LLM API Compliance
Providers / Amazon Bedrock

Amazon Bedrock

Headquarters: United States. Trust center or security page: aws.amazon.com. Checked 2026-10-29. API prices: price tracker.

Certifications and attestations

NameScopeSource
ISO
AWS lists Bedrock as in scope for ISO
This serviceaws.amazon.com
SOC
AWS lists Bedrock as in scope for SOC
This serviceaws.amazon.com
CSA STAR Level 2This serviceaws.amazon.com
FedRAMP High
In the AWS GovCloud (US-West) Region
This serviceaws.amazon.com

Reports are usually available under NDA from the trust center. A company-wide certificate doesn't always cover every AI product; check the report's scope.

HIPAA: BAA / HIPAA eligible

“is HIPAA eligible”

Source: aws.amazon.com

Zero data retention: not published

We found no statement about this on the provider's trust center, docs or terms. That doesn't mean the answer is no; ask the provider.

Training on API data: Not used for training by default

“Because the model providers don't have access to those accounts, they don't have access to Amazon Bedrock logs or to customer prompts and completions.”

Source: docs.aws.amazon.com

EU data residency: Partial

Per-model, per-region pricing; several models are priced in EU regions (Frankfurt, Ireland, Milan, Stockholm). Check each model.

Source: aws.amazon.com

From the BranoLabs price tracker provider registry.

Something changed or wrong? Use the bug link in the footer. Back to all providers.