Amazon

Security and trust center evidence

Amazon Web Services provides a highly reliable, scalable, low-cost infrastructure platform in the cloud that powers hundreds of thousands

amazon.com DevOps and observabilityLast verified 2 Nov 2026

Vendor website Are you Amazon?

Amazon has 4 registry-verified rows and 1 third-party reported row in the CertReports index, last verified 2 Nov 2026. The strongest row is FedRAMP: FedRAMP Authorized. This page is independent of the vendor’s own trust centre: dates, sources and caveats come from CertReports captures.

Reviewer brief

As of 25 Oct 2026, Amazon is listed in the FedRAMP registry as FedRAMP Authorized, originally issued 21 Jun 2016 following an audit by Coalfire Systems, Inc. As of 26 Oct 2026, Amazon is listed in the Visa Global Registry as PCI DSS validated through 31 Jul 2027, audited by Coalfire Systems, Inc. As of 26 Oct 2026, Amazon is listed in the CSA STAR registry at Level 2, Trusted Cloud Provider status, issued 6 Nov 2020. As of 26 Oct 2026, the CSA STAR registry record supports an underlying ISO/IEC 27001 certification issued 6 Nov 2020. As of 26 Oct 2026, Amazon is listed in the EU-US Data Privacy Framework registry as active, with certification issued 7 Apr 2018 and expiring 3 Apr 2027.

FedRAMP - Authorized, listed in FedRAMP registry (as of 25 Oct 2026)
PCI DSS - listed in Visa Global Registry, validated through 31 Jul 2027 (as of 26 Oct 2026)
EU-US Data Privacy Framework - active, expires 3 Apr 2027 (as of 26 Oct 2026)

Facts only, each dated; nothing here is inferred, scored or advised. Brief generated 26 Oct 2026; it is regenerated whenever a row changes.

Among devops and observability vendors

4verified rows

Category median 1, across 193 indexed devops and observability vendors. Amazon has more verified rows than 99 percent of them.

awscloud infrastructurecomputeiaasstorage

Compare with similar vendors

Pick your own comparison

Compliance grid

No public evidence yet for HIPAA, SOC 2, GDPR, Cyber Essentials, ISO 27701, ISO 42001. This does not mean the vendor lacks them; it means nothing public was found at the last check.

Legal artefacts

No DPA, BAA or subprocessor list has been captured from a public page yet. Registry rows above do not depend on this.

Subprocessors

No subprocessor list captured yet.

Change history

26 Oct 2026PCI DSS renewedExpiry moved from 2027-01-31 to 2027-07-31.
26 Oct 2026PCI DSS auditor changedAuditor changed from Insside Information Inteligente SRL to Coalfire Systems, Inc.
19 Oct 2026PCI DSS renewedExpiry moved from 2026-11-30 to 2027-01-31.
19 Oct 2026PCI DSS auditor changedAuditor changed from 366 Security and Compliance SRL to Insside Information Inteligente SRL.
14 Oct 2026PCI DSS auditor changedAuditor changed from Coalfire Systems, Inc to 366 Security and Compliance SRL.
18 Sep 2026First indexed by CertReports8 evidence rows across 5 frameworks entered the index.

Similar vendors with evidence

Related by product tags and the DevOps and observability category, ranked by shared tags, description similarity and overlapping evidence. Never by popularity.