AWS Compliance Programs
Global
United States
Asia Pacific
Europe
Certifications / Attestations:
Compliance certifications and attestations are assessed by a third-party, independent auditor and result in a certification, audit report, or attestation of compliance.
Laws / Regulations / Privacy:
AWS customers remain responsible for complying with applicable compliance laws and regulations. In some cases, AWS offers functionality (such as security features), enablers, and legal agreements (such as the AWS Data Processing Agreement and Business Associate Addendum) to support customer compliance.
No formal certification is available to (or distributable by) a cloud service provider within these law and regulatory domains.
- Argentina Data Privacy
- CISPE
- EU Model Clauses
- FERPA
- GDPR
- GLBA
- HIPAA
- HITECH
- IRS 1075
- ITAR
- My Number Act [Japan]
- U.K. DPA - 1988
- VPAT / Section 508
- EU Data Protection Directive
- Privacy Act [Australia]
- Privacy Act [New Zealand]
- PDPA - 2010 [Malaysia]
- PDPA - 2012 [Singapore]
- PIPEDA [Canada]
- Spanish DPA Authorization
Alignments / Frameworks:
Compliance alignments and frameworks include published security or compliance requirements for a specific purpose, such as a specific industry or function. AWS provides functionality (such as security features) and enablers (including compliance playbooks, mapping documents, and whitepapers) for these types of programs.
Requirements under specific alignments and frameworks may not be subject to certification or attestation; however, some alignments and frameworks are covered by other compliance programs.
