Verification Record
AOS-AWS-2026-001 · v1.1

Where the Record Stops

An assessment of who can lawfully compel Amazon Web Services Australia Pty Ltd to produce or give access to data it holds for an Australian government customer, and of where the published record stops. The contracting party for an Australian account is the Australian company, whose declared ultimate holding company is Amazon.com, Inc. Its terms sell the processing, storage and hosting of a customer’s Content and describe no carriage. The United States instrument reaches a provider subject to that jurisdiction through two predicates this assessment does not resolve. Every Australian instrument read, an interception warrant, a stored communications warrant, a telecommunications data authorisation and the duty to help, reaches a person only as a carrier or a carriage service provider, and the provider holds no carrier licence on the register as captured. Whether it is a carriage service provider turns on the network unit over which its services are supplied, and no published document this practice holds says what that is. Schedule 1 reaches a storage provider by what it does, and on the record its order is drawn for the parent, not the subsidiary. Nothing here states whether the provider is inside or outside any definition quoted, or whether any instrument reaches any data it holds.

Reference
AOS-AWS-2026-001
Assessed
9 September 2026
Version
v1.1
The chain

Verification chain

Four things are pinned, and each can be checked independently of the others.

The assessment PDF. SHA-256: 31208dba64e1c3b88eba9075a2ff65cb69924a06624493f1bc3f73e110e74c12

Download the file and run shasum -a 256 over it. If the value differs, the file is not the one struck here.

The timestamp. The receipt AOS-AWS-2026-001-v1.1.pdf.ots is an OpenTimestamps proof over exactly those bytes, submitted to four calendars on 9 September 2026 and pending confirmation in the Bitcoin blockchain at publication. It has since been anchored: the receipt served here carries two Bitcoin attestations. It establishes that the file existed no later than the moment it was stamped. It establishes nothing about whether the file is correct.

Receipt SHA-256: bb54b8aef116e7d63780cf2ff9682f7fb922337ad1fafd1ee57ce1e06d2be572

The assessed source. The assessment rests on 21 pinned artefacts: 3 retrieved and pinned by this case, in the register below, and 18 relied on from nine other registers of this corpus, each named in the document’s References with the register that holds it, and each re-verified against that register’s recorded hash when this page was generated. All 21 are pinned by hash; none is independently archived. Quotations were checked against the text layer of each pinned artefact - a web page with its markup stripped, the spreadsheet’s cells, the PDF’s extraction - not against page images; every count states the artefact it was taken from and the test that produced it, and every statement that something is absent states the population searched and the control.

Re-fetch, measured at the pin. Each of the 3 rows of this register was fetched twice within the minute under convention 50 and the two hashes compared; the result is in the stability column of RETRIEVAL-LOG-2026-09-07.tsv. 2 returned different bytes on each fetch, A-AWS-ST-1, A-AWS-ST-2, and each row’s own name field says so: their hashes stand only against the copies this practice holds and cannot be confirmed by fetching the address. The other 1 returned the same bytes twice on that day, which holds until the publisher changes the page.

RefArtefactSHA-256Third-party copy
A-AWS-ST-1AWS Service Terms as served at aws.amazon.com/service-terms, 'Last Updated: September 1, 2026', the document the AWS Customer Agreement incorporates by address as the rights and restrictions for particular Services; 74 numbered service sections. Carries, in the Amazon Chime and Amazon Connect PSTN sections, the sentence 'AWS is not a telecommunications provider and does not provide any telecommunications-related services'; names no Australian entity; the word carriage occurs 0 times. UNSTABLE: the served body hashes differently on each fetch, measured by two fetches on 7 September 2026, so this pin establishes what was served at the logged time and cannot be re-verified by refetching8e1f479fa3db80cd659216916f69462985ea5ab2fd9c6503a31682f3c71b9ef3-
A-AWS-ST-2The address the AWS Customer Agreement names for the Service Terms, aws.amazon.com/serviceterms, as served: it resolves to aws.amazon.com/service-terms/ and serves the same document as A-AWS-ST-1 with a different per-request body. UNSTABLE: the served body hashes differently on each fetch, measured by two fetches on 7 September 2026, so this pin establishes what was served at the logged time and cannot be re-verified by refetchingea999eef8c863c1fcbbfcf5b996fa48722c68a50c24564c62e720f7184a3b198-
A-AGD-1Attorney-General's Department, International production order framework page as served 7 September 2026 to a browser agent (the practice's agent receives no response from this host). States: 'On 30 January 2024, Australia and the United States brought into force the Agreement between the Government of the United States of America and the Government of Australia on Access to Electronic Data for the Purpose of Countering Serious Crime (the AUS-US Data Access Agreement) through a formal exchange of diplomatic notes.' Links the Attorneys-General joint statement of 31 January 2024 through the National Library's web archivef92b9749509a5905273814e5be798ebb90be6b7d60e02b0ca73e2d7c3a9ff75b-

Relied on from other registers of this corpus. Each row below is pinned in the register named, at the hash shown, and was re-verified against that register’s recorded hash when this page was generated. The document’s References section names the same register beside each.

RefArtefactRegisterSHA-256
T-AWS-1AWS Customer Agreement page as served. Defines 'Service' as each of the services made available by AWS or its affiliates, including the web services described in the Service Terms, and defines 'AWS Contracting Party' by reference to the account-country table. UNSTABLE: the served body hashes differently on each fetch, measured by two fetches on 6 September 2026, so this pin establishes what was served at the logged time and cannot be re-verified by refetchinggeneral-findings/strategic-service-terms-2026-098eb9c9fb4f6caf06fcdc08825a7edb093ba3b77317912de5837469c07bd77797
T-AWS-2AWS Contracting Party page as served. Table row for Australia: Amazon Web Services Australia Pty Ltd (ABN 63 605 345 891), Level 37, 2-26 Park Street, Sydney NSW 2000. UNSTABLE: the served body hashes differently on each fetch, measured by two fetches on 6 September 2026, so this pin establishes what was served at the logged time and cannot be re-verified by refetchinggeneral-findings/strategic-service-terms-2026-09d625c8815d8e9321d5ba69b03832e3dbea2c9b9caa356245db2437d006068153
S2Amazon.com, Inc., Form 10-K for the fiscal year ended 31 December 2021, Exhibit 21.1, List of Significant Subsidiaries, as served by the SEC EDGAR archivecompellability-gap-2026-07725a6e73e7d75f66100bdf098a6bac206db49a086d8d584eff784c58175e5aea
S3Amazon Web Services, AWS Australia FAQs (aws.amazon.com/legal/awsau), page as servedcompellability-gap-2026-07e7fb9e591b73e01b577db58ca2a680138825b8d496130687fd449b67c27ec199
S4Amazon Web Services Security Blog, posts tagged Hosting Certification Framework, page as servedcompellability-gap-2026-077405e346a41464f472c62e22eda438f0d8b15c2b29c20c9132d1dd9f738122b4
S5Australian Business Register, ABN Lookup record for ABN 63 605 345 891 (Amazon Web Services Australia Pty Ltd), page as servedcompellability-gap-2026-07c5dccb7f06dcd5968a20ca5b7595c9918c9da58da298630c451f393909377729
S718 U.S.C. section 2713, Required preservation and disclosure of communications and records, United States Code 2024 edition, as served by govinfo.govcompellability-gap-2026-073a242ef2c1ee7a061f44bfb8daf7952839a4c4f2763d586e4af7ab1d6f5b4f42
S10Hosting Certification Framework, Certified Service Providers page as servedcompellability-gap-2026-070036bc5d6b8d18adfc10fcc713cacfb23dfece0a10267e57350304118fd0133d
H-AWS-1Amazon Web Services Australia Pty Ltd (ACN 605 345 891)hcf-strategic-2026-0769eda18e3696b3358db70013d20953749b36e81cc8e3611eb87bf2f589ea08a7
SC-ACMA-4ACMA, Register of licensed carriers, section 84 Telecommunications Act 1997 register (rendered capture; the register table is client-rendered and absent from the raw HTTP body). Carrier licence counts as at 30 July 2026general-findings/submarine-cable-scoping-2026-08761389675694d6d0a1785642da8872ab8eded6651fa9a3756f1543661691b98f
DS-AWS-2AusTender Contract Notice search export, Supplier ABN 63605345891 (Amazon Web Services Australia Pty Ltd), 134 notices, XLSXgeneral-findings/demand-side-tractability-2026-086a22d71e2cdb282322e72c7192da7b5ca794487d0ddee80fae687b5596524518
L-TIA-1Telecommunications (Interception and Access) Act 1979, Compilation No. 134 (C2026C00372), compilation date 27 August 2026, registered 3 September 2026, authorised PDF, volume 1 of 2: Chapters 1 to 4A, sections 1 to 186J, 430 pages, as served by the Federal Register of Legislationgeneral-findings/tia-act-2026-0902f345d733bb1e598ca4b243814e6070e938f60590683df4cf8ae6b06875db7a
L-TIA-2Telecommunications (Interception and Access) Act 1979, Compilation No. 134 (C2026C00372), authorised PDF, volume 2 of 2: Chapters 5 to 6, sections 187 to 300, Schedule 1 (international production orders) and endnotes, 377 pages, as served by the Federal Register of Legislationgeneral-findings/tia-act-2026-095946ec06eaae59d1844a0681f7fce6218ad0d42e2cf0ea093aa553cb2768662d
L-TIA-7Telecommunications (Interception and Access) Regulations 2017, Compilation No. 12 (F2025C01245), compilation date 13 December 2025, registered 22 December 2025, authorised PDF as served. Regulation 26A sets out in Schedule 2 the English text of the Agreement between the Government of Australia and the Government of the United States of America on Access to Electronic Data for the Purpose of Countering Serious Crime, for paragraph 3(1)(b) of Schedule 1 to the Actgeneral-findings/tia-act-2026-092d4e40e4f9694530ff1e8e0dca590dbfd7efc1d989f4d0cb842e29b9b651cfb5
L-TA-1Telecommunications Act 1997, Compilation No. 117 (C2026C00224), compilation date 4 June 2026, registered 12 June 2026, authorised PDF, volume 1 of 3: sections 1 to 310, 344 pages, as served by the Federal Register of Legislation. Carries sections 7, 15, 16, 23, 26 to 30, 42, 56, 87, 88, 271 and 276 to 278general-findings/telecommunications-act-2026-097fd3fc9570cfc621e6244e92de3c881f54912c83b75d6faa87594855b1f904dd
L-TA-2Telecommunications Act 1997, Compilation No. 117 (C2026C00224), authorised PDF, volume 2 of 3: sections 311 to 594, 642 pages, as served by the Federal Register of Legislation. Carries section 313general-findings/telecommunications-act-2026-092416755cf9a0473c5163e38cde1c35948645cf8e114b89dc8e8c601242b3eda9
L-CA-7Crimes Act 1914, Compilation No. 167 (C2026C00368), compilation date 27 August 2026, registered 2 September 2026, includes amendments to Act No. 66, 2026 and Act No. 70, 2026; authorised PDF, volume 1 of 3: Parts I to IA, sections 1 to 15F, 353 pages, as served by the Federal Register of Legislation. Part IAA is in this volumegeneral-findings/crimes-act-2026-093f405cc09c4c5a21b7973478afb48120b2b37068e9d2daad6e5d073b1507f88a
L-ASIO-4Australian Security Intelligence Organisation Act 1979, Compilation No. 84 (C2026C00387), compilation date 27 August 2026, registered 5 September 2026; authorised PDF, one volume, 358 pages, as served by the Federal Register of Legislation. Part III is in this volumegeneral-findings/asio-act-2026-0993c590df0df5b9de43fbb720d3a09ae802caff2637d8bbfb9a09e49701b2e78a

None of the 3 artefacts pinned by this case has an independent capture pinned here. All 3 were retrieved from their publishers by this practice; a reader must rely on this site or on each publisher’s server. The 18 relied-on artefacts below carry whatever third-party capture their holding register records, on that register’s own page.

The build. The PDF is produced deterministically from tracked source by build.sh, with SOURCE_DATE_EPOCH pinned to midnight UTC of 7 September 2026, the publication day, which does not move at any revision. Repeat builds on one machine and one toolchain are byte-identical; independent third-party reproducibility is not established and is not claimed. Verify by SHA-256, not by rebuild.

Versions

Version history

Two versions. Version 1.1 adds the two Australian Acts version 1.0 named as unread, the Crimes Act 1914 Part IAA and the Australian Security Intelligence Organisation Act 1979 Part III, in a new Section 5 and five new elements of the finding; it rewords one Scope sentence and one heading sentence that were true of the two Acts version 1.0 read and are not true of four, and replaces the Limitations sentence that named the two Acts as unread. No element of version 1.0’s finding is withdrawn or narrowed, and the register of this case’s own sources did not move. Version 1.0 remains downloadable below at its own hash.

VersionAssessedPublishedSHA-256Status
v1.19 September 20269 September 202631208dba64e1c3b88eba9075a2ff65cb69924a06624493f1bc3f73e110e74c12current · see Corrections · download
v1.07 September 20267 September 20267fd9a5889a6e1c9336ada95236da7279fd8f73b08e4561a5fc961f7b689b4dfasuperseded · see Corrections · download

The cover carries 9 September 2026, the date the assessment was made, and publication followed the same day. An assessment is a reading of a source at a moment, and the document’s retrieval times and viewed dates already fix that moment; the cover is not moved to the upload date, because that would put two dates on one act of reading.

Corrections

Corrections

Corrected 17 October 2026: section 7 of versions 1.0 and 1.1 says the “prescribed communications provider” is “defined at clause 1” of Schedule 1 to the TIA Act. Clause 2, “Definitions”, defines it. Clause 1 is the Schedule’s simplified outline. The source both versions cite, L-TIA-2 (Compilation No. 134, volume 2), has clause 1 on printed page 54 (PDF page 68) and the definition under clause 2 on printed page 59 (PDF page 73). The statement was wrong when made. The definition the section quotes is right, and no finding moves. The published PDFs are not changed: the words stand on PDF page 7 of version 1.0 and PDF page 10 of version 1.1.

Version 1.1 is a revision, not a correction: it adds two Acts and rewords two sentences the practice’s corrections register records as true when version 1.0 was published and overtaken by the practice’s own later reading, under the heading Not a correction, 9 September 2026. Any correction to this assessment will be recorded here and in the practice’s corrections register, and the published bytes of this version will not move.

Corrections made before publication are not listed here. They are recorded in the case’s own pre-insertion audit, which is tracked with the source.

Download

Assessment PDF

AOS-AWS-2026-001-v1.1.pdf · 158,777 bytes · 16 pages

SHA-256: 31208dba64e1c3b88eba9075a2ff65cb69924a06624493f1bc3f73e110e74c12

OpenTimestamps receipt