01Trust Score

Amazon Q Developer

Week 2026-W20 · 26 Apr 2026 Vendor-Neutral
25 /100 Significant Risk
▼ 55 pts ⚠
3.9/5 (3641)
↓ PDF Report
AUDITOR SUMMARY
Strength: Amazon Q Developer, as an AWS offering, presents a robust security and compliance profile, boasting SOC 2 Type II, ISO 27001, GDPR, and HIPAA BAA certifications. Its deep integration with the AWS ecosystem and agentic capabilities for code transformation and security scanning offer significant productivity gains for developers operating within AWS environments.
Trust Score 25/100 CONDITIONAL
Est. Annual Cost $32,800/year for 100 users 100 users / yr
Top Risk HIGH Reliability Overall: Medium
Priority Action Amazon Q Developer New Sign-ups Blocked May 15, 2026 ↓ PDF  · TCO  · Hardening

Enterprise Verdict

! Conditional Approval
Risk: Medium 50 sources
Priority Action

Amazon Q Developer New Sign-ups Blocked May 15, 2026

This report updates every week. Weekly AI vendor intelligence — trust scores, contract red flags, competitive shifts.
02Top Risks

Risk Assessment

Seven-category enterprise risk analysis derived from community and vendor signals. Each card shows the evidence tier and the underlying finding.

High Reliability Community Data

Public documentation buyers may want to verify availability of specific uptime commitments or reliability history.

Medium Cost Predictability Community Data

Enterprises should negotiate fixed-rate contracts and monitor pricing changes for overage risks.

High Vendor Lock-in Community Data

Data export status unclear. Integration score: 0/100. Webhooks available, reducing lock-in risk.

Medium Support Quality Community Data

Insufficient public community reviews to verify support quality. Standard support channels (email/documentation) are assumed.

Medium Data Privacy Community Data

Compliance score: 94/100. GDPR status: dpa_available. Encryption at rest: yes.

Low Compliance Posture Community Data

SOC 2: type_ii. ISO 27001: certified. Overall compliance score: 94/100.

Medium AI Transparency Community Data

AI model training and data usage policies are not explicitly disclosed in the public Terms of Service.

Verified — Confirmed by vendor documentation Community — Derived from community reports

Due Diligence Alerts

Priority reviews, recommended inquiries, and verified strengths — based on 42+ community data points

Recommended Inquiry Critical Amazon Q Developer New Sign-ups Blocked May 15, 2026
Recommended Inquiry High Opaque Data Retention Policy — Request DPA Before Procurement
Recommended Inquiry High Tenant Isolation Model Not Publicly Documented
Recommended Inquiry Medium Free Tier Usage Limit Discrepancy Reported
Recommended Inquiry Medium CVE-2025-8217 Patched in VS Code Extension
03Security & Compliance

Security & Compliance

SOC 2 ✓ Certified
ISO 27001 ✓ Certified
GDPR ✓ DPA
HIPAA ✓ BAA

Data Security

Encryption (At Rest): AES-256
Encryption (In Transit): TLS 1.3

Security Features

Audit Logs

IT Hardening Guide

Deployment Checklist

Enterprise Contract Intelligence

DPA availability, data residency, and contract risk signals for procurement teams

📄 Data Processing Agreement Available
View DPA ↗

AWS provides a GDPR-compliant Data Processing Addendum (DPA) that is incorporated into the AWS Service Terms and applies automatically to all customers globally. It includes Standard Contractual Clauses (SCCs) for international data transfers.

🌐 Data Residency Customer-Controlled
Default: US East (N. Virginia) for many AWS services, but customer-controlled for specific deployments.
US East (N. Virginia)US East (Ohio)US West (Oregon)US West (N. California)Canada (Central)South America (São Paulo)Europe (Ireland)Europe (Frankfurt)Europe (London)Europe (Paris)Europe (Stockholm)Europe (Milan)Europe (Spain)Asia Pacific (Tokyo)Asia Pacific (Seoul)Asia Pacific (Singapore)Asia Pacific (Sydney)Asia Pacific (Mumbai)Asia Pacific (Jakarta)Asia Pacific (Hong Kong)Asia Pacific (Osaka)Asia Pacific (Malaysia)Asia Pacific (Hyderabad)Asia Pacific (Taiwan)Asia Pacific (Melbourne)

AWS offers extensive regional availability, allowing customers to control data residency. The AWS European Sovereign Cloud further enhances data sovereignty for EU customers, ensuring data remains within the EU under local governance. Cross-border transfers are managed via SCCs as part of the DPA.

⚠️ Contract Risk Medium Lock-in (65/100)
Auto-renewal: Yes ⚠ Unilateral change right: Yes ⚠ Data export on exit: Yes ✓ Notice: 30 days
⚠ 4 contract risk flags — click to review
⚠ Unilateral right to modify Service Terms without explicit notice period for users.
⚠ Opaque data retention policy for customer content, posing compliance risks.
⚠ Lack of explicit data portability guarantees for all Amazon Q Developer specific data.
⚠ Imminent product discontinuation for new sign-ups creates significant contractual uncertainty.

The contract risk is elevated due to the impending discontinuation of new sign-ups, which could lead to forced migration and unbudgeted costs. Standard AWS Service Terms include clauses for unilateral changes and auto-renewal. While AWS generally supports data portability, specific guarantees for Amazon Q Developer's internal data are not fully detailed, contributing to vendor lock-in.

New risk signals detected weekly. Weekly AI vendor intelligence — trust scores, contract red flags, competitive shifts.
04Community Signals

Community Evidence

Sentiment analysis and recurring issues from developer & enterprise community signals this week.

Recurring Issues

Add S3 bucket to store usage statistics of Kiro and Amazon Q Developer 🟠 Community 2 mentions medium → Stable

Enterprise Impact: Reported by community on GitHub with 2 comments.

Sources: GitHub
Enhancement: Amazon Q Developer needs discontinuation warning — signups blocked May 15 🟠 Community low → Stable

Enterprise Impact: Reported by community on GitHub.

Sources: GitHub

Source Highlights This Week

Specific signals from GitHub, Hacker News, and Reddit — what the community is actually saying

Intelligence Synthesis

Amazon Q Developer is facing an imminent block on new sign-ups as of May 15, 2026, signaling a product transition or discontinuation, which is a critical concern for new enterprise deployments. Despite this, the tool maintains a strong security and compliance profile, including SOC 2 Type II, ISO 27001, GDPR, and HIPAA BAA. Community feedback highlights its utility for AWS-centric development and security scanning, but also points to noticeable latency and a discrepancy in advertised free tier usage limits. Existing users should prepare for migration, while new procurement should be halted.

05Financial Impact

Financial Impact Panel

Cost intelligence and pricing signals for enterprise procurement decisions

Free

$0
1 user
  • IDE plugins and CLI
  • 50 agentic requests per month
  • 1,000 lines of code per month for Java upgrades
  • Reference tracking
  • Suppress public code suggestions
  • Opt-out data collection
  • AWS Console Q&A

Pro

$19/mo.
Per user
  • Everything in Free tier
  • Increased limits of agentic requests
  • 4,000 lines of code per month for Java upgrades (pooled at account level)
  • Extra lines of code available at $0.003 per line
  • Admin dashboard with user and policy management
  • Automatically opted out data collection
  • IP indemnity

The official pricing page clearly outlines Free and Pro tiers. However, a Reddit post from 7 days ago claims 'unlimited inline completions with no cap at all' for the Free tier, which contradicts the official '50 agentic requests per month' limit. This discrepancy could lead to user confusion and unexpected overage charges if not clarified. Overage charges for code transformation apply to the Pro tier beyond pooled allocations.

Pricing data from public sources — enterprise rates differ. Verify with vendor.

TCO Calculator

Calculate the real monthly cost for your team. Adjust seats, usage, and pricing tier below.

Estimated Monthly Cost

Base Subscription $0
AI Credits / Tokens $0
Hidden Costs (onboarding, overages, support) $0
Total Monthly TCO $0
Per User / Month $0
Annual Projection $0

Swanum Independent Estimate (100 users)

Base subscription (monthly × 12) $1900 × 12
Implementation $5000
Training $3000
Integration $2000
Total Annual TCO $32,800/year for 100 users

Base $19/mo per user × 100 users × 12 months = $22,800. Estimated implementation costs: $5,000. Estimated training costs: $3,000. Estimated integration costs: $2,000. Total annual TCO for 100 users: $32,800. This estimate does not include potential overage charges for code transformation beyond pooled allocations.

Don't evaluate blind next quarter. Weekly AI vendor intelligence — trust scores, contract red flags, competitive shifts.

Independent analysis — signals aggregated from GitHub, Reddit, HN, Stack Overflow, Twitter/X, G2 & Capterra. Not affiliated with any vendor. Corrections?

Download PDF Report

Create a free account to download the full enterprise audit PDF.

Sign up — it's free →

Already have an account? Log in