Does Amazon Bedrock train on your data? (Business plans)
Doesn't train by default
Doesn't train on business data by default.
AWS and third-party model providers will not use inputs or outputs to train Amazon Nova, Titan, or third-party models.
Why this matters: A "no" keeps your prompts and files out of AWS's models, where they couldn't be removed later. Confirm it covers the plan you use. Why training matters →
Below: retention, SOC 2, ISO 27001/42001, DPA, BAA, data residency and zero-retention for Amazon Bedrock, each linked to AWS's own page.
Trains on your data by default
AWS and third-party model providers will not use inputs or outputs to train Amazon Nova, Titan, or third-party models.
- aws.amazon.com/bedrock/faqs/ · checked Oct 17, 2026
Data retention
Not stated on the AWS pages we checked.
- aws.amazon.com/bedrock/security-compliance/ · checked Oct 17, 2026
- aws.amazon.com/bedrock/faqs/ · checked Oct 17, 2026
SOC 2 Type II
Included in scope of AWS SOC 1, 2, 3 reports.
- aws.amazon.com/bedrock/faqs/ · checked Oct 17, 2026
ISO/IEC 27001
In scope for ISO 27001 (and 9001, 27017, 27018, 27701, 22301, 20000).
- aws.amazon.com/bedrock/faqs/ · checked Oct 17, 2026
ISO/IEC 42001
Not stated on the AWS pages we checked.
- aws.amazon.com/bedrock/security-compliance/ · checked Oct 17, 2026
- aws.amazon.com/bedrock/faqs/ · checked Oct 17, 2026
DPA available
Not stated on the AWS pages we checked.
- aws.amazon.com/bedrock/security-compliance/ · checked Oct 17, 2026
- aws.amazon.com/bedrock/faqs/ · checked Oct 17, 2026
BAA / HIPAA
HIPAA eligible.
- aws.amazon.com/bedrock/security-compliance/ · checked Oct 17, 2026
Data residency options
Not stated on the AWS pages we checked.
- aws.amazon.com/bedrock/security-compliance/ · checked Oct 17, 2026
- aws.amazon.com/bedrock/faqs/ · checked Oct 17, 2026
Zero-retention option
Not stated on the AWS pages we checked.
- aws.amazon.com/bedrock/security-compliance/ · checked Oct 17, 2026
- aws.amazon.com/bedrock/faqs/ · checked Oct 17, 2026
Vendor pages we monitor for this tool
We save a fingerprint (SHA-256 of the page's visible text) on every check so we can spot when a vendor edits its terms.
| Page | Checked | Fingerprint |
|---|---|---|
| https://aws.amazon.com/bedrock/security-compliance/ | Oct 17, 2026 | cb48e3c57aef… |
| https://aws.amazon.com/bedrock/faqs/ | Oct 17, 2026 | 97813fde773e… |
Compare with
- Azure OpenAI in Foundry Models Doesn't train
- Claude API Doesn't train
- OpenAI API Platform Doesn't train
- Vertex AI (Gemini on Google Cloud) Doesn't train
See all Model API tools · Why AI training on your data matters · How we source and verify this