Amazon Cognito

About

Customer identity and access management service supporting user authentication, sign-up/sign-in flows, and federation with social/enterprise providers

Sovereignty Score

out of 100

Data completeness32% (Minimal)

Score relies on pessimistic defaults for missing fields

Jurisdictional(25%)

Significant foreign legal exposure risk

Jurisdiction: United States (EU adequacy decision)
Parent provider in United States (CLOUD Act risk) (Amazon.com, Inc.)
Five Eyes intelligence alliance exposure
US CLOUD Act applies (US can compel data access regardless of storage location)

Ownership(20%)

Significant foreign ownership or control risk

Non-EU controlled (>50% non-EU)
Publicly traded
Acquisition risk unknown (assumed high) (Submit verified data to improve this score)

Governance(20%)

Infrastructure/SaaS service - OSS governance metrics not applicable

Private infrastructure company (no OSS governance)

Portability(15%)

Some portability options available

SaaS only (no self-host option)

License(10%)

Restrictive licensing or license instability concerns

Proprietary/closed source
SaaS service (license stability not tracked)

Community(10%)

Infrastructure/SaaS service - community metrics not applicable

No GitHub repository (SaaS/infrastructure service)

How missing data affects scores Submit data corrections

Provider

Amazon Web Services, Inc.

Quick Facts

Jurisdiction: United States
Ownership: Non-EU Controlled
Deployment: SaaS