{
  "slug": "amazon-web-services",
  "category": "server-hosting",
  "name": "Amazon Web Services",
  "description": "Cloud computing platform from Amazon offering virtual servers (EC2), storage, databases and hundreds of other services in regions worldwide.",
  "website": "https://aws.amazon.com",
  "license": null,
  "platforms": [],
  "jurisdiction": {
    "code": "US",
    "name": "United States",
    "eyes": "Five Eyes",
    "eu": false,
    "gdpr": false,
    "cloud_act": "provider"
  },
  "pick": false,
  "pick_reason": null,
  "disclosure": null,
  "grade": "D",
  "score": 45,
  "coverage": 100,
  "summary": "Amazon Web Services scores 45 out of 100 (grade D) on the server hosting criteria. It meets 5 of 12 criteria: transparency report, tells users about requests, TLS configuration, security headers and IPv6. It partly meets independent audit, mail-friendly (port 25) and Reverse DNS. It does not meet open source, no trackers or telemetry, no ads or data sales and anonymous payment. It is based in the United States: Five Eyes member; subject to the US CLOUD Act. Automated tests: SSL Labs grade A+ and Mozilla HTTP Observatory grade A+.",
  "url": "https://privacyratings.com/server-hosting/amazon-web-services/",
  "markdown": "https://privacyratings.com/server-hosting/amazon-web-services/index.md",
  "answers": {
    "open_source": {
      "title": "Open source",
      "weight": 3,
      "answer": "no",
      "evidence": null,
      "note": "Closed source."
    },
    "no_trackers": {
      "title": "No trackers or telemetry",
      "weight": 3,
      "answer": "no",
      "evidence": "https://aws.amazon.com/legal/cookies/",
      "note": "AWS websites set cookies from third parties including The Trade Desk, Oracle BlueKai and LinkedIn."
    },
    "no_ads": {
      "title": "No ads or data sales",
      "weight": 2,
      "answer": "no",
      "evidence": "https://aws.amazon.com/privacy/",
      "note": "The privacy notice says cookies and identifiers are used to advertise to visitors on third-party websites."
    },
    "independent_audit": {
      "title": "Independent audit",
      "weight": 2,
      "answer": "partial",
      "evidence": "https://d1.awsstatic.com/onedam/marketing-channels/website/aws/en_US/whitepapers/compliance/AWS_SOC3_Report.pdf",
      "note": "Only the SOC 3 summary report is public; SOC 1 and SOC 2 reports are available to customers in AWS Artifact."
    },
    "transparency_report": {
      "title": "Transparency report",
      "weight": 2,
      "answer": "yes",
      "evidence": "https://d1.awsstatic.com/onedam/marketing-channels/website/aws/en_US/security/pdfs/Amazon_Government_Request_Report_H1_2026.pdf",
      "note": "Semi-annual reports with counts of government requests to Amazon and AWS and how they were answered."
    },
    "user_notice": {
      "title": "Tells users about requests",
      "weight": 1,
      "answer": "yes",
      "evidence": "https://www.amazon.com/gp/help/customer/display.html?nodeId=GYSDRGWQ2C2CRYEF",
      "note": "Amazon notifies customers before disclosing content unless prohibited or there is clear indication of illegal conduct."
    },
    "tls": {
      "title": "TLS configuration",
      "weight": 2,
      "answer": "yes",
      "evidence": "https://www.ssllabs.com/ssltest/analyze.html?d=console.aws.amazon.com&hideResults=on",
      "note": "Grade A+"
    },
    "security_headers": {
      "title": "Security headers",
      "weight": 1,
      "answer": "yes",
      "evidence": "https://developer.mozilla.org/en-US/observatory/analyze?host=console.aws.amazon.com",
      "note": "Grade A+ (105/100+)"
    },
    "web_standards": {
      "title": "Modern web standards",
      "weight": 1,
      "answer": "pending",
      "evidence": null,
      "note": "Not tested yet."
    },
    "port_25": {
      "title": "Mail-friendly (port 25)",
      "weight": 1,
      "answer": "partial",
      "evidence": "https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-resource-limits.html",
      "note": "Outbound port 25 to public addresses is blocked by default, and customers can request removal of the restriction."
    },
    "reverse_dns": {
      "title": "Reverse DNS",
      "weight": 1,
      "answer": "partial",
      "evidence": "https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/elastic-ip-addresses-eip.html",
      "note": "Reverse DNS can be set for Elastic IP addresses, which are IPv4 only."
    },
    "ipv6": {
      "title": "IPv6",
      "weight": 1,
      "answer": "yes",
      "evidence": "https://aws.amazon.com/vpc/pricing/",
      "note": "IPv6 addresses can be assigned to instances, and only public IPv4 addresses carry an hourly charge."
    },
    "anonymous_payment": {
      "title": "Anonymous payment",
      "weight": 1,
      "answer": "no",
      "evidence": "https://repost.aws/knowledge-center/accepted-payment-methods",
      "note": "Payment is by card or direct debit. Cryptocurrency is not accepted."
    }
  },
  "tests": {
    "ssllabs": "A+",
    "observatory": "A+",
    "internetnl_web": null,
    "internetnl_mail": null,
    "trackers": [],
    "tested_at": "2026-10-01T06:38:53.375Z"
  },
  "last_modified": "2026-10-01T06:56:31Z"
}