Loading the catalogue…
Loading the catalogue…
Amazon (via AWS) is a US-headquartered, publicly traded technology company subject to CLOUD Act and FISA 702 jurisdiction, with an EU legal entity (Amazon Europe Core, Luxembourg) that has been the subject of a record GDPR enforcement action. Its flagship Nova and Titan foundation models are proprietary and served through Amazon Bedrock, while a smaller set of research artefacts (e.g. Chronos time-series models) are released openly on HuggingFace. Amazon has signed the EU AI Pact and the GPAI Code of Practice and holds ISO/IEC 42001 and ISO 27001 certifications for its AI services, giving it one of the more mature formal AI-governance postures among US hyperscalers, though its GDPR enforcement history and history of antitrust scrutiny warrant continued monitoring by regulated customers.
Amazon Europe Core was fined a record €746 million by Luxembourg's CNPD for GDPR violations tied to targeted-advertising consent practices; the case remains procedurally unresolved after multiple appeals (2021-2026), with the substantive GDPR violations largely upheld by courts even as the fine amount was sent back for reconsideration.
Amazon is a US-incorporated public company, exposing it to CLOUD Act and (inferred) FISA Section 702 jurisdiction regardless of EU data residency arrangements.
Amazon's CEO has direct ties to US national-security AI policymaking (NSCAI membership), which may be a relevant independence consideration for government/defense-sensitive EU customers.
Stav’s assessment
Editorial assessment, not legal advice. Stav's risk ratings, scores, and verdicts are our own analysis of publicly available information and may be incomplete or out of date. Verify independently before making compliance or procurement decisions.
Amazon was among the first signatories of the EU's voluntary AI Pact and has signed the full GPAI Code of Practice, seeking a presumption-of-compliance pathway under the EU AI Act.
AWS is the first major cloud provider to obtain ISO/IEC 42001 accredited certification for its AI services (Bedrock, Q Business, Textract, Transcribe), in addition to standard ISO/IEC 27001 certification.
Amazon publishes detailed 'AI Service Cards' for each Nova model, documenting intended use cases, limitations, and responsible-AI considerations.
Amazon maintains active HuggingFace organisations publishing open research artefacts (e.g., Chronos-Bolt time-series models) alongside its proprietary Nova line.
Published safeguards & certifications