{"schema":"https://policywatcher.online/schemas/evidence-packet/v1","schemaVersion":"1.1.0","mappingVersion":"2026-07-29.1","changeId":"a9ac5b65-35b3-4c60-92a6-419ccc298f49","screeningDate":"2026-10-28T13:39:56.102Z","publicationGate":"published","company":{"id":"edaffd5f-94d3-483c-8ae1-b5ae272d33ec","name":"Amazon","slug":"amazon","industry":"E-Commerce"},"policy":{"id":"4b62f7a4-dd92-40c5-b852-371572a636aa","name":"AWS Site Terms","type":"terms","jurisdiction":"Global","sourceUrl":"https://aws.amazon.com/terms/"},"sourceConfidence":{"state":"verified-retrieval","lastCheckedAt":"2026-10-28T13:39:56.095Z","retrievalChannel":"direct","dataStatus":"Available","publicSnapshotEvidence":true,"limitation":"Source confidence describes recorded retrieval and publication state. It does not rate the provider policy or certify source authenticity."},"snapshots":{"old":{"version":1,"sha256":"5b7aa33e84c556339d414f7f4440d9edf175a7d465383d073bba7bfb74c986af","capturedAt":"2026-10-02T04:54:57.396Z"},"current":{"version":2,"sha256":"e2c8c94eaff4b74f6b41b12f15912d026f4a58872056686431917fb1bdf7d4d6","capturedAt":"2026-10-28T13:39:56.095Z"}},"analysisLineage":{"status":"verified","requestSha256":"75daa4b4db03b4cc8646d14e3ac2897160f9c6cd1e49bf480382b5e1edf82407","responseSha256":"393abcfd09d40602fadd44562340b58f1845b0d74ea63478927333e807851347","model":"gemini-2.5-flash","promptVersion":"policy-analysis.v3-full-document","schemaVersion":"policy-analysis.schema.v2","inputCoverage":"complete","semanticCoverage":"not_measured","documents":{"old":{"sha256":"5b7aa33e84c556339d414f7f4440d9edf175a7d465383d073bba7bfb74c986af","charLength":11809,"byteLength":11861,"rangeUnit":"utf16-code-unit","includedRanges":[[0,11809]],"excludedRanges":[]},"new":{"sha256":"e2c8c94eaff4b74f6b41b12f15912d026f4a58872056686431917fb1bdf7d4d6","charLength":11808,"byteLength":11860,"rangeUnit":"utf16-code-unit","includedRanges":[[0,11808]],"excludedRanges":[]}},"boundary":"Hash verification links retained inputs and the application SDK request. It does not prove provider execution, semantic completeness or legal correctness."},"captureLineage":{"old":{"provenance":"unknown","sourceUrl":null,"requestedUrl":null,"finalUrl":null,"capturedAt":"2026-10-02T04:54:57.396Z","urlDisclosure":"credentials-query-fragment-redacted"},"current":{"provenance":"captured","sourceUrl":"https://aws.amazon.com/terms/","requestedUrl":"https://aws.amazon.com/terms/","finalUrl":"https://aws.amazon.com/terms/","capturedAt":"2026-10-28T13:39:56.095Z","urlDisclosure":"credentials-query-fragment-redacted"}},"assessment":{"summary":"The AWS Site Terms are unchanged, maintaining existing rules for site access, content, and liability, with a future update date.","overallRisk":"Medium","overallScore":6,"previousPublicChange":null,"scoreDelta":null,"direction":"baseline","reasons":[{"icon":"warning","textEn":"Broad license granted for user-submitted content, including derivative works.","textIt":"Ampia licenza concessa per i contenuti inviati dagli utenti, incluse opere derivate.","deltaScore":0,"evidenceQuote":"you grant AWS a nonexclusive, royalty-free, perpetual, irrevocable, and fully sublicensable right to use, reproduce, modify, adapt, publish, translate, create derivative works from, distribute, and display such content throughout the world","evidenceSide":"old","relatedKpi":"kpiAiOutputOwnership","anchorStatus":"verified"},{"icon":"warning","textEn":"Extensive disclaimers of warranties and limitations of liability for site use.","textIt":"Ampie esclusioni di garanzie e limitazioni di responsabilità per l'uso del sito.","deltaScore":0,"evidenceQuote":null,"evidenceSide":null,"relatedKpi":"kpiRegulatoryCompliance","anchorStatus":"not-recorded"},{"icon":"info","textEn":"All disputes are subject to exclusive jurisdiction in Washington state courts.","textIt":"Tutte le controversie sono soggette alla giurisdizione esclusiva dei tribunali dello stato di Washington.","deltaScore":0,"evidenceQuote":"shall be adjudicated in any state or federal court in King County, Washington, and you consent to exclusive jurisdiction and venue in such courts.","evidenceSide":"old","relatedKpi":"kpiRegulatoryCompliance","anchorStatus":"verified"}],"keyPoints":[{"textEn":"AWS retains broad rights over site content and user-submitted material, including a perpetual license.","textIt":"AWS mantiene ampi diritti sui contenuti del sito e sul materiale inviato dagli utenti, inclusa una licenza perpetua.","sentiment":"negative"},{"textEn":"The policy includes extensive disclaimers of warranties and limitations on AWS's liability.","textIt":"La politica include ampie esclusioni di garanzie e limitazioni della responsabilità di AWS.","sentiment":"negative"},{"textEn":"Disputes are governed by Washington state law and adjudicated in King County, Washington courts.","textIt":"Le controversie sono regolate dalla legge dello stato di Washington e giudicate nei tribunali di King County, Washington.","sentiment":"neutral"},{"textEn":"Users must review a separate Privacy Notice for details on data collection and usage practices.","textIt":"Gli utenti devono consultare una separata Informativa sulla Privacy per i dettagli sulle pratiche di raccolta e utilizzo dei dati.","sentiment":"neutral"}],"regionImpacts":[{"region":"EU","perspective":"Enterprise","riskLevel":"Medium","impactAnalysisEn":"Enterprises using AWS services rely more on the AWS Customer Agreement, which should address GDPR compliance. However, these site terms for general use still present a medium risk for user-generated content.","complianceNoteEn":"GDPR Art. 28"},{"region":"EU","perspective":"Individual","riskLevel":"High","impactAnalysisEn":"The broad content license and US jurisdiction may conflict with GDPR rights, such as data portability and deletion. The policy lacks explicit provisions for EU-specific privacy rights.","complianceNoteEn":"GDPR Art. 17, 20"},{"region":"Global","perspective":"Enterprise","riskLevel":"Medium","impactAnalysisEn":"Global enterprises must ensure their AWS Customer Agreement covers international data transfer and processing requirements. These site terms are a baseline, but not sufficient for comprehensive global compliance.","complianceNoteEn":null},{"region":"Global","perspective":"Individual","riskLevel":"High","impactAnalysisEn":"The policy's US-centric nature and broad content license pose a high risk for individuals in diverse global jurisdictions. It lacks explicit recognition of varied international privacy standards.","complianceNoteEn":null},{"region":"US","perspective":"Enterprise","riskLevel":"Low","impactAnalysisEn":"For US enterprises, these terms are standard for website access. Actual service usage and data processing would be governed by the AWS Customer Agreement, which is more comprehensive.","complianceNoteEn":null},{"region":"US","perspective":"Individual","riskLevel":"Medium","impactAnalysisEn":"These are standard US terms, but the broad content license and liability disclaimers are notable. Specific consumer privacy rights under CCPA/CPRA would be addressed in the separate Privacy Notice.","complianceNoteEn":"CCPA/CPRA"}],"explanationBoundary":"Score reasons and deltaScore values are stored AI-assisted screening outputs. Verified anchors confirm only that the quoted passage occurs in the named snapshot; they do not prove the interpretation."},"governance":{"boundary":"Mappings identify review relevance between recorded PolicyWatcher KPI fields and framework topics. They are not legal interpretations, conformity assessments, certifications or compliance verdicts.","mappings":[{"framework":{"id":"eu-ai-act","name":"Regulation (EU) 2024/1689 (EU AI Act)","shortName":"EU AI Act","referenceUrl":"https://eur-lex.europa.eu/eli/reg/2024/1689/oj","referenceVersion":"Official Journal text, 2024","reviewQuestion":"Which recorded policy statements may be relevant to transparency, automated decisions, data use and human oversight review?","kpiFields":["kpiAiTrainingOptOut","kpiAlgoTransparency","kpiAutomatedDecision","kpiAiBiasFairness"]},"status":"mapped","assessedCount":4,"mappedFieldCount":4,"evidence":[{"field":"kpiAiTrainingOptOut","label":"AI training opt-out","value":"Not Available"},{"field":"kpiAlgoTransparency","label":"Algorithmic transparency","value":"Opaque"},{"field":"kpiAutomatedDecision","label":"Automated decisions","value":"Opaque"},{"field":"kpiAiBiasFairness","label":"AI bias and fairness","value":"Absent"}]},{"framework":{"id":"iso-42001","name":"ISO/IEC 42001:2023","shortName":"ISO/IEC 42001","referenceUrl":"https://www.iso.org/standard/42001","referenceVersion":"ISO/IEC 42001:2023 overview","reviewQuestion":"Which recorded policy statements may inform an AI management-system review of transparency, risk oversight and independent assurance?","kpiFields":["kpiAlgoTransparency","kpiAiBiasFairness","kpiIndependentAudit","kpiRegulatoryCompliance"]},"status":"mapped","assessedCount":4,"mappedFieldCount":4,"evidence":[{"field":"kpiAlgoTransparency","label":"Algorithmic transparency","value":"Opaque"},{"field":"kpiAiBiasFairness","label":"AI bias and fairness","value":"Absent"},{"field":"kpiIndependentAudit","label":"Independent audit","value":"Absent"},{"field":"kpiRegulatoryCompliance","label":"Regulatory compliance","value":"Partial"}]},{"framework":{"id":"nist-ai-rmf","name":"NIST AI Risk Management Framework 1.0","shortName":"NIST AI RMF","referenceUrl":"https://www.nist.gov/itl/ai-risk-management-framework","referenceVersion":"AI RMF 1.0; NIST revision in progress, checked 2026-07-29","reviewQuestion":"Which recorded policy statements may support Govern, Map, Measure or Manage review questions?","kpiFields":["kpiAlgoTransparency","kpiAutomatedDecision","kpiAiBiasFairness","kpiContentModeration"]},"status":"mapped","assessedCount":4,"mappedFieldCount":4,"evidence":[{"field":"kpiAlgoTransparency","label":"Algorithmic transparency","value":"Opaque"},{"field":"kpiAutomatedDecision","label":"Automated decisions","value":"Opaque"},{"field":"kpiAiBiasFairness","label":"AI bias and fairness","value":"Absent"},{"field":"kpiContentModeration","label":"Content moderation","value":"Partial"}]},{"framework":{"id":"oecd-ai-principles","name":"OECD AI Principles","shortName":"OECD AI Principles","referenceUrl":"https://oecd.ai/en/ai-principles","referenceVersion":"OECD AI Principles, updated 2024","reviewQuestion":"Which recorded policy statements may be relevant to transparency, fairness, accountability and user agency review?","kpiFields":["kpiConsentMechanism","kpiAlgoTransparency","kpiAiBiasFairness","kpiIndependentAudit"]},"status":"mapped","assessedCount":4,"mappedFieldCount":4,"evidence":[{"field":"kpiConsentMechanism","label":"Consent mechanism","value":"Implicit"},{"field":"kpiAlgoTransparency","label":"Algorithmic transparency","value":"Opaque"},{"field":"kpiAiBiasFairness","label":"AI bias and fairness","value":"Absent"},{"field":"kpiIndependentAudit","label":"Independent audit","value":"Absent"}]}]},"humanReviewQuestions":["Does the original AWS Site Terms source still match the recorded public snapshot version 2?","Do the cited source passages support each displayed reason, KPI value and regional note?","Which advisory framework topics require specialist legal, risk or governance review for this use case?","Has a later public change superseded this packet before it is reused in a decision or publication?"],"methodologyUrl":"https://policywatcher.online/methodology/confidence","changeUrl":"https://policywatcher.online/change/a9ac5b65-35b3-4c60-92a6-419ccc298f49","boundary":"This packet records PolicyWatcher evidence and AI-assisted screening for one public change. It is not legal advice, a compliance verdict, a certification, or proof that the external source remains unchanged.","contentDigest":"5135aaa39181f36e82655a68d9a95b1e2676f4f018e200ec8cc101349226dfa9"}