Works with Alexa Badge Requirements

Works with Alexa (WWA) badges are for products intended to be sold on the Amazon retail website. To receive and maintain the WWA badge, your product must meet the following requirements.

Product requirements

Review the following product requirements before you apply for the WWA badge.

  1. Your product has an Amazon Standard Identification Number (ASIN).
    For details about how to sign up to sell on the Amazon retail website, see Become an Amazon seller. After you have a Seller ID, you can add a new product to the store. Amazon assigns an ASIN to each individual product.
  2. The ASIN is available on the Amazon retail website, in the marketplace requested, and can't be unavailable, not valid, or suppressed.
  3. The ASIN detail page must match the product that the WWA team tested and certified. The brand, model number, and product image listed on the ASIN detail page must match the certified device.
  4. If your product connects to Alexa with a hub, the hub ASIN must be the same as the hub tested during WWA certification.
  5. If your product has an Alexa skill, the skill is available in the Amazon Alexa skill store, in the marketplace requested, and can't be unavailable, not valid, or suppressed.

If your product doesn't meet these requirements, Amazon will reject your badge request. You must correct the issues and resubmit your product for certification. For submission instructions, see Submit your product for certification.

Availability requirements

After your product receives the WWA badge, your WWA-certified devices must continue to perform at a high measure of availability to maintain eligibility for the WWA badge.

  1. Your WWA-certified devices must meet the following availability requirements.
    1. Maintain 99.93 percent availability annually. This availability measurement equates to no more than 6 hours 8 minutes of downtime per year.
    2. Have no more than five outages annually.
  2. If your WWA-certified devices approach the availability thresholds listed in (1.) and are at risk of disrupting the ability for Alexa to serve a significant number of customers, Amazon sends you an email warning.
  3. If the availability metric continues to decline and goes below the required thresholds, the ASINs associated with the WWA-certified devices will lose eligibility for the WWA program and have their WWA badge removed. Also, Amazon will suspend your ability to request WWA badges in the WWA console for new ASINs.
  4. To reinstate WWA eligibility, the impacted devices must maintain 99.93 percent availability for three consecutive months and continue to meet all existing WWA certification requirements.

Security mitigation requirements

If you or Amazon customers report a security incident that impacts your WWA-certified product, you should proceed to protect Alexa customers by following these mitigation requirements.

  1. You must identify and respond to security incidents that impact your WWA-certified product and customer data promptly.
  2. You must report security incidents based on the following classifications:
    • Low severity – Minor vulnerabilities that do not significantly impact device functionality or compromise customer data, such as temporary service interruptions or minor bugs.
    • Medium severity – Incidents that could potentially lead to unauthorized access or minor data exposure, affecting individual device settings or user preferences without widespread impact.
    • High severity – Breaches that result in significant unauthorized access to sensitive user data, including personal information or device controls, impacting more than 10,000 devices or customers or lasting for over one hour.
    • Critical severity – Severe breaches that enable complete remote control of devices by unauthorized parties, posing significant safety risks, or allowing malicious activities, such as surveillance or manipulation of smart home systems.
  3. In general low and medium severity incidents should have minimal or no exposure of Alexa customer data. Amazon reserves the right to remove WWA badges from products that fail to apply a timely fix to remediate minor vulnerabilities.
  4. Amazon permits up to one high severity incident per calendar year.

  5. When more than one high severity incident occurs in a calendar year, Amazon will immediately remove WWA badges for all certified ASINs linked to your product.

    After a full security audit performed by an independent test lab confirms that you remediated the vulnerabilities, Amazon may reinstate the WWA badge.

  6. When a critical severity incident occurs, Amazon will immediately remove WWA badges for all certified ASINs linked to your product.

    After a full security audit performed by an independent test lab confirms that you remediated the vulnerabilities, you must request Amazon to reinstate the WWA badge.

Other requirements

Skills that have high user-perceived errors (UPEs) fail to provide the user-requested action to control a smart home device or service. In particular, when Alexa receives an invalid response from your skill, it negatively impacts the user experience.

To maintain the WWA badge, you must meet the following requirements:

  • The number of INVALID_SKILL_RESPONSE_EXCEPTION errors associated with a single skill must not exceed a threshold of three percent of total request volume when measured on a rolling basis over a 30-day period.
  • If you don't mitigate the error within 90 days of the initial breach, devices related to your skill will lose eligibility for the WWA program and Amazon will remove the WWA badges.

You can view and monitor operational metrics, including UPEs, on the Analytics page on the Alexa developer console. For more details, see View error metrics.

Reinstate the WWA badge

After you correct any performance issues, you can request Amazon to reinstate your WWA badge. The WWA team reviews your request and notifies you by email. To request a badge reinstatement, contact the Amazon WWA program team and provide the following information:

  • Certification project ID.
  • List of badge ASINs.
  • Skill ID, if applicable.
  • Reason the badge was removed.
  • Mitigation results.
  • Full security audit performed by an independent test lab, if applicable.
Was this page helpful?

Last updated: Nov 12, 2024