Amazon Model Training & Privacy

At Amazon Web Services (AWS), customer trust is our top priority. We strive to be transparent, and provide you with information about our privacy and data security practices. This page provides information about data processed to develop and train Amazon Foundation Models (FMs). 

What are Amazon Foundation Models and how do they work?

Amazon FMs are a family of FMs pretrained as general-purpose models to support a variety of use cases. AWS customers can use Amazon FMs as is, or privately customize them with their own data. You can read about the various Amazon FMs and learn more about their applications at https://thinkwithwp.com/bedrock/amazon-models/

Is personal information used to train Amazon FMs?

We use licensed, open-source, proprietary, and publicly-available data to train the Amazon FMs. Personal information that we process to train Amazon FMs is generally limited to information that is incidentally included in datasets. The goal of Amazon FM training is to help the model learn about statistical relationships in natural language (such as words or characters that often appear in context with other words or characters) or between natural language and corresponding images or videos. For example, a model may learn that “Once upon a…” is often followed by “time”. We do not seek to use training data to identify individuals. We also implement safeguards to help limit the impact of any incidental processing of personal information in connection with training Amazon FMs.

Consistent with EU and UK data protection laws, to the extent that we process personal information to train the Amazon FMs, we do so on the basis of our own legitimate interests in offering, maintaining, and improving Amazon FMs as a service for AWS customers, for security-related purposes such as detecting and preventing fraud and abuse, and complying with contractual obligations to customers that use the Amazon FMs. 

Do you use Amazon FM inputs, such as prompts entered into the model and data AWS customers use to customize a private version of an Amazon FM, to train the underlying Amazon FMs?

No, prompts that AWS customers enter into Amazon FMs and outputs produced in response to Amazon FM prompts are not used to train the underlying Amazon FMs, unless a customer consents. AWS customers can use their own data to create a private version of an Amazon Foundation Model; we do not use such data to train the original underlying Amazon FM.

How can I submit a data subject rights request in connection with Amazon FMs or submit a request to have my personal information removed or corrected from Amazon FM outputs?

You may have certain rights under applicable data protection laws, which may include (depending on your location) the right to request access to, correction of, or deletion of personal information about you that we process. You may also have the right to object to our processing or request to restrict processing in certain circumstances. If you or your authorized agent wish to submit a request or have inquiries about exercising these rights with respect to personal information processed by Amazon FMs, you can email your inquiry to amazon-titan-privacy@amazon.com. If you have reason to believe that your personal information is included in outputs of Amazon FMs and wish to request that we either remove your personal information from Amazon FMs outputs or correct certain personal information, please submit your request using the form provided here. If you access Amazon FMs within the AWS GovCloud (US) Regions, do not enter any export-controlled data in your inquiry or request. We will review inquiries and requests and respond in accordance with applicable privacy laws. If we decline to process your request with respect to your privacy rights, you may have the right to appeal our decision. If you have questions about exercising your privacy rights in relation to Amazon models that are customized by AWS customers, please refer to their relevant notices.

For additional details about how AWS processes personal information that is not included on this page, please see the AWS Privacy Notice.