Amazon Bedrock
From AI API data terms: training, retention and zero retention: What does each AI provider say happens to data sent to its commercial API: is it used for training, how long is it kept, and can zero retention be had?
Provider: Amazon
The company offering the API, as named on its own page.
AWS and the third-party model providers will not use any inputs to or outputs from Amazon Bedrock to train Amazon Nova, Amazon Titan, or any third-party models.
Source: https://aws.amazon.com/bedrock/faqs/. Read 2026-11-01. Checked by a second reader.
Offering: Amazon Bedrock
The API, tier or platform the row covers, in the provider's words.
AWS and the third-party model providers will not use any inputs to or outputs from Amazon Bedrock to train Amazon Nova, Amazon Titan, or any third-party models.
Source: https://aws.amazon.com/bedrock/faqs/. Read 2026-11-01. Checked by a second reader.
Trains on API data by default: No
True or false only where the text plainly says what happens to this offering's API data with no opt-in or opt-out by the customer. An opt-out with no stated default is left blank. Where pages differ: legal or privacy page first, then help or trust pages, then developer docs, with the other in conflicts.
AWS and the third-party model providers will not use any inputs to or outputs from Amazon Bedrock to train Amazon Nova, Amazon Titan, or any third-party models.
Source: https://aws.amazon.com/bedrock/faqs/. Read 2026-11-01. Checked by a second reader.
Default retention: Actual retention depends on the model - consult the model's terms for specifics
How long prompts and outputs are kept by default, in the provider's words. Where pages differ: legal or privacy page first, then help or trust pages, then developer docs, with the other in conflicts. A page that's only less specific isn't a conflict: the more specific statement is the value.
Default means the data retention policy of the model applies. There is no change to previous model retention behavior; if ZDR applied previously, then ZDR still applies. Actual retention depends on the model — consult the model's terms for specifics.
Source: https://docs.aws.amazon.com/bedrock/latest/userguide/data-retention.html. Read 2026-11-01. Checked by a second reader.
Exceptions: For Anthropic Claude Fable 5 and Claude Fable 5.1, all traffic will be retained for up to 30 days for automated offline abuse detection
The main case with different retention, in the provider's words: first a model carved out of the general promise, then a feature, then a case such as flagged content. Pages rank as for Default retention; between pages of equal rank, the one naming the models. One passage only, so others may exist.
For Anthropic Claude Fable 5 and Claude Fable 5.1, all traffic will be retained for up to 30 days for automated offline abuse detection.
Source: https://docs.aws.amazon.com/bedrock/latest/userguide/abuse-detection.html. Read 2026-11-01. Checked by a second reader.
Zero retention offered: Yes
True only where the provider plainly offers zero data retention by that name for this offering; false only where it plainly excludes it. A similar control under another name is left blank here and described in How to get it.
none Zero data retention. No request or response data is written to durable storage by AWS or shared with the model provider.
Source: https://docs.aws.amazon.com/bedrock/latest/userguide/data-retention.html. Read 2026-11-01. Checked by a second reader.
How to get it: Set data_retention_mode to none
What the provider says is needed for zero retention. Where it has no offer by that name, its nearest named control or pointer, in its own words. Where pages differ: legal or privacy page first, then help or trust pages, then developer docs, with the other in conflicts.
If you require guaranteed zero retention, set data_retention_mode to none.
Source: https://docs.aws.amazon.com/bedrock/latest/userguide/data-retention.html. Read 2026-11-01. Checked by a second reader.
BAA available: Not found
True where the provider says it signs or offers a HIPAA Business Associate Agreement, or sets terms for use under one, for this offering. A general cloud BAA that the page doesn't tie to this offering, or an invitation to ask, is left blank.
No source we could use stated this. A blank never means no.
Data location: Encrypted and stored at rest in the AWS Region where you are using Amazon Bedrock
Where the provider states data is processed or stored, in its words. Where pages differ: legal or privacy page first, then help or trust pages, then developer docs, with the other in conflicts.
Any customer content processed by Amazon Bedrock is encrypted and stored at rest in the AWS Region where you are using Amazon Bedrock.
Source: https://aws.amazon.com/bedrock/faqs/. Read 2026-11-01. Checked by a second reader.