Amazon Web Services

Compliance evidence

Amazon Web Services, Inc. (AWS) is a subsidiary of Amazon that provides on-demand cloud computing platforms and APIs to individuals

aws.amazon.com Cloud and hostingLast verified 2 Nov 2026

Request the report Are you Amazon Web Services?

Compliance grid

PCI DSSVerified
Listed on the Visa Global Registry as PCI DSS validated through 2027-01-31
as of 19 Oct 2026
2 sources · Deiteriy Company Ltd.
CCPA / CPRAVendor-stated
Vendor states CCPA on its trust centre
as of 21 Sep 2026
1 source
DORA critical ICT provider designationVerified
Designated critical ICT third-party provider under DORA Article 31 as Amazon web Services EMEA Sarl (ESAs list of 18 November 2025)
as of 2 Nov 2026
1 source

No public evidence yet for HIPAA, SOC 2, GDPR, FedRAMP, ISO 27001, CSA STAR, Cyber Essentials, ISO 27701, ISO 42001. This does not mean the vendor lacks them; it means nothing public was found at the last check.

Official framework marks identify the scheme each row is about; the CertReports state chip beside each mark is our assessment of the public evidence. How states are decided.