The EU-US Data Privacy Framework, explained for vendor reviews
Solomon Amos · 7 Sep 2026 · 10 min read
Regulatory evidence
Anthropic, PBC is an American artificial intelligence (AI) public benefit corporation headquartered in San Francisco, California
For each regulation, how many of the requirements it places on your vendors Anthropic’s public evidence reaches. Open one for every item with its date and source.
What the vendor lists, typed; public items can be read now, the rest are available on request.
40 documents listed on Anthropic’s trust centre
trust.anthropic.comAnswers the vendor publishes to questions buyers ask, quoted with the link to where it says so.
Where data is hosted or processed
Where are your data centers located?
“For more information, please view this post.”
as of 21 Sep 2026Source
Use of customer data to train models
Will you be using our Claude for Work conversations to train your generative models?
“No. By default, we will not use your chats or coding sessions when using our Commercial products (Claude for Work, Anthropic API, etc.). If you provide feedback or otherwise explicitly opt-in to training, then we may use those materials to train our models. Learn more about disabling feedback for your Claude for Enterprise plan here.”
as of 21 Sep 2026Source
Solomon Amos · 7 Sep 2026 · 10 min read
CertReports Research · 18 Sep 2026 · 12 min read
This maps third-party obligations to the vendor evidence that may support them. It is not legal advice and never a statement that a vendor or its customers comply; confirm scope and sufficiency with your counsel or auditor. “No public evidence” means nothing public was found at the last check. Citations link to the official text.