GDPR
The DPA says Anthropic is the customer's processor and incorporates EU SCCs, Module Two or Module Three.
Checked 21 Oct 2026https://www.anthropic.com/legal/data-processing-addendum
Model API
Anthropic's commercial terms say Anthropic may not train models on Customer Content from Services. The certifications article dated 16 March 2026 lists SOC 2 Type I and Type II and a HIPAA-ready configuration with a BAA available. The DPA says Anthropic is the customer's processor and incorporates Module Two or Module Three of the EU Standard Contractual Clauses. The commercial terms do not publish an inference uptime percentage.
Checked 21 Oct 2026https://www.anthropic.com/legal/commercial-terms
The DPA says Anthropic is the customer's processor and incorporates EU SCCs, Module Two or Module Three.
Checked 21 Oct 2026https://www.anthropic.com/legal/data-processing-addendum
Checked 21 Oct 2026https://www.anthropic.com/legal/commercial-terms
Checked 21 Oct 2026https://www.anthropic.com/legal/commercial-terms
Not published
Checked 21 Oct 2026https://www.anthropic.com/legal/commercial-terms
Not published
Checked 21 Oct 2026https://www.anthropic.com/legal/commercial-terms
SOC 2 Type I and Type II.
Checked 21 Oct 2026https://privacy.claude.com/en/articles/10015870-what-certifications-has-anthropic-obtained
HIPAA-ready configuration (BAA available).
Checked 21 Oct 2026https://privacy.claude.com/en/articles/10015870-what-certifications-has-anthropic-obtained
Not published
Checked 21 Oct 2026https://platform.claude.com/docs/en/models/overview
Anthropic may not train models on Customer Content from Services.
Checked 21 Oct 2026https://www.anthropic.com/legal/commercial-terms
No training by default
Checked 21 Oct 2026https://www.anthropic.com/legal/commercial-terms
Commercial terms say Anthropic may not train models on Customer Content from Services.
Checked 21 Oct 2026https://www.anthropic.com/legal/commercial-terms
Not published
Checked 21 Oct 2026https://www.anthropic.com/legal/commercial-terms
Not published
Checked 21 Oct 2026https://www.anthropic.com/legal/commercial-terms
Checked 21 Oct 2026https://platform.claude.com/docs/en/models/overview
Not published
Checked 21 Oct 2026https://www.anthropic.com/legal/commercial-terms
No
Checked 21 Oct 2026https://www.anthropic.com/legal/commercial-terms
Entity names: Not published. https://www.anthropic.com/subprocessors redirects to the trust page, and the HTML checked on 21 Oct 2026 did not include the entity list.|Schedule 4 of the DPA points at that trust page.
Checked 21 Oct 2026https://trust.anthropic.com/subprocessors
An empty list is not a thirty-day clean window. The notice period is published in the DPA. The roster is not.
Checked 21 Oct 2026https://trust.anthropic.com/subprocessors
Anthropic will provide Customer reasonable notice of the new Subprocessor prior to giving the Subprocessor access to Customer Personal Data. Customer may object to Anthropic’s use of such Subprocessor by providing Anthropic with written notice of the objection within fifteen (15) days of the date of such notice, or Customer is deemed to consent to the new Subprocessor.
Checked 21 Oct 2026https://www.anthropic.com/legal/data-processing-addendum
https://trust.anthropic.com/subprocessors
Checked 21 Oct 2026https://trust.anthropic.com/subprocessors