Two-sided marketplaces have an unusual cost profile: the infrastructure has to be production-quality on day one (search relevance, payment splits, transactional email at volume) while the supply and demand sides bootstrap engagement separately. AWS credit pools cover the infrastructure phase before the marketplace reaches the engagement levels that justify it on revenue. This page covers every credit track a marketplace startup qualifies for in 2026, the AWS service shape specific to two-sided liquidity products, and where credits actually burn — from OpenSearch indexing for listings to SES throughput for transactional flows.
Marketplace startups present a specific consumption profile to AWS reviewers: B2C-leaning revenue model, transaction-volume-sensitive infrastructure, multi-region deployment for global liquidity, and a payments architecture that almost always offloads PCI scope to a processor. That profile pushes typical allocations into a mid-range band: above generic consumer apps, below fintech, with the most variance coming from whether the partner-filed application itemizes the search and notification infrastructure.
A reviewer reading "two-sided marketplace for handmade goods, ECS Fargate behind ALB, Aurora PostgreSQL for listings and order state, OpenSearch Serverless for listing search and faceted filters, S3 + CloudFront for product images, Stripe Connect for payment splits via tokenization, SES for transactional email at projected 400K sends/month at month 12, Pinpoint for push notifications across iOS + Android, Cognito with separate user pools for buyers and sellers" has a high-legibility application. The services are AWS-native where AWS owns the SKU and clearly named where AWS does not (Stripe Connect outside the pool, SES inside it). Approval at the upper half of the partner-filed range is procedural.
Compare that with "we're building a marketplace, will use AWS for compute, search, and notifications." Same headline credit ask, ten times the reviewer questions. Marketplace applications win on naming the supply-and-demand sides as distinct architectures: separate Cognito user pools, separate API namespaces, separate analytics surfaces.
The structural reason marketplace pools land mid-range rather than at the fintech ceiling: payments are typically processed through Stripe Connect, Adyen MarketPay, or AWS Marketplace SaaS billing, which means PAN data never sits in your AWS environment. Without a PCI-DSS Level 1 work package in scope, the compliance-itemization lever that drives fintech allocations past $125K isn't available. SOC 2 still applies — marketplaces handle both buyer and seller personal data, and enterprise sellers (especially in B2B marketplace verticals) often require SOC 2 evidence — but SOC 2 alone tends to land Build for Startups at $20K–$25K, not the $25K + $30K combined PCI-and-SOC 2 framing fintechs file.
The floor is the more meaningful number for marketplace founders. A marketplace founder who files self-serve only ("we're building a marketplace on AWS") lands at $5K. The same founder routed through a partner who itemizes the OpenSearch + SES + Pinpoint + Cognito + multi-region service surface lands at $20K–$25K for Build for Startups alone — a 4–5× delta on framing.
Marketplace startups have access to the standard Activate tier ladder plus the Bedrock POC pool, which is increasingly relevant given the AI workloads marketplaces typically deploy (listing optimization, automated descriptions, content moderation). Five pools are realistic to file for, with the stack ceiling depending on whether institutional vouch is available.
Pool 1 — Activate Founders self-serve ($5K). Baseline. Lands in 3–7 days. Useful as a bridge while partner-filed tracks process. Founder-attested; no service itemization required.
Pool 2 — Partner-filed Build for Startups ($5K–$25K). The workhorse pool for marketplace startups. Partner files an ACE record describing the defined marketplace workload — supply-side and demand-side architectures, search infrastructure, notification stack, regional anchors. The OpenSearch + SES + Cognito + multi-region itemization is what pushes this to the ceiling.
Pool 3 — Activate Portfolio ($50K–$100K). Requires institutional vouch via VC or partner attestation through the Portfolio Sub-Program. Marketplaces at Seed-strong or Series-A stages typically land $50K–$75K when there's a tier-1 accelerator behind the company (Y Combinator, Techstars, KASZEK, Antler), and $100K at Series A with a marquee VC.
Pool 4 — Bedrock POC ($10K–$50K). For marketplaces adding AI workloads. The most underclaimed pool in this vertical because marketplace teams often don't map their use cases to "POC" framing. Listing optimization, automated product descriptions for seller-facing AI tools, customer-support chat for both sides of the marketplace, image-based content moderation — all qualify as defined Bedrock POCs.
Pool 5 — Build for AWS (partner labor, $10K–$75K of funded work). Partner-delivered scaffolding on AWS. Particularly relevant for marketplaces that need OpenSearch relevance tuning, multi-region landing zone setup, or trust-and-safety infrastructure delivered as a partner engagement rather than self-implemented. Does not consume your Activate balance.
Stacked maximum for a Series-A marketplace adding an AI feature: ~$155K combined credits ($100K Portfolio + $25K Build + $30K Bedrock POC) plus partner-labor subsidy via Build for AWS. For a seed-stage marketplace with tier-1 accelerator vouch: ~$80K–$110K. For a bootstrapped marketplace with no institutional backing: ~$55K (Build for Startups $25K + Bedrock POC $25K + self-serve $5K). The realistic middle for the seed-stage marketplaces CloudRoute routes most often: $50K–$125K.
Marketplaces have a structural cash-flow problem that other startup verticals don't share: the infrastructure has to be production-quality on day one to retain the early supply side, but the revenue (commission on GMV, listing fees, subscription tiers) builds over 12–24 months as the demand side catches up. Credit pools are unusually well-suited to this gap because they fund the infrastructure phase before the marketplace reaches the engagement levels that justify the infrastructure on revenue.
A handmade-goods marketplace at month 3 might have 800 sellers and 4,200 buyers. The 800 sellers each expect search that works, listings that render quickly, transactional email that arrives within seconds of a sale, and a seller dashboard that loads under two seconds. The 4,200 buyers expect the same on the demand side. The infrastructure cost to deliver this — OpenSearch indexing all 24,000 listings, CloudFront caching all product images, SES sending the 12,000 monthly transactional emails, Cognito managing two distinct user pools, Aurora handling listing CRUD and order state — is roughly $1,800–$2,400/month at this scale.
GMV at month 3 might be $18,000/month. At a 6% take rate, that's $1,080/month of marketplace revenue against $1,800–$2,400/month of AWS spend. The marketplace is upside-down on infrastructure economics until GMV crosses roughly $40,000–$60,000/month — typically 8–14 months later for marketplaces that grow organically.
AWS credit pools cover this gap explicitly. A $35K credit allocation at $2K/month projected AWS spend buys roughly 17 months of infrastructure runway. A $75K allocation buys roughly 30 months at the same projected spend. Marketplaces that file for the upper end of partner-filed Build for Startups ($25K) plus self-serve Founders ($5K) plus Portfolio if institutionally backed ($50K–$100K) typically end up with 12–24 months of infrastructure runway — which is precisely the window in which liquidity builds.
This timing alignment is the reason marketplace founders frequently underestimate the importance of filing for credits early. A marketplace that delays credit applications until month 8 of operation has already burned through 8 months of cash on infrastructure that AWS would have covered. The credit validity windows (12 months for Founders, 12–18 for Build for Startups, 24 for Portfolio) don't retroactively reimburse past spend — they apply forward from the approval date.
OpenSearch Serverless or managed cluster: $7K–$10K (20–28% — listing search, faceted filters, autocomplete, vector search if applicable). ECS Fargate API tier + background workers: $8K–$11K (24–31% — REST API, search-indexing workers, order workflows). Aurora PostgreSQL: $5K–$7K (15–20% — listings, orders, user records for both sides). SES + SNS + Pinpoint: $3K–$5K (9–14% — transactional email, push notifications, in-app messages). CloudFront + S3: $2K–$3K (6–9% — image delivery, static frontend). Cognito (two user pools): $1K–$2K (3–6% — buyer + seller authentication). CloudWatch + observability: $1K–$2K (3–6%). NAT Gateway + networking: $1K–$2K (3–6%). Net runway: ~14–18 months at $2K–$2.5K/month average burn.
Search relevance is the difference between a marketplace where buyers find what they want and one where the supply side leaves. Most marketplaces converge on OpenSearch (managed or Serverless) as the indexing layer, and the cost typically lands at 20–30% of the AWS bill at seed stage, climbing to 30–40% as catalogs grow past 100K listings or vector-search features are added for visual or semantic matching.
OpenSearch Serverless vs managed. OpenSearch Serverless (OCU-based pricing) is the friendlier choice for seed-stage marketplaces with bursty query patterns and catalogs under 50K listings. A seed-stage marketplace running 6 OCUs (the typical baseline of 4 indexing + 2 search) pays roughly $1,200–$1,600/month at us-east-1 pricing. Managed OpenSearch with reserved instances is cheaper at sustained moderate load — usually crossing parity around 80K–120K listings or when catalog updates become continuous rather than bursty.
The relevance tuning problem. Marketplaces that deploy OpenSearch with default analyzers and no relevance tuning typically see search-to-purchase conversion 30–50% below marketplaces that invest in tuning. The tuning work — stopword lists per locale, synonym dictionaries for category nomenclature, score boosting on freshness or seller rating, fuzziness configured for the catalog's typical query length — is most often delivered as a partner engagement. Build for AWS (partner labor, $10K–$75K of funded work) is the pool that funds this delivery without consuming the credit balance.
Vector search for visual or semantic matching. Marketplaces that add image-similarity search (used in second-hand fashion, handmade goods, art) or natural-language semantic search typically use OpenSearch's k-NN plugin against embeddings generated by Bedrock's Titan Multimodal Embeddings or Cohere Embed. Embeddings cost is small per call but compounds at catalog scale; a marketplace generating embeddings for 200K listings at Titan Multimodal pricing is a few hundred dollars one-time, plus continuous embedding generation for new listings.
How partner-led engagements set up relevance tuning. CloudRoute routes search-heavy marketplaces preferentially to partners with explicit OpenSearch implementation history. The typical Build for Startups + Build for AWS combined engagement for a marketplace at seed includes: OpenSearch Serverless cluster provisioning, index template design with locale-specific analyzers, relevance configuration with boosting tuned to the marketplace's vertical, autocomplete via OpenSearch completion suggesters, faceted filter implementation, and an initial backfill of the existing catalog. The engagement runs 3–6 weeks; the credit pool covers the OpenSearch consumption during the engagement; the partner labor is funded separately via Build for AWS.
Marketplaces almost always offload PCI-DSS scope to a third-party processor because the alternative (handling PAN data directly) requires PCI Level 1 attestation that's incompatible with seed-stage cash flow. The three patterns marketplaces converge on — Stripe Connect, Adyen MarketPay, and AWS Marketplace SaaS billing — each affect the credit application framing differently.
Stripe Connect (the default in 2026). The dominant pattern for marketplaces under $50M GMV/year. Stripe holds the cardholder data, splits payments between buyer payment and seller payout, and handles regulatory disclosures for the marketplace operator. AWS-side responsibilities reduce to webhook handling (Lambda receiving Stripe events into DynamoDB for idempotency), payout reconciliation (Step Functions orchestrating ledger updates), and KYC handoff (passing seller information to Stripe Connect onboarding flows). PCI scope is reduced to SAQ A — the lowest level — and most marketplaces never even file SAQ A because Stripe operates the merchant of record relationship.
Adyen MarketPay. Common at GMV above $50M/year, particularly for marketplaces with international supply or buyer sides. Adyen offers more sophisticated payout logic, multi-currency net settlement, and platform fees on local payment methods (iDEAL, Sofort, Pix, etc.) that Stripe handles less cleanly. AWS-side architecture is similar to the Stripe pattern but adds reconciliation against Adyen's multi-currency settlement reports.
AWS Marketplace SaaS billing. A smaller but growing pattern for B2B marketplaces where buyers are enterprises with AWS spend commits. The marketplace lists subscription tiers or usage-based products on AWS Marketplace; buyers pay via their existing AWS billing relationship; AWS handles the commercial transaction and remits to the marketplace operator. This pattern reduces both PCI scope (AWS handles the card data) and procurement friction for enterprise buyers, at the cost of paying AWS's Marketplace listing fee. Credit applications referencing AWS Marketplace SaaS billing get treated favorably — reviewers see it as consolidation onto AWS's commercial surface.
PCI scope reduction via tokenization. Whichever processor a marketplace selects, the architectural pattern is tokenization at the buyer-facing edge — the card data never traverses the marketplace's AWS environment. Token references (Stripe Payment Method IDs, Adyen recurring detail references) live in DynamoDB or Aurora; KMS encrypts these references at the application layer for an additional control. A partner-filed Build for Startups application that itemizes the tokenization architecture — including the SAQ A or out-of-scope determination — reads cleanly as a defined work package even without the full PCI Level 1 itemization fintechs file.
Marketplaces consume transactional email and push notification capacity at volumes generic SaaS doesn't approach. Every listing creates a notification to subscribed buyers; every purchase generates buyer-side confirmation, seller-side notification, payment notification, and shipping notification; every message between buyer and seller is a notification surface. SES, SNS, and Pinpoint are the typical stack, and the line item compounds quickly.
SES at marketplace scale. A seed-stage marketplace with 5,000 active sellers and 30,000 monthly active buyers easily sends 350K–500K transactional emails per month — purchase confirmations, listing alerts, message notifications, weekly summary digests, password resets, KYC-related notices. SES pricing at $0.10 per 1,000 outbound emails is forgiving at this volume ($35–$50/month for raw send cost), but the supporting infrastructure adds materially: dedicated IPs ($24.95/month each, typically 2–4 at seed for deliverability), the Virtual MTA (VDM) configuration for warm-up management, bounce and complaint handling via SNS topics, and SES Mail Manager rules for inbound replies. Total SES-stack cost at the volumes described: $400–$800/month.
SNS for push and fanout. Push notifications via SNS Mobile Push (APNs for iOS, FCM for Android) cost roughly $0.50 per million publishes plus the carrier-side delivery cost (which SNS abstracts). Marketplaces with iOS + Android apps and active in-app messaging often issue 2M–10M push notifications per month, landing the SNS line at $50–$200/month. SNS topics for fanout (one event triggering multiple downstream consumers — search reindex, email send, analytics write, audit log) are typically a smaller fraction.
Pinpoint for cross-channel orchestration. Marketplaces that mature past simple per-event notifications often consolidate onto Pinpoint, which orchestrates email + push + SMS + in-app from a single campaign definition. Pinpoint MAU-style pricing ($1.20 per active endpoint per month above the free tier) becomes meaningful at 50K+ endpoints; cost-conscious marketplaces sometimes split — keeping high-volume transactional flows on raw SES + SNS while running re-engagement and lifecycle campaigns through Pinpoint.
Why this burns credits faster than typical SaaS. A B2B SaaS at $5K/month AWS spend sends maybe 50K transactional emails per month (largely password resets, user invites, system alerts). A marketplace at the same $5K/month spend sends 10× that volume because every transactional event touches both sides of the marketplace plus optionally subscribed observers. The notification stack ends up at 8–14% of marketplace AWS spend versus 1–3% for typical SaaS. Partner-filed applications that itemize the SES + SNS + Pinpoint surface — including projected monthly send volumes — get credit allocations calibrated against actual marketplace consumption rather than against a SaaS-default assumption.
Marketplaces that operate across more than one geography face decisions other startup verticals can often defer. Where do listings index? Where does user data reside? Where do transactional emails originate to maintain deliverability? The region selections affect both the credit application framing (partners file against the deployment topology) and the credit pool durability (multi-region infrastructure compounds cost across regions).
Brazilian marketplaces converge on sa-east-1 (São Paulo) as the regional anchor for LGPD-aligned data residency. Customer personal data for both buyers and sellers lives in sa-east-1 — Aurora encrypted at rest, S3 with bucket policies pinning region, CloudFront edge cached but origin in sa-east-1. The LGPD consent architecture is multi-party in marketplaces (buyer consent for transactional notifications, seller consent for payout-related notices, shared consent for the marketplace operator's analytics use) and partner-filed applications that itemize this consent architecture land at the Build for Startups ceiling.
LATAM marketplaces expanding beyond Brazil (Mexico, Colombia, Argentina, Chile) often retain sa-east-1 as the primary region but add CloudFront's LATAM PoPs for edge delivery. The credit-application framing remains LGPD-anchored unless Mexican federal LFPDPPP or Argentine PDPA scope is in active scope.
European marketplaces sit in eu-west-1 (Ireland) or eu-central-1 (Frankfurt) depending on customer base and partner availability. GDPR consent architecture is similar to LGPD in structure but adds the right-to-erasure mechanics (buyer or seller requesting deletion triggers cascading deletes across Aurora, OpenSearch, S3 archives, CloudWatch Logs within the retention windows). Partner-filed applications that itemize the right-to-erasure workflow read as a defined GDPR-aligned work package — particularly valuable for marketplaces planning enterprise B2B expansion where DPA negotiations come up.
Indian marketplaces deploy in ap-south-1 (Mumbai) or ap-south-2 (Hyderabad). Payment-related data localization rules under RBI (for marketplaces involved in financial transactions) push payment-adjacent infrastructure into ap-south-1 specifically. Marketplaces that don't touch payments directly (commerce marketplaces using Stripe Connect or Razorpay) have more flexibility on region selection but typically still anchor in ap-south-1 for latency.
Marketplaces serving Singapore, Indonesia, Vietnam, Thailand, the Philippines typically anchor in ap-southeast-1 (Singapore). The multi-jurisdiction reality (PDPA Singapore, PDP Indonesia, PDPA Thailand, with subtly different consent and breach-notification requirements) is handled at the application layer rather than per-region infrastructure. Partner-filed applications that itemize the multi-jurisdiction handling — even briefly — land favorably.
Trust and safety is a unique cost center for marketplaces. Listings need moderation (against prohibited categories, IP infringement, miscategorization), images need scanning (against adult content, violence, counterfeit identifiers), transactions need scoring (against fraud patterns, account takeover, payout abuse), and messages between buyer and seller need monitoring (against scam attempts, off-platform redirect attempts). The AWS services that satisfy these are well-defined and increasingly Bedrock-relevant.
Rekognition for image moderation. The default for marketplaces with image-heavy listings. Rekognition's content-moderation labels cover the standard prohibited categories at $1 per 1,000 images for the first 1M images per month. A marketplace receiving 30K new listing images per day runs ~900K images/month through Rekognition — roughly $900/month. The line item is modest individually but predictable.
Bedrock for text moderation. Listing descriptions, seller bios, buyer reviews, and direct messages between parties benefit from text-based moderation that catches policy violations Rekognition can't address. Bedrock with Claude Haiku as the classifier is the cost-efficient default — fast enough for synchronous moderation, cheap enough for volume. Marketplaces running 200K moderation decisions per day on Claude Haiku land at $300–$800/month depending on prompt length.
Amazon Fraud Detector and custom models on SageMaker. Marketplaces with sufficient labeled training data deploy Fraud Detector for transaction scoring at $7.50 per 1,000 predictions plus model-training costs. Marketplaces earlier in their data collection cycle often build lighter rules-based fraud signals on Lambda + DynamoDB, switching to ML-backed scoring once labeled data accrues. SageMaker hosting for custom fraud models is a real but smaller line ($200–$800/month for endpoint hosting at seed scale).
Bedrock for marketplace-specific AI workloads. The Bedrock POC pool funds defined AI POCs, and marketplaces have four high-legibility patterns: AI-powered listing optimization (seller-facing tool that rewrites titles and descriptions for search relevance), automated product descriptions (generating starter copy from image + structured attributes), customer-support chat for both sides of the marketplace (separate flows for buyer issues and seller payout questions), and content moderation classification (where Bedrock supplements Rekognition for context-dependent cases). Partner-filed Bedrock POC applications that name one of these four patterns explicitly land at $20K–$40K.
Marketplaces benefit from separating the buyer-facing and seller-facing application surfaces — not just at the UX layer but in the underlying AWS architecture. Different access patterns, different identity domains, different analytics requirements, different scaling profiles. The separation affects cost in ways founders sometimes underestimate.
Two Cognito user pools (or equivalent identity domains). Buyers and sellers carry different attributes, different verification states, different role-based access requirements. Two distinct Cognito user pools is the cleaner pattern; a single pool with role attributes is more compact but conflates the threat models. Sellers typically need stricter authentication (MFA enforced, often KYC-anchored) because payout fraud is the highest-value attack surface; buyers need lower-friction signup. Two pools at Cognito's MAU-style pricing add up to ~$0.0055 per MAU above the free tier — modest at seed but material at scale.
Separate API tiers. The seller dashboard typically reads from a larger query surface (listing performance, sales history, payout schedule, message threads with buyers, KYC status) than the buyer surface (product detail, cart, order history, messages). Many marketplaces deploy two ECS Fargate services behind separate ALBs (or path-based routing on a single ALB) to isolate scaling and observability. The cost overhead is modest but the operational benefit during traffic spikes (seasonal sellers logging in en masse for end-of-quarter reporting) is meaningful.
Analytics separated from transactional load. The seller dashboard's reporting queries — gross sales, conversion funnels, listing-level analytics — should not run against the production Aurora cluster that serves the buyer flow. The standard pattern is a Redshift cluster (or Aurora read replica with Performance Insights) populated by Lambda or Kinesis Firehose from the production write events; QuickSight as the embedded visualization layer in the seller dashboard. The Redshift line at seed-stage marketplace volumes (10–30 GB compressed data) typically lands at $200–$500/month for a small cluster.
Why partner-filed applications benefit from naming the separation. A Build for Startups application that lists "ECS Fargate API tier" reads less specifically than one that lists "ECS Fargate buyer API tier behind ALB-buyer, ECS Fargate seller dashboard API tier behind ALB-seller, Redshift cluster for seller analytics populated from Aurora via Kinesis Firehose, QuickSight embedded into the seller dashboard." The added specificity is the kind that nudges Build for Startups toward the $25K ceiling rather than the $15K mid-band.
Marketplaces that cross $5M GMV per year typically face an infrastructure consolidation decision: the analytics surface (Mixpanel, Amplitude, Heap, Segment), the search relevance tooling (often a dedicated managed search vendor at this stage), the payment-adjacent data warehouse, and the trust-and-safety stack each become candidates for consolidation onto AWS-native services. That consolidation is the migration story the Migration Acceleration Program (MAP) funds.
MAP is the AWS-funded partner program that subsidizes 25%–50% of migration costs at the Mobilize and Migrate phases. It's most familiar in fintech and enterprise modernization contexts, but marketplaces at growth stage qualify well because the migration story is concrete: consolidating product analytics from a third-party vendor onto Redshift + QuickSight + EventBridge, lifting search from a hosted vendor onto OpenSearch Serverless with relevance tuning, building a marketplace-grade fraud detection pipeline on Fraud Detector or SageMaker rather than continuing to pay per-decision pricing to a vendor.
A marketplace at $5M–$15M GMV with monthly analytics spend of $4K–$12K (across Mixpanel + Segment, typical), monthly search vendor spend of $3K–$8K, and monthly fraud-detection vendor spend of $2K–$6K is a candidate to consolidate $9K–$26K/month of third-party spend into AWS-native services. The consolidation migration itself runs 8–16 weeks; MAP funds 25%–50% of the partner labor; Activate Portfolio credits cover the AWS consumption during and after the migration.
The credit-application framing at this stage shifts from seed-stage Build for Startups itemization toward growth-stage Portfolio + MAP combined. A growth-stage marketplace working through CloudRoute typically files: Activate Portfolio ($75K–$100K depending on ARR / GMV signals), Build for Startups ($25K, scoped to the specific consolidation work), MAP application for the partner-delivered migration labor, and Bedrock POC if the consolidation includes AI workloads (which it often does at this stage as marketplaces add generative-AI seller tools or buyer-side recommendation engines).
Marketplaces that defer this consolidation past $10M GMV often pay an opportunity cost in the form of compounding third-party vendor lock-in — vendors that were appropriately priced at $1M GMV become disproportionately expensive at $10M+ and harder to migrate off as data accumulates. The credit + MAP window at $5M–$10M GMV is when the migration economics are most favorable.
| Track | Ceiling | Filed by | Time-to-balance | Marketplace relevance | Stackable? |
|---|---|---|---|---|---|
| Activate Founders (self-serve) | $5K | You | 3–7 days | Bridge while partner-filed processes | Yes, with Build + Portfolio |
| Build for Startups (partner-filed) | $5K–$25K | Partner via ACE | 10–18 days | OpenSearch + SES + Cognito itemization = $25K ceiling | Yes — adds on top of Portfolio |
| Activate Portfolio — VC submits | $50K–$100K | Your VC | 10–28 days | Series-A marketplaces; $75K typical for Seed-strong | Yes, with Build + Bedrock |
| Activate Portfolio — Partner submits | $50K–$100K | Partner via ACE | 11–18 days | Same — when VC is slow to file | Yes, with Build + Bedrock |
| Bedrock POC funding | $10K–$50K | Partner via ACE | 14–28 days | Listing optimization, automated descriptions, moderation, support chat | Yes — Bedrock-earmarked |
| Build for AWS (partner-labor) | $10K–$75K of funded work | Partner files | 21–42 days | OpenSearch relevance tuning, multi-region landing zone, trust + safety | Yes — labor subsidy, not credits |
| MAP (Migration Acceleration Program) | 25–50% of migration costs | Partner files | 21–42 days | Growth-stage consolidation onto AWS-native analytics, search, fraud | Yes — additive to Activate credits |
Marketplaces face a consent architecture other startup verticals don't: every transaction involves three parties (buyer, seller, marketplace operator), each of whom may have different consent rights, different data exposure, and different deletion rights. LGPD, GDPR, and CCPA all treat marketplace operators as data controllers for the data the marketplace collects directly and joint controllers (or processors) for the data shared between buyers and sellers via the marketplace.
The multi-party consent surface. A Brazilian buyer purchasing from a Brazilian seller on a Brazilian marketplace generates: buyer consent for transactional notifications about the purchase, buyer consent (separate) for marketing notifications about future purchases, seller consent for payout notifications and tax-reporting communications, joint consent (implicit in the transaction but documented) for the seller to receive the buyer's shipping address. LGPD requires each of these to be auditable and revocable independently. The same buyer can revoke marketing consent while retaining transactional consent; can request deletion of their account without affecting the historical order record the seller needs for accounting.
Architectural implications. The consent state is itself a record set — typically DynamoDB with consent timestamp, scope, source (signup, settings page, prompted in-app), and revocation tracking. The deletion mechanics ripple through Aurora (account record), OpenSearch (reviews and seller profile), S3 (uploaded ID documents from KYC), CloudWatch Logs (within retention windows), and the analytics surface (Redshift or third-party tools that need a delete signal forwarded). Partner-filed applications that itemize this deletion pipeline read as a defined LGPD or GDPR work package and approve at the Build for Startups ceiling.
CCPA / CPRA for US-California buyers. Marketplaces operating in the US face California's CCPA / CPRA framework, which adds Do Not Sell / Share signals (handled via the Global Privacy Control header) and right-to-know requests. The technical implementation overlaps with GDPR right-to-access but the consent architecture is opt-out by default rather than opt-in.
Why partner-filed framing matters here. A marketplace founder who writes "we comply with applicable data protection laws" in a credit application provides no work package for the reviewer to scope against. A founder whose partner files "LGPD-aligned multi-party consent architecture on DynamoDB with audit trail in CloudTrail data events, right-to-erasure pipeline cascading across Aurora and OpenSearch via EventBridge + Lambda within the LGPD 15-day response window, CCPA Global Privacy Control header handling at CloudFront" provides exactly the kind of itemization that lands at the ceiling.
The three realistic outcomes for a marketplace startup applying for credits in 2026.
| Variable | Self-serve only | Partner-filed marketplace stack | Full marketplace + AI + MAP stack |
|---|---|---|---|
| Credit ceiling | $5K | $25K–$80K (seed) or $50K–$125K (Series-A) | $155K credits + Build for AWS labor + MAP-funded migration |
| Time-to-balance | 3–7 days | 11–18 days | 14–28 days |
| Founder hours | ~30 min | ~60 min | ~90 min |
| Validity window | 12 months | 12–18 months | 24 months (Portfolio dominates) |
| Reviewer queue | self-attested (low ceiling) | partner-attested (high ceiling) | partner-attested + Bedrock + MAP |
| OpenSearch itemization | Self-attested | Itemized in Build for Startups | Itemized + relevance tuning via Build for AWS |
| Payments scope (Stripe Connect / Adyen) | Not in scope | Itemized for PCI scope reduction | Itemized + reconciliation workflows |
| Notification stack (SES + SNS + Pinpoint) | Not in scope | Itemized | Itemized at projected scale |
| Bedrock workload covered | No | Optional | Yes (up to $50K Bedrock-earmarked) |
| Multi-region landing zone | Not in scope | Region-pinned to deployment | Multi-region setup as partner engagement |
| Cost to founder | $0 | $0 | $0 |
Situation: Brazilian B2C marketplace for second-hand fashion. Operating on DigitalOcean droplets with a managed PostgreSQL and a hosted Algolia search account. ~12K active sellers, ~75K monthly active buyers, $180K GMV in the trailing month. KASZEK-backed seed round closed six months prior. Founders wanted to migrate to AWS sa-east-1 for LGPD-aligned residency, reduce search vendor spend by moving to OpenSearch Serverless, and add AI-assisted listing optimization for sellers (rewriting titles and descriptions to improve search relevance). Did not handle payments directly — used Stripe Connect with Brazilian local payment methods.
What CloudRoute did: Routed within 21 hours to a São Paulo-based AWS Advanced-tier partner with explicit OpenSearch + LGPD + sa-east-1 engagement history. Partner filed Activate Portfolio ($75K — Seed-strong with tier-1 LATAM accelerator vouch) on day 5, Build for Startups ($25K, LGPD multi-party consent itemized + OpenSearch + SES + Stripe Connect tokenization + Cognito two-pool architecture) on day 6, and Bedrock POC ($30K, AI-assisted listing optimization on Claude Sonnet with measurable search-relevance improvement as the evaluation metric) on day 7.
Outcome: All three credit tracks approved within day 17. Total credits applied: $130K. DigitalOcean-to-sa-east-1 migration completed by week 6. OpenSearch Serverless production cluster with relevance tuning live by week 5 — search-to-purchase conversion improved 24% measured against the prior Algolia baseline. Bedrock-powered listing optimization tool shipped in week 9 to seller dashboard beta cohort. LGPD multi-party consent architecture audited by week 10. Total founder time across the engagement: ~6 hours. $35K of the $130K credit pool covered the first 14 months of AWS infrastructure spend at the marketplace's actual consumption rate; the remaining balance funds the growth-stage transition past $5M GMV.
engagement window: 12 weeks · founder time: ~6 hours · credits secured: $130K · search relevance improvement: 24%
No discovery theater. We route within 24 hours to a partner familiar with OpenSearch Serverless + Stripe Connect + SES at marketplace scale + multi-region landing zones. Credits land in 11–18 days.