Amazon Web Services
by AMAZON.COM, INC.
Amazon Web Services (AWS) is a cloud computing platform offering secure infrastructure, security services, and compliance tools for businesses and organizations globally.
As of 2026-10-01, Amazon Web Services holds a Saveran Sovereignty Score of 36/100 (High exposure).
Last assessed: 2026-10-01 · methodology ruleset 2026.08.3
Saveran Sovereignty Score
EU CSF alignment — indicative minimum
SEAL-1 · Jurisdictional Sovereignty
Indicative alignment with the EU Cloud Sovereignty Framework (v1.2.1). Saveran is not a Commission assessment and SEAL levels shown are Saveran's evidence-based estimate.
EU CSF sovereignty objectives (indicative)
Saveran maps its evidence to the eight Sovereignty Objectives of the EU Cloud Sovereignty Framework and estimates an assurance level (SEAL) per objective. Weights follow the framework; the mapping is documented in the methodology.
SOV-1Strategic
15% of framework weightSOV-2Legal & Jurisdictional
10% of framework weightSOV-3Data & AI
10% of framework weightNo evidence found for this objective yet — it is shown unscored rather than estimated.
SOV-4Operational
15% of framework weightSOV-5Supply Chain
20% of framework weightNo evidence found for this objective yet — it is shown unscored rather than estimated.
SOV-6Technology
15% of framework weightNo evidence found for this objective yet — it is shown unscored rather than estimated.
SOV-7Security & Compliance
10% of framework weightNo evidence found for this objective yet — it is shown unscored rather than estimated.
SOV-8Environmental
5% of framework weightNo evidence found for this objective yet — it is shown unscored rather than estimated.
Indicative alignment with the EU Cloud Sovereignty Framework (v1.2.1). Saveran is not a Commission assessment and SEAL levels shown are Saveran's evidence-based estimate.
At a glance
| Legal name | AMAZON.COM, INC. |
|---|---|
| Ultimate parent | AMAZON.COM, INC. (US) |
| Headquarters | US |
| Hosting provider | AWS |
| CDN | {"name":"CloudFront","parentCountry":"US"} |
| GDPR DPA | Available |
Score breakdown
Why this score
- OWN-02Ultimate parent under US jurisdiction
Ultimate parent AMAZON.COM, INC. is US-incorporated. Compels US-controlled providers to disclose data regardless of storage location.
Basis: US CLOUD Act (18 U.S.C. § 2713) and FISA 702
- TECH-01Hosted on a US hyperscaler (EU regions included)
Workloads run on AWS, a US-controlled hyperscaler — EU regions remain subject to US jurisdiction over the operator. Compels US-controlled providers to disclose data regardless of storage location.
Basis: US CLOUD Act (18 U.S.C. § 2713) and FISA 702
- REG-07No public privacy/compliance documentation
Neither a public DPA nor any recognised certification could be verified.
Full rule trace — 3 more findings for subscribers
- TECH-03 — Non-EU CDN in front of the service
- TECH-04 — Non-EU email provider
- TECH-05 — Non-EU DNS operator
US CLOUD Act verdict
Amazon Web Services is exposed to the US CLOUD Act: Ultimate parent AMAZON.COM, INC. is US-incorporated. Compels US-controlled providers to disclose data regardless of storage location.
Certifications
No recognised certification verified.
Frequently asked questions
- What is Amazon Web Services's digital sovereignty score?
- As of 2026-10-01, Amazon Web Services holds a Saveran Sovereignty Score of 36/100 (High exposure).
- Is Amazon Web Services exposed to the US CLOUD Act?
- Amazon Web Services is exposed to the US CLOUD Act: Ultimate parent AMAZON.COM, INC. is US-incorporated. Compels US-controlled providers to disclose data regardless of storage location.