# Amazon SI Safety Grade: Containment Board > Amazon gets C overall (GPA 2.12) on the Containment Board, rank 6 of 11. Best on safety framework, weakest on whistleblower protection, every grade sourced. Source: https://enterrsi.si/containment-board/amazon/ Updated: 2026-11-08 1. [Home](https://enterrsi.si/) 2. [Containment Board](https://enterrsi.si/containment-board/) 3. Amazon Containment Board · rank 6 of 11 · updated Nov 8, 2026 # Amazon safety report card Amazon is a US technology company that builds the Nova models. On the Containment Board it gets **C overall** (GPA 2.12), rank 6 of 11. Amazon updated its Frontier Model Safety Framework in September 2026 and publishes framework evaluations of its Nova models with outside review by Nemesys Insights and METR. Its commitments stop at deployment gates, and its public whistleblower channel is a general corporate one. Overall : C GPA : 2.12 Rank : 6 of 11 Sources : 5 Five grades ## Each grade, why, and the sources The same rubric applies to every lab. Grades use public documents only, current to November 8, 2026. Safety framework C+ [How it is graded](https://enterrsi.si/containment-board/#crit-framework) Why C+ The Frontier Model Safety Framework (Sep 17, 2026) sets Critical Capability Thresholds for CBRN, offensive cyber, automated research and loss of control, with safeguards and a go or no-go review by senior leaders. Thresholds are high level, framework updates are reviewed inside management (an SVP, the Chief Security Officer and legal counsel), and no outside audit is described. **C on this criterion means:** Published framework with narrow scope, few or vague thresholds, mostly discretionary language, or commitments weakened from earlier versions. Sources 1. [Amazon's Frontier Model Safety Framework (September 2026)](https://cdn.amazon.science/a0/4f/bca5cb32495280835d9370a466b7/amazon-fmsf-9-2026.pdf) Amazon · Sep 17, 2026 2. [Frontier AI Safety Policies (index of published company frameworks)](https://metr.org/fsp) METR · Nov 8, 2026 Outside testing C+ [How it is graded](https://enterrsi.si/containment-board/#crit-testing) Why C+ For Nova 2.0 Lite, Nemesys Insights ran an independent CBRN uplift study with nearly 800 participants and METR reviewed Amazon's automated research results and published a short assessment, and AVERI separately reviewed Amazon's safety test sets in 2026. No government institute testing was found, and METR assessed shared results rather than testing the model directly. **C on this criterion means:** Limited outside pre-release testing or review (unnamed red teamers, a single contracted study, review of company results rather than model access), or thin reporting. Sources 1. [Evaluating Nova 2.0 Lite model under Amazon's Frontier Model Safety Framework](https://arxiv.org/abs/2601.19134) arXiv (Amazon authors) · Jan 27, 2026 2. [Strengthening AI safety evaluation through independent third-party review](https://www.amazon.science/blog/strengthening-ai-safety-evaluation-through-independent-third-party-review) Amazon Science · Oct 20, 2026 Shutdown and pause C [How it is graded](https://enterrsi.si/containment-board/#crit-shutdown) Why C Amazon will not deploy a model that meets a Critical Capability Threshold until safeguards mitigate the risk. The framework has no development pause and no published control evaluations. **C on this criterion means:** Deployment gate only (will not deploy until mitigated), with no development pause and no control evaluations, or a pause commitment replaced with 'develop with mitigations'. Sources 1. [Amazon's Frontier Model Safety Framework (September 2026)](https://cdn.amazon.science/a0/4f/bca5cb32495280835d9370a466b7/amazon-fmsf-9-2026.pdf) Amazon · Sep 17, 2026 Incident disclosure C+ [How it is graded](https://enterrsi.si/containment-board/#crit-disclosure) Why C+ Amazon publishes framework evaluation reports for frontier Nova releases and runs incident detection with reporting to authorities as appropriate. No incident write-ups or misuse reports were found. **C on this criterion means:** Model cards or technical reports with limited safety content and a general incident process. Sources 1. [Amazon's Frontier Model Safety Framework (September 2026)](https://cdn.amazon.science/a0/4f/bca5cb32495280835d9370a466b7/amazon-fmsf-9-2026.pdf) Amazon · Sep 17, 2026 2. [Evaluating Nova 2.0 Lite model under Amazon's Frontier Model Safety Framework](https://arxiv.org/abs/2601.19134) arXiv (Amazon authors) · Jan 27, 2026 Whistleblower protection C- [How it is graded](https://enterrsi.si/containment-board/#crit-whistleblower) Why C- Amazon's Code of Business Conduct and Ethics lets employees report to the Legal Department or an independent third party and forbids retaliation for good faith reports, but it is not specific to model safety and does not mention anonymous reporting. The frontier framework has no reporting or anti-retaliation provision. **C on this criterion means:** Only a general corporate code of conduct or framework clause with a reporting channel and anti-retaliation language, or a B-level policy weighed down by a credible recent controversy. Sources 1. [Code of Business Conduct and Ethics](https://ir.aboutamazon.com/corporate-governance/documents-and-charters/code-of-business-conduct-and-ethics/default.aspx) Amazon · Nov 8, 2026 2. [Amazon's Frontier Model Safety Framework (September 2026)](https://cdn.amazon.science/a0/4f/bca5cb32495280835d9370a466b7/amazon-fmsf-9-2026.pdf) Amazon · Sep 17, 2026 At a glance ## Models, facts and its own rules The flagship models the board looked at, the facts that shaped the grades and the safety policy Amazon has published for itself. Flagship models [Nova 2 Lite](https://enterrsi.si/encyclopedia/nova-2-lite/)[Nova 2 Sonic](https://enterrsi.si/encyclopedia/nova-2-sonic/) Notable ### Facts behind the grades - Amazon launched a private bug bounty program for its Nova models in November 2025. - METR concluded that Nova 2.0 Lite does not cross the automated research Critical Capability Threshold in Amazon's framework. Its own rules ### Published safety policy - [**Frontier Model Safety Framework**](https://cdn.amazon.science/a0/4f/bca5cb32495280835d9370a466b7/amazon-fmsf-9-2026.pdf) Version September 2026, updated Sep 17, 2026 Sets Critical Capability Thresholds for CBRN weapons proliferation, offensive cyber operations and loss of control, and commits Amazon not to deploy a model that meets a threshold until safeguards bring risk to acceptable levels. This is the reviewed update of the first 2025 version. The Rogue Log ## Incidents involving Amazon systems The Rogue Incident Database lists 1 case involving Amazon systems, rated on the Rogue Scale. Disclosure cuts both ways: labs that publish more show more. 1. Feb 20, 2026 [Kiro agent reportedly deleted an AWS environment, causing an outage](https://enterrsi.si/incidents/kiro-agent-reportedly-caused-aws-outage/) Kiro Real world 5 Breakout The Control Map ## SI safety rules where it is based Amazon is based in the United States. These are the measures the Control Map tracks there, from binding laws to voluntary guidance. - In force [**EO 14434**](https://enterrsi.si/encyclopedia/us-eo-14434/) [United States (federal)](https://enterrsi.si/control-map/us/) - In force [**EO 14365**](https://enterrsi.si/encyclopedia/us-eo-14365/) [United States (federal)](https://enterrsi.si/control-map/us/) - Voluntary or guidance [**AI Action Plan**](https://enterrsi.si/encyclopedia/us-ai-action-plan/) [United States (federal)](https://enterrsi.si/control-map/us/) - Voluntary or guidance [**National Policy Framework**](https://enterrsi.si/encyclopedia/us-national-policy-framework/) [United States (federal)](https://enterrsi.si/control-map/us/) - Voluntary or guidance [**CAISSI**](https://enterrsi.si/encyclopedia/us-caissi/) [United States (federal)](https://enterrsi.si/control-map/us/) - Proposed [**FRONTIER Act**](https://enterrsi.si/encyclopedia/us-frontier-act/) [United States (federal)](https://enterrsi.si/control-map/us/) - In force [**SB 53**](https://enterrsi.si/encyclopedia/ca-sb-53/) [California](https://enterrsi.si/control-map/california/) - Passed, not yet in force [**SB 813**](https://enterrsi.si/encyclopedia/ca-sb-813/) [California](https://enterrsi.si/control-map/california/) - In force [**EO N-9-26**](https://enterrsi.si/encyclopedia/ca-eo-n-9-26/) [California](https://enterrsi.si/control-map/california/) - Passed, not yet in force [**RAISE Act**](https://enterrsi.si/encyclopedia/ny-raise-act/) [New York](https://enterrsi.si/control-map/new-york/) Cite this report card "Amazon safety report card." The Containment Board, enterrsi.si, November 8, 2026. Overall C (GPA 2.12), rank 6 of 11. https://enterrsi.si/containment-board/amazon/ Free to cite under CC BY 4.0 with a link to enterrsi.si. [Rank 5 · C+ Meta](https://enterrsi.si/containment-board/meta/)[Rank 7 · D+ xAI](https://enterrsi.si/containment-board/xai/) Every lab on the board [Anthropic **B+**](https://enterrsi.si/containment-board/anthropic/)[OpenAI **B**](https://enterrsi.si/containment-board/openai/)[Google DeepMind **B-**](https://enterrsi.si/containment-board/google-deepmind/)[Microsoft **C+**](https://enterrsi.si/containment-board/microsoft/)[Meta **C+**](https://enterrsi.si/containment-board/meta/)[xAI **D+**](https://enterrsi.si/containment-board/xai/)[Mistral **D**](https://enterrsi.si/containment-board/mistral/)[Z.ai (Zhipu) **D**](https://enterrsi.si/containment-board/zai/)[Alibaba (Qwen) **D-**](https://enterrsi.si/containment-board/alibaba/)[DeepSeek **F**](https://enterrsi.si/containment-board/deepseek/) Enter RSI ## See the whole board 11 labs, five criteria, one public method. Sort them, compare them and download the data. [Open the Containment Board](https://enterrsi.si/containment-board/) [Incident Database](https://enterrsi.si/incidents/)