Opting out of using your data for service improvement
Note
This documentation page is only applicable to the enhanced Amazon Security Hub launched on December 2, 2025. If you are a customer of the original Amazon Security Hub (now Amazon Security Hub CSPM), the data usage described below will apply only after you have enabled the enhanced Amazon Security Hub.
You can choose to opt out of having your data (defined as "Security Hub Content" in the Security Hub service terms) used to develop and improve Amazon Security Hub and other Amazon security services by using the Amazon Organizations opt-out policy. For more information about how to opt out, see AI services opt-out policies in the Amazon Organizations User Guide.
Note
For you to use the opt-out policy, your Amazon accounts must be centrally managed by Amazon Organizations. If you haven't already created an organization for your Amazon accounts, see Creating and managing an organization in the Amazon Organizations User Guide.
Opting out has the following effects:
-
Security Hub will delete the Content that it collected and stored for service improvement purposes prior to your opt out (if any).
-
After you opt out, Security Hub will no longer collect or store this Content for service improvement purposes.
The following section explains how Security Hub uses your Content for service improvement.
Amazon Security Hub data usage
Amazon Security Hub collects and uses the following categories of Security Hub Content to develop and improve exposure findings and resource criticality inference:
Third-party security findings that you aggregate in Security Hub from partner products or external integrations
Resource configuration data for resources in other cloud environments, such as Microsoft Azure, that you integrate with Security Hub
Software inventory data for your resources, such as the software bill of materials (SBOM) that Amazon Inspector collects and that is available in Security Hub
For information about how Security Hub uses data to provide the capabilities that you enable, see How Security Hub uses data to provide the capabilities you enable.
Your trust, privacy, and the security of your Content are our highest priority. You can opt out of this Security Hub Content collection at any time using the Amazon Organizations opt-out policy described above. For more information about Amazon data privacy practices, see Data Privacy FAQ
References
For similar opt-out procedures in other Amazon security services, see:
-
Opting out of using your data for service improvement in the Amazon GuardDuty User Guide.
-
Opting out of using your data for service improvement in the Amazon Security Lake User Guide.