{"schema":"https://policywatcher.online/schemas/evidence-packet/v1","schemaVersion":"1.1.0","mappingVersion":"2026-07-29.1","changeId":"8a6d7e33-63ec-46e8-9a9f-07d25b686d19","screeningDate":"2026-10-15T04:41:14.390Z","publicationGate":"published","company":{"id":"edaffd5f-94d3-483c-8ae1-b5ae272d33ec","name":"Amazon","slug":"amazon","industry":"E-Commerce"},"policy":{"id":"c51f6ead-7964-41b8-92cb-c4434ad524d5","name":"AWS Service Terms","type":"terms","jurisdiction":"Global","sourceUrl":"https://aws.amazon.com/serviceterms/"},"sourceConfidence":{"state":"verified-retrieval","lastCheckedAt":"2026-10-22T11:38:29.545Z","retrievalChannel":"direct","dataStatus":"Available","publicSnapshotEvidence":true,"limitation":"Source confidence describes recorded retrieval and publication state. It does not rate the provider policy or certify source authenticity."},"snapshots":{"old":{"version":1,"sha256":"2f1c421f22a6f1cbc3ecd385c7e1ad57407b42ff9a346a296c94bf94c3334c8d","capturedAt":"2026-10-02T04:54:56.297Z"},"current":{"version":2,"sha256":"38493fdad1820615c99e5074f1342147fcbfad5543b5a61c07ed8ac8d3d1ff45","capturedAt":"2026-10-15T04:41:14.375Z"}},"analysisLineage":{"status":"not_recorded","inputCoverage":"unknown","semanticCoverage":"not_measured","boundary":"Hash verification links retained inputs and the application SDK request. It does not prove provider execution, semantic completeness or legal correctness."},"captureLineage":{"old":{"provenance":"unknown","sourceUrl":null,"requestedUrl":null,"finalUrl":null,"capturedAt":"2026-10-02T04:54:56.297Z","urlDisclosure":"credentials-query-fragment-redacted"},"current":{"provenance":"unknown","sourceUrl":null,"requestedUrl":null,"finalUrl":null,"capturedAt":"2026-10-15T04:41:14.375Z","urlDisclosure":"credentials-query-fragment-redacted"}},"assessment":{"summary":"The AWS Service Terms received a minor date update with no substantive changes, maintaining existing user responsibilities and data protection frameworks.","overallRisk":"Medium","overallScore":6,"previousPublicChange":null,"scoreDelta":null,"direction":"baseline","reasons":[{"icon":"warning","textEn":"AWS can remove content without prior notice for illegal content or service disruption.","textIt":"AWS può rimuovere contenuti senza preavviso per contenuti illegali o interruzioni del servizio.","deltaScore":0,"evidenceQuote":"we may remove or disable access to any Prohibited Content without prior notice in connection with illegal content, where the content may disrupt or threaten the Services or in accordance with applicable law or any judicial, regulatory or ot","evidenceSide":"new","relatedKpi":"kpiContentModeration","anchorStatus":"verified"},{"icon":"alert","textEn":"Users bear full responsibility for ensuring their AI service use complies with all applicable laws.","textIt":"Gli utenti sono pienamente responsabili di garantire che l'uso dei servizi AI sia conforme a tutte le leggi.","deltaScore":0,"evidenceQuote":"it’s your responsibility to ensure that your use complies with all applicable laws, rules, and regulations, and the AWS Responsible AI Policy.","evidenceSide":"new","relatedKpi":"kpiRegulatoryCompliance","anchorStatus":"verified"},{"icon":"warning","textEn":"Content contributed to AWS projects grants broad, irrevocable licenses to other project members.","textIt":"I contenuti apportati ai progetti AWS concedono licenze ampie e irrevocabili ad altri membri.","deltaScore":0,"evidenceQuote":"Unless you enter into a license with other parties who have access to the project specifying different terms, you grant each party who has access to the project a nonexclusive, worldwide, irrevocable license to use, reproduce, prepare deriv","evidenceSide":"new","relatedKpi":"kpiThirdPartySharing","anchorStatus":"verified"}],"keyPoints":[{"textEn":"AWS incorporates robust data protection addendums, including SCCs, CCPA, and EU Data Act, for global compliance.","textIt":"AWS incorpora addendum robusti per la protezione dei dati, inclusi SCC, CCPA e EU Data Act, per la conformità globale.","sentiment":"positive"},{"textEn":"Users are fully responsible for ensuring legal compliance, privacy notices, and obtaining necessary consents for End User data.","textIt":"Gli utenti sono pienamente responsabili di garantire la conformità legale, le informative sulla privacy e l'ottenimento dei consensi necessari per i dati degli utenti finali.","sentiment":"neutral"},{"textEn":"An opt-out mechanism is available for AI services training within AWS projects, enhancing user control over data.","textIt":"È disponibile un meccanismo di opt-out per l'addestramento dei servizi AI all'interno dei progetti AWS, migliorando il controllo dell'utente sui dati.","sentiment":"positive"},{"textEn":"AWS retains broad rights to remove \"Prohibited Content\" without prior notice under specific circumstances.","textIt":"AWS mantiene ampi diritti di rimuovere \"Contenuti Proibiti\" senza preavviso in circostanze specifiche.","sentiment":"negative"},{"textEn":"AWS commits not to use individualized usage data or Your Content to compete with user products and services.","textIt":"AWS si impegna a non utilizzare dati di utilizzo individualizzati o i Contenuti dell'utente per competere con i prodotti e servizi dell'utente.","sentiment":"positive"}],"regionImpacts":[{"region":"EU","perspective":"Enterprise","riskLevel":"Low","impactAnalysisEn":"Enterprises benefit from comprehensive data protection addendums (DPA, SCCs, EU Data Act) for regulatory compliance. The policy places significant responsibility on the enterprise for data handling.","complianceNoteEn":"GDPR, EU Data Act"},{"region":"EU","perspective":"Individual","riskLevel":"Medium","impactAnalysisEn":"Individuals benefit from GDPR-compliant data transfer mechanisms (SCCs, DPA). However, users must ensure their own privacy notices and consents are legally adequate.","complianceNoteEn":"GDPR Art. 46"},{"region":"Global","perspective":"Enterprise","riskLevel":"Medium","impactAnalysisEn":"Enterprises must navigate diverse international data protection laws, with AWS providing frameworks like SCCs. User responsibility for compliance with local regulations is paramount.","complianceNoteEn":null},{"region":"Global","perspective":"Individual","riskLevel":"Medium","impactAnalysisEn":"Users globally are responsible for providing adequate privacy notices and obtaining consents. The policy's broad content removal rights could impact user content worldwide.","complianceNoteEn":null},{"region":"US","perspective":"Enterprise","riskLevel":"Low","impactAnalysisEn":"Enterprises must ensure their use of AWS services, especially AI, complies with US state privacy laws like CCPA. The policy outlines clear responsibilities for data processing.","complianceNoteEn":"CCPA, State Privacy Laws"},{"region":"US","perspective":"Individual","riskLevel":"Medium","impactAnalysisEn":"CCPA Terms are incorporated, providing some privacy rights. Individuals should be aware of broad content removal rights and data sharing in projects.","complianceNoteEn":"CCPA"}],"explanationBoundary":"Score reasons and deltaScore values are stored AI-assisted screening outputs. Verified anchors confirm only that the quoted passage occurs in the named snapshot; they do not prove the interpretation."},"governance":{"boundary":"Mappings identify review relevance between recorded PolicyWatcher KPI fields and framework topics. They are not legal interpretations, conformity assessments, certifications or compliance verdicts.","mappings":[{"framework":{"id":"eu-ai-act","name":"Regulation (EU) 2024/1689 (EU AI Act)","shortName":"EU AI Act","referenceUrl":"https://eur-lex.europa.eu/eli/reg/2024/1689/oj","referenceVersion":"Official Journal text, 2024","reviewQuestion":"Which recorded policy statements may be relevant to transparency, automated decisions, data use and human oversight review?","kpiFields":["kpiAiTrainingOptOut","kpiAlgoTransparency","kpiAutomatedDecision","kpiAiBiasFairness"]},"status":"mapped","assessedCount":4,"mappedFieldCount":4,"evidence":[{"field":"kpiAiTrainingOptOut","label":"AI training opt-out","value":"Opt-Out"},{"field":"kpiAlgoTransparency","label":"Algorithmic transparency","value":"Opaque"},{"field":"kpiAutomatedDecision","label":"Automated decisions","value":"Opaque"},{"field":"kpiAiBiasFairness","label":"AI bias and fairness","value":"Mentioned"}]},{"framework":{"id":"iso-42001","name":"ISO/IEC 42001:2023","shortName":"ISO/IEC 42001","referenceUrl":"https://www.iso.org/standard/42001","referenceVersion":"ISO/IEC 42001:2023 overview","reviewQuestion":"Which recorded policy statements may inform an AI management-system review of transparency, risk oversight and independent assurance?","kpiFields":["kpiAlgoTransparency","kpiAiBiasFairness","kpiIndependentAudit","kpiRegulatoryCompliance"]},"status":"mapped","assessedCount":4,"mappedFieldCount":4,"evidence":[{"field":"kpiAlgoTransparency","label":"Algorithmic transparency","value":"Opaque"},{"field":"kpiAiBiasFairness","label":"AI bias and fairness","value":"Mentioned"},{"field":"kpiIndependentAudit","label":"Independent audit","value":"Absent"},{"field":"kpiRegulatoryCompliance","label":"Regulatory compliance","value":"Comprehensive"}]},{"framework":{"id":"nist-ai-rmf","name":"NIST AI Risk Management Framework 1.0","shortName":"NIST AI RMF","referenceUrl":"https://www.nist.gov/itl/ai-risk-management-framework","referenceVersion":"AI RMF 1.0; NIST revision in progress, checked 2026-07-29","reviewQuestion":"Which recorded policy statements may support Govern, Map, Measure or Manage review questions?","kpiFields":["kpiAlgoTransparency","kpiAutomatedDecision","kpiAiBiasFairness","kpiContentModeration"]},"status":"mapped","assessedCount":4,"mappedFieldCount":4,"evidence":[{"field":"kpiAlgoTransparency","label":"Algorithmic transparency","value":"Opaque"},{"field":"kpiAutomatedDecision","label":"Automated decisions","value":"Opaque"},{"field":"kpiAiBiasFairness","label":"AI bias and fairness","value":"Mentioned"},{"field":"kpiContentModeration","label":"Content moderation","value":"Partial"}]},{"framework":{"id":"oecd-ai-principles","name":"OECD AI Principles","shortName":"OECD AI Principles","referenceUrl":"https://oecd.ai/en/ai-principles","referenceVersion":"OECD AI Principles, updated 2024","reviewQuestion":"Which recorded policy statements may be relevant to transparency, fairness, accountability and user agency review?","kpiFields":["kpiConsentMechanism","kpiAlgoTransparency","kpiAiBiasFairness","kpiIndependentAudit"]},"status":"mapped","assessedCount":4,"mappedFieldCount":4,"evidence":[{"field":"kpiConsentMechanism","label":"Consent mechanism","value":"Implicit"},{"field":"kpiAlgoTransparency","label":"Algorithmic transparency","value":"Opaque"},{"field":"kpiAiBiasFairness","label":"AI bias and fairness","value":"Mentioned"},{"field":"kpiIndependentAudit","label":"Independent audit","value":"Absent"}]}]},"humanReviewQuestions":["Does the original AWS Service Terms source still match the recorded public snapshot version 2?","Do the cited source passages support each displayed reason, KPI value and regional note?","Which advisory framework topics require specialist legal, risk or governance review for this use case?","Has a later public change superseded this packet before it is reused in a decision or publication?"],"methodologyUrl":"https://policywatcher.online/methodology/confidence","changeUrl":"https://policywatcher.online/change/8a6d7e33-63ec-46e8-9a9f-07d25b686d19","boundary":"This packet records PolicyWatcher evidence and AI-assisted screening for one public change. It is not legal advice, a compliance verdict, a certification, or proof that the external source remains unchanged.","contentDigest":"e0bb3949c499b4449f6790c44fb5c9a1da686e77044a9cd4823d3315423241b3"}