Anthropic (Claude API)
Headquarters: United States. Trust center or security page: trust.anthropic.com. Checked 2026-10-29. API prices: price tracker.
Certifications and attestations
| Name | Scope | Source |
|---|---|---|
| SOC 2 Type 2 | This service | trust.anthropic.com |
| ISO/IEC 27001:2022 | This service | trust.anthropic.com |
| ISO/IEC 42001:2023 | This service | trust.anthropic.com |
| CSA STAR | This service | trust.anthropic.com |
| NIST 800-171 | This service | trust.anthropic.com |
| FedRAMP High Claude for Government only, not the regular Claude API | Other product only | trust.anthropic.com |
Reports are usually available under NDA from the trust center. A company-wide certificate doesn't always cover every AI product; check the report's scope.
HIPAA: BAA / HIPAA eligible
“Anthropic offers two data handling arrangements for the Claude API: zero data retention (ZDR) and HIPAA readiness”
Source: docs.claude.com
Zero data retention: On request / approval
“To request ZDR for your organization, contact the Anthropic sales team”
Source: docs.claude.com
Training on API data: Not used for training by default
“Anthropic may not train models on Customer Content from Services.”
Source: anthropic.com
Default retention: Deleted within 30 days
“For Anthropic API users, we automatically delete inputs and outputs on our backend within 30 days of receipt or generation”
Source: privacy.anthropic.com
EU data residency: No
Claude API is global by default; the only first-party residency option documented is US-only inference (inference_geo: "us", 1.1x price).
Source: docs.anthropic.com
From the BranoLabs price tracker provider registry.
Data processing agreement: mentioned at trust.anthropic.com.
Something changed or wrong? Use the bug link in the footer. Back to all providers.