Skip to content
Attested.
VendorsCloud9h ago
Vendor ยท Cloud

AWSCompliance, certifications and attestations

Certifications held, by family40 held
Headquarters
Seattle, United States
Founded
2006
Website
aws.amazon.com
Trust center Company profile
40
Certifications held
4
Backed by a registry
42
Pieces of evidence
Sep 24, 2026
Last captured
Across fru.devAcquisitionsReleasesConferences

SOC reports

ISO standards

AI governance

US government

Health

Payments

Privacy

Cloud security

Regional

From public trust centers and registries on the date shown. Confirm scope with the vendor. Logos via logo.dev; trademarks belong to their owners.

History

Added or renewedUpgradedIn process or ReadyLapsed or removed
  1. AddedCSA STARFirst listed in the CSA STAR Registry
  2. AddedData Privacy FrameworkCovered entity of Amazon.com, Inc.
  3. UpgradedFedRAMP HighAWS GovCloud
  4. In processFedRAMP HighAWS GovCloud
  5. AddedFedRAMP ModerateAWS US East/West
  6. In processFedRAMP ModerateAWS US East/West

Evidence

Every source, what it says and when it was read.

SOC 11 source

HeldVendor compliance page
...ISO 42001 ISO 45001 ISO 50001 ISO 9001 KY3P PCI 3DS PCI DSS PCI P2PE PCI PIN ProcessUnity SOC 1 SOC 2 SOC 3 Uptime Institute Tiers Laws / Regulations: AWS customers remain responsible for complying with applicable...
Captured Sep 24, 2026Open source

SOC 21 source

HeldVendor compliance page
...42001 ISO 45001 ISO 50001 ISO 9001 KY3P PCI 3DS PCI DSS PCI P2PE PCI PIN ProcessUnity SOC 1 SOC 2 SOC 3 Uptime Institute Tiers Laws / Regulations: AWS customers remain responsible for complying with applicable...
Captured Sep 24, 2026Open source

SOC 31 source

HeldVendor compliance page
...ISO 45001 ISO 50001 ISO 9001 KY3P PCI 3DS PCI DSS PCI P2PE PCI PIN ProcessUnity SOC 1 SOC 2 SOC 3 Uptime Institute Tiers Laws / Regulations: AWS customers remain responsible for complying with applicable compliance...
Captured Sep 24, 2026Open source

ISO/IEC 270011 source

HeldVendor compliance page
...Asia Pacific Europe, Middle East & Africa Global CSA STAR GxP ISO 14001 ISO 20000 ISO 22301 ISO 27001 ISO 27017 ISO 27018 ISO 27701 ISO 42001 ISO 45001 ISO 50001 ISO 9001 KY3P PCI 3DS PCI DSS PCI P2PE PCI PIN ProcessUnity...
Captured Sep 24, 2026Open source

ISO/IEC 270171 source

HeldVendor compliance page
...Europe, Middle East & Africa Global CSA STAR GxP ISO 14001 ISO 20000 ISO 22301 ISO 27001 ISO 27017 ISO 27018 ISO 27701 ISO 42001 ISO 45001 ISO 50001 ISO 9001 KY3P PCI 3DS PCI DSS PCI P2PE PCI PIN ProcessUnity...
Captured Sep 24, 2026Open source

ISO/IEC 270181 source

HeldVendor compliance page
...Middle East & Africa Global CSA STAR GxP ISO 14001 ISO 20000 ISO 22301 ISO 27001 ISO 27017 ISO 27018 ISO 27701 ISO 42001 ISO 45001 ISO 50001 ISO 9001 KY3P PCI 3DS PCI DSS PCI P2PE PCI PIN ProcessUnity SOC 1 SOC...
Captured Sep 24, 2026Open source

ISO/IEC 277011 source

HeldVendor compliance page
...& Africa Global CSA STAR GxP ISO 14001 ISO 20000 ISO 22301 ISO 27001 ISO 27017 ISO 27018 ISO 27701 ISO 42001 ISO 45001 ISO 50001 ISO 9001 KY3P PCI 3DS PCI DSS PCI P2PE PCI PIN ProcessUnity SOC 1 SOC 2 SOC 3 Uptime...
Captured Sep 24, 2026Open source

ISO/IEC 420011 source

HeldVendor compliance page
...Global CSA STAR GxP ISO 14001 ISO 20000 ISO 22301 ISO 27001 ISO 27017 ISO 27018 ISO 27701 ISO 42001 ISO 45001 ISO 50001 ISO 9001 KY3P PCI 3DS PCI DSS PCI P2PE PCI PIN ProcessUnity SOC 1 SOC 2 SOC 3 Uptime Institute...
Captured Sep 24, 2026Open source

FedRAMP2 sources

Held ยท ModerateFedRAMP Marketplace

AWS US East/West

FedRAMP Authorized, Moderate impact; authorized 2013-05-01 (JAB); assessor Coalfire Systems, Inc.; 68 agency authorizations
Captured Sep 23, 2026Since May 1, 2013Open source
Held ยท HighFedRAMP Marketplace

AWS GovCloud

FedRAMP Authorized, High impact; authorized 2016-06-21 (JAB); assessor Coalfire Systems, Inc.; 51 agency authorizations
Captured Sep 23, 2026Since Jun 21, 2016Open source

GovRAMP (StateRAMP)1 source

HeldVendor compliance page
...Asia Pacific Europe, Middle East & Africa Americas Canada RPAA CJIS DFARS DoD FERPA FISMA GovRAMP HIPAA IRS Publication 1075 SEC Rule 17a-4(f) US CLOUD Act US EAR US ITAR VPAT Alignment / Framework Compliance...
Captured Sep 24, 2026Open source

CJIS1 source

HeldVendor compliance page
...regulatory domains. Americas Asia Pacific Europe, Middle East & Africa Americas Canada RPAA CJIS DFARS DoD FERPA FISMA GovRAMP HIPAA IRS Publication 1075 SEC Rule 17a-4(f) US CLOUD Act US EAR US ITAR VPAT Alignment...
Captured Sep 24, 2026Open source

HIPAA (BAA)1 source

HeldVendor compliance page
...Pacific Europe, Middle East & Africa Americas Canada RPAA CJIS DFARS DoD FERPA FISMA GovRAMP HIPAA IRS Publication 1075 SEC Rule 17a-4(f) US CLOUD Act US EAR US ITAR VPAT Alignment / Framework Compliance alignments...
Captured Sep 24, 2026Open source

HITRUST1 source

HeldVendor compliance page
...(PBHVA) Assessment CMMC DoD Level 2 DoD Level 4 DoD Level 5 DoD Level 6 FedRAMP FIPS 140-3 HITRUST CSF MPA Asia Pacific ABS OSPAR CSAP IRAP ISMAP ISO 20000 K-ISMS MeitY MTCS SNI 27001 SNI 27017 SNI 27018 SNI 9001...
Captured Sep 24, 2026Open source

PCI DSS1 source

HeldVendor compliance page
...ISO 27001 ISO 27017 ISO 27018 ISO 27701 ISO 42001 ISO 45001 ISO 50001 ISO 9001 KY3P PCI 3DS PCI DSS PCI P2PE PCI PIN ProcessUnity SOC 1 SOC 2 SOC 3 Uptime Institute Tiers Laws / Regulations: AWS customers remain...
Captured Sep 24, 2026Open source

Data Privacy Framework1 source

HeldData Privacy Framework List

EU-US, UK extension, Swiss-US; non-HR data. Covered entity of Amazon.com, Inc.

EU-US status: Active; certified since 2016-10-21; recertification due 2027-01-02; verification: Self-Assessment
Captured Sep 23, 2026Since Oct 21, 2016Renewal due Jan 2, 2027Open source

CSA STAR1 source

Held ยท Level 2CSA STAR Registry

CAIQ, certification

Listed as Amazon since 2020-11-06; Level 2 (third-party audit)
Captured Sep 23, 2026Since Nov 6, 2020Open source

IRAP1 source

HeldVendor compliance page
...4 DoD Level 5 DoD Level 6 FedRAMP FIPS 140-3 HITRUST CSF MPA Asia Pacific ABS OSPAR CSAP IRAP ISMAP ISO 20000 K-ISMS MeitY MTCS SNI 27001 SNI 27017 SNI 27018 SNI 9001 Europe, Middle East & Africa ASIP HDS...
Captured Sep 24, 2026Open source

ISMAP1 source

HeldVendor compliance page
...DoD Level 5 DoD Level 6 FedRAMP FIPS 140-3 HITRUST CSF MPA Asia Pacific ABS OSPAR CSAP IRAP ISMAP ISO 20000 K-ISMS MeitY MTCS SNI 27001 SNI 27017 SNI 27018 SNI 9001 Europe, Middle East & Africa ASIP HDS C5 CCN...
Captured Sep 24, 2026Open source

TISAX1 source

HeldVendor compliance page
...ASIP HDS C5 CCN CPSTIC CISPE CyberVadis DESC CSP ENS High GNS GSMA NHS DSPT Pinakes PiTuKri TISAX UK Cyber Essentials Plus UK G-Cloud UK PASF Laws / Regulations: AWS customers remain responsible for complying...
Captured Sep 24, 2026Open source

Compare with

AWS vs Microsoft AWS vs Oracle AWS vs Google Cloud AWS vs IBM AWS vs Cloudflare AWS vs Alibaba Cloud

Weekly: vendors that gained or lost a certification, Wednesdays.