SECURITY, PRIVACY & COMPLIANCE

Question 1

If AWS gets a request to hand over data, what will you do?

Answer 1

Amazon and AWS are vigilant about our customers’ privacy and have implemented sophisticated technical and physical measures to prevent unauthorized access.  We have a world-class team of security experts monitoring our systems 24/7 to protect customer content.  We will not disclose customer content in response to requests unless required to do so to comply with a legally valid and binding order, such as a subpoena or a court order.
-Additionally, when possible we would notify the customer before disclosing their content so they could seek protection from disclosure.

Question 2

Once Data is stored in AWS, who owns it?

Answer 2

AWS customers retain ownership and control of their content.

Question 3

What is AWS’ stance on privacy?

Answer 3

AWS customers retain ownership and control of their content. They choose which location to store their data and it doesn’t move unless the customer decides to move it. Regardless of where a request for customer content comes, we are vigilant about our customers’ privacy and have implemented sophisticated technical and physical measures to prevent unauthorized access.

Question 4

What privacy and security certifications does AWS offer?

Answer 4

AWS has achieved a number of internationally recognized certifications and accreditations

• ISO 27001
• ISO 27017 (cloud security)
• ISO 27018 (privacy)
• ISO 9001 (HCLS, medical devices, automotive and aerospace)
• PCI, SOC 1, SOC 2, SOC 3