Monitor AWS compliance pages
Amazon Web Services — the largest public cloud provider, powering hosting, storage, databases, and AI services for most modern SaaS products.
AWS publishes several compliance and legal pages that change over time. Under GDPR Article 28, data controllers using AWS as a processor must continuously verify that "sufficient guarantees" remain in place — which means tracking changes to these pages as they happen. Below are the 4 most relevant pages, what typically changes on each, and ready-to-paste monitoring prompts.
Monitor all 4 pages automatically
Choose the pages that matter most and get an alert when something meaningful changes. The free plan covers 3 monitors.
Start with 3 free monitors →Pages to monitor
Sub-processor list
https://aws.amazon.com/compliance/sub-processors/ ↗
Typical change frequency: quarterly
What to monitor
- New AWS regions added (each region brings new local data center operators)
- Changes to the list of AWS affiliates processing customer data
- New sub-processor entries when AWS launches managed services with third-party components
- Jurisdiction changes when AWS restructures regional entities
Suggested monitoring prompt
Alert me when AWS adds, removes, or substitutes a sub-processor. Report the sub-processor name, region, and stated purpose. New AWS region additions count as sub-processor changes. Ignore formatting, navigation, and documentation layout changes.
Data Processing Agreement
https://aws.amazon.com/service-terms/ ↗
Typical change frequency: quarterly
What to monitor
- Updates to the GDPR Data Processing Addendum referenced in Section 50
- Changes to cross-border transfer mechanisms (SCCs, DPF)
- New services added that introduce data processing implications
- Modifications to customer data deletion and retention timelines
Suggested monitoring prompt
Monitor this page for changes to the GDPR DPA, cross-border transfer mechanisms, or data processing terms. Alert me on substantive contractual changes. Ignore version numbers and last-updated timestamps if the text is unchanged.
Privacy policy
https://aws.amazon.com/privacy/ ↗
Typical change frequency: yearly
What to monitor
- Changes to what data AWS collects about customer usage
- New sharing arrangements with Amazon affiliates
- Updates to international data transfer disclosures
- New processing purposes for AWS Trusted Advisor or support telemetry
Suggested monitoring prompt
Alert me when AWS changes what customer data it collects, how it shares data with Amazon affiliates, or international transfer practices. Ignore purely editorial updates.
Status page
https://health.aws.amazon.com/health/status ↗
Typical change frequency: weekly
What to monitor
- Ongoing regional incidents affecting EU customer data
- Postmortems for incidents involving data integrity or security
- Service degradation affecting GDPR-relevant regions (eu-west-1, eu-central-1)
Suggested monitoring prompt
Alert me on new AWS incidents or postmortems affecting eu-west-1, eu-central-1, or any security-related service disruption. Ignore routine maintenance windows.
Compliance certifications
Data location
Hosting locations: United States, European Union, United Kingdom, Asia Pacific, Middle East, Africa
EU-US Data Privacy Framework: Certified
Related
Ready to start monitoring AWS?
Set up monitoring free →