappings":[{"framework":{"id":"eu-ai-act","name":"Regulation (EU) 2024/1689 (EU AI Act)","shortName":"EU AI Act","referenceUrl":"https://eur-lex.europa.eu/eli/reg/2024/1689/oj","referenceVersion":"Official Journal text, 2024","reviewQuestion":"Which recorded policy statements may be relevant to transparency, automated decisions, data use and human oversight review?","kpiFields":["kpiAiTrainingOptOut","kpiAlgoTransparency","kpiAutomatedDecision","kpiAiBiasFairness"]},"status":"mapped","assessedCount":4,"mappedFieldCount":4,"evidence":[{"field":"kpiAiTrainingOptOut","label":"AI training opt-out","value":"Opt-Out"},{"field":"kpiAlgoTransparency","label":"Algorithmic transparency","value":"Opaque"},{"field":"kpiAutomatedDecision","label":"Automated decisions","value":"Opaque"},{"field":"kpiAiBiasFairness","label":"AI bias and fairness","value":"Mentioned"}]},{"framework":{"id":"iso-42001","name":"ISO/IEC 42001:2023","shortName":"ISO/IEC 42001","referenceUrl":"https://www.iso.org/standard/42001","referenceVersion":"ISO/IEC 42001:2023 overview","reviewQuestion":"Which recorded policy statements may inform an AI management-system review of transparency, risk oversight and independent assurance?","kpiFields":["kpiAlgoTransparency","kpiAiBiasFairness","kpiIndependentAudit","kpiRegulatoryCompliance"]},"status":"mapped","assessedCount":4,"mappedFieldCount":4,"evidence":[{"field":"kpiAlgoTransparency","label":"Algorithmic transparency","value":"Opaque"},{"field":"kpiAiBiasFairness","label":"AI bias and fairness","value":"Mentioned"},{"field":"kpiIndependentAudit","label":"Independent audit","value":"Absent"},{"field":"kpiRegulatoryCompliance","label":"Regulatory compliance","value":"Comprehensive"}]},{"framework":{"id":"nist-ai-rmf","name":"NIST AI Risk Management Framework 1.0","shortName":"NIST AI RMF","referenceUrl":"https://www.nist.gov/itl/ai-risk-management-framework","referenceVersion":"AI RMF 1.0; NIST revision in progress, checked 2026-07-29","reviewQuestion":"Which recorded policy statements may support Govern, Map, Measure or Manage review questions?","kpiFields":["kpiAlgoTransparency","kpiAutomatedDecision","kpiAiBiasFairness","kpiContentModeration"]},"status":"mapped","assessedCount":4,"mappedFieldCount":4,"evidence":[{"field":"kpiAlgoTransparency","label":"Algorithmic transparency","value":"Opaque"},{"field":"kpiAutomatedDecision","label":"Automated decisions","value":"Opaque"},{"field":"kpiAiBiasFairness","label":"AI bias and fairness","value":"Mentioned"},{"field":"kpiContentModeration","label":"Content moderation","value":"Partial"}]},{"framework":{"id":"oecd-ai-principles","name":"OECD AI Principles","shortName":"OECD AI Principles","referenceUrl":"https://oecd.ai/en/ai-principles","referenceVersion":"OECD AI Principles, updated 2024","reviewQuestion":"Which recorded policy statements may be relevant to transparency, fairness, accountability and user agency review?","kpiFields":["kpiConsentMechanism","kpiAlgoTransparency","kpiAiBiasFairness","kpiIndependentAudit"]},"status":"mapped","assessedCount":4,"mappedFieldCount":4,"evidence":[{"field":"kpiConsentMechanism","label":"Consent mechanism","value":"Explicit Opt-In"},{"field":"kpiAlgoTransparency","label":"Algorithmic transparency","value":"Opaque"},{"field":"kpiAiBiasFairness","label":"AI bias and fairness","value":"Mentioned"},{"field":"kpiIndependentAudit","label":"Independent audit","value":"Absent"}]}]},"humanReviewQuestions":["Does the original AWS Service Terms source still match the recorded public snapshot version 5?","Do the cited source passages support each displayed reason, KPI value and regional note?","Which advisory framework topics require specialist legal, risk or governance review for this use case?","Has a later public change superseded this packet before it is reused in a decision or publication?"],"methodologyUrl":"https://policywatcher.online/methodology/confidence","changeUrl":"https://policywatcher.online/change/7deb6076-3311-47dc-8dac-cf74eba61d26","boundary":"This packet records PolicyWatcher evidence and AI-assisted screening for one public change. It is not legal advice, a compliance verdict, a certification, or proof that the external source remains unchanged.","contentDigest":"fa76149f49f81f85fb04f68d01508173bfca165aa9d4fcd150bd1f4341feb104"}