Skip to main content
Anthropic logo

Anthropic

Regulatory evidence

Anthropic, PBC is an American artificial intelligence (AI) public benefit corporation headquartered in San Francisco, California

anthropic.comAI infrastructureLast verified 21 Sep 2026

Anthropic against third-party requirements

For each regulation, how many of the requirements it places on your vendors Anthropic’s public evidence reaches. Open one for every item with its date and source.

Documents on the trust centre

What the vendor lists, typed; public items can be read now, the rest are available on request.

40 documents listed on Anthropic’s trust centre

trust.anthropic.com
  • AI policy or governance framework
    • Anthropic Frontier Compliance Frameworkpublic · seen 21 Sep 2026
  • Architecture or data-flow diagram
    • [Anthropic] - Infrastructure Diagram - April 2025on request · seen 21 Sep 2026
    • Claude Cowork Desktop Security Architecture Overviewon request · seen 21 Sep 2026
    • Claude for Excel, Powerpoint, Word: Architecture Overview (Anthropic first party)public · seen 21 Sep 2026
    • Claude for Excel, Powerpoint, Word: Architecture Overview (Third party platforms)public · seen 21 Sep 2026
    • Microsoft 365 connector for Claude: architecture and data flowspublic · seen 21 Sep 2026
  • SOC 2 bridge letter
    • [Anthropic] 2026 SOC 2 Bridge Letter.pdfon request · seen 21 Sep 2026
  • HIPAA assessment report
    • [Anthropic] 2025 Type 1 HIPAA - Report (C4E).pdfon request · seen 21 Sep 2026
    • [Anthropic] 2025 Type 1 HIPAA Report (1P API).pdfon request · seen 21 Sep 2026
  • ISO certificate
    • [Anthropic] ISO 27001 Certificate (2025).pdfpublic · seen 21 Sep 2026
    • [Anthropic] ISO 42001 Certificate (2025).pdfpublic · seen 21 Sep 2026
  • ISO 27001 statement of applicability
    • [Anthropic] - ISO Statement of Applicabilityon request · seen 21 Sep 2026
  • AI model documentation
    • AB 2013 Training Data Summarypublic · seen 21 Sep 2026
    • Claude Mythos 5 + Fable 5 Model Documentation Formpublic · seen 21 Sep 2026
    • Claude Mythos 5 and Claude Fable 5 Training Data Summarypublic · seen 21 Sep 2026
    • Claude Mythos 5.1 & Fable 5.1 Model Documentation Formpublic · seen 21 Sep 2026
    • Claude Mythos 5.1 & Fable 5.1 Training Data Summarypublic · seen 21 Sep 2026
    • Claude Mythos Preview Model Documentation Formpublic · seen 21 Sep 2026
    • Claude Mythos Preview Training Data Summarypublic · seen 21 Sep 2026
    • Claude Opus 4.7 Model Documentation Formpublic · seen 21 Sep 2026
    • Claude Opus 4.7 Training Data Summarypublic · seen 21 Sep 2026
    • Claude Opus 4.8 Model Documentation Formpublic · seen 21 Sep 2026
    • Claude Opus 4.8 Training Data Summarypublic · seen 21 Sep 2026
    • Claude Opus 5 Model Documentation Formpublic · seen 21 Sep 2026
    • Claude Opus 5 Training Data Summarypublic · seen 21 Sep 2026
    • Claude Sonnet 5 Model Documentation Formpublic · seen 21 Sep 2026
    • Claude Sonnet 5 Training Data Summarypublic · seen 21 Sep 2026
  • Penetration test report
    • [Anthropic] 2025 Annual Penetration Testing Reportson request · seen 21 Sep 2026
  • Security questionnaire (SIG, CAIQ, HECVAT)
    • [Anthropic] - CAIQ Full (June 2026)on request · seen 21 Sep 2026
    • [Anthropic] - HECVAT v4.1.6 (June 2026)on request · seen 21 Sep 2026
    • [Anthropic] - SIG Lite (June 2026)on request · seen 21 Sep 2026
    • [Anthropic] - VSA Core (June 2026)on request · seen 21 Sep 2026
  • Security policy or overview
    • [Anthropic] CMEK - Cryptographic Design Whitepaperon request · seen 21 Sep 2026
    • [Anthropic] Identity & Access Controlspublic · seen 21 Sep 2026
    • Claude Desktop Security Overview (Third-party platforms)public · seen 21 Sep 2026
  • SOC 2 report
    • [Anthropic] 2025 Type 2 SOC 2 and CSA STAR L2 Report.pdfon request · seen 21 Sep 2026
  • SOC 3 report
    • [Anthropic] 2025 Type 2 SOC 3 Report.pdfpublic · seen 21 Sep 2026
  • Accessibility conformance report (VPAT)
    • [Anthropic] VPAT - Accessibility Conformance Report (ACR) - Claude Enterprise Android apppublic · seen 21 Sep 2026
    • [Anthropic] VPAT - Accessibility Conformance Report (ACR) - Claude Enterprise iOS apppublic · seen 21 Sep 2026
    • [Anthropic] VPAT - Accessibility Conformance Report (ACR) - Claude.ai Enterprise (web)public · seen 21 Sep 2026

What the vendor says

Answers the vendor publishes to questions buyers ask, quoted with the link to where it says so.

  • Where data is hosted or processed

    Where are your data centers located?

    For more information, please view this post.

    as of 21 Sep 2026Source

  • Use of customer data to train models

    Will you be using our Claude for Work conversations to train your generative models?

    No. By default, we will not use your chats or coding sessions when using our Commercial products (Claude for Work, Anthropic API, etc.). If you provide feedback or otherwise explicitly opt-in to training, then we may use those materials to train our models. Learn more about disabling feedback for your Claude for Enterprise plan here.

    as of 21 Sep 2026Source

All articles

This maps third-party obligations to the vendor evidence that may support them. It is not legal advice and never a statement that a vendor or its customers comply; confirm scope and sufficiency with your counsel or auditor. “No public evidence” means nothing public was found at the last check. Citations link to the official text.