CUSTOMER-REQ2 – Industry-recognized compliance frameworks

AWS is compliant with a variety of frameworks. AWS Artifact is the central resource for compliance-related information. It provides on-demand access to AWS security and compliance reports and select online agreements. Reports available in AWS Artifact include our Service Organization Control (SOC) reports, Payment Card Industry (PCI) reports, and certifications from accreditation bodies across geographies and compliance verticals that validate the implementation and operating effectiveness of AWS security controls. Agreements available in AWS Artifact include the Business Associate Addendum (BAA) and the Nondisclosure Agreement (NDA). For additional details regarding compliance frameworks and reports, refer to AWS Risk and Compliance.