LLM API Compliance
Providers / Anthropic (Claude API)

Anthropic (Claude API)

Headquarters: United States. Trust center or security page: trust.anthropic.com. Checked 2026-10-29. API prices: price tracker.

Certifications and attestations

NameScopeSource
SOC 2 Type 2This servicetrust.anthropic.com
ISO/IEC 27001:2022This servicetrust.anthropic.com
ISO/IEC 42001:2023This servicetrust.anthropic.com
CSA STARThis servicetrust.anthropic.com
NIST 800-171This servicetrust.anthropic.com
FedRAMP High
Claude for Government only, not the regular Claude API
Other product onlytrust.anthropic.com

Reports are usually available under NDA from the trust center. A company-wide certificate doesn't always cover every AI product; check the report's scope.

HIPAA: BAA / HIPAA eligible

“Anthropic offers two data handling arrangements for the Claude API: zero data retention (ZDR) and HIPAA readiness”

Source: docs.claude.com

Zero data retention: On request / approval

“To request ZDR for your organization, contact the Anthropic sales team”

Source: docs.claude.com

Training on API data: Not used for training by default

“Anthropic may not train models on Customer Content from Services.”

Source: anthropic.com

Default retention: Deleted within 30 days

“For Anthropic API users, we automatically delete inputs and outputs on our backend within 30 days of receipt or generation”

Source: privacy.anthropic.com

EU data residency: No

Claude API is global by default; the only first-party residency option documented is US-only inference (inference_geo: "us", 1.1x price).

Source: docs.anthropic.com

From the BranoLabs price tracker provider registry.

Data processing agreement: mentioned at trust.anthropic.com.

Something changed or wrong? Use the bug link in the footer. Back to all providers.