Amazon Bedrock — privacy & data policy

Provider: AWS. PromptPrivacy score: 89/100. Last verified November 01, 2026.

What happens to your data?

Amazon Bedrock processes your data inside a secure, private environment using private copies of foundation models. Your inputs and customizations are encrypted in transit and at rest, and they are never shared with model providers or used to train base models. You also have the option to route and store your interaction logs directly in your own AWS storage resources.

Does it train on your data?

Does not train on your content. When models are tuned, Bedrock uses a private copy of the model, ensuring that customer data is not shared with model providers or used to improve base models.

Can you opt out?

Not applicable. Bedrock does not use customer content to train base models by default, so no training opt-out is necessary.

Data retention

Not specified. The policy notes that customers can choose to store metadata, requests, and responses in their own Amazon S3 buckets or CloudWatch Logs, but it does not specify AWS's internal retention or deletion schedules.

Encryption & security

Data is encrypted in transit and at rest. Customers can also generate, manage, and control encryption keys using AWS Key Management Service (AWS KMS).

Is it safe for work?

Yes. Amazon Bedrock provides robust enterprise protections, including default zero model-training on customer data, encryption at rest and in transit, private VPC connectivity via AWS PrivateLink, and compliance with major standards such as SOC, ISO, HIPAA, and GDPR.

Source policy: https://aws.amazon.com/bedrock/security-compliance/