This article is about our commercial products such as Claude for Work and the Anthropic API. For our consumer products such as Claude Free, Pro, Max, Ultra, and when accounts from those plans use Claude Code, see here.
Anthropic is committed to the safety and security of our users' information and maintains the following compliance credentials:
- HIPAA-ready configuration (BAA available)
- ISO 27001:2022 (Information Security Management)
- ISO/IEC 42001:2023 (AI Management Systems)
- SOC 2 Type I & Type II
For more information and to request copies of our compliance documentation, please visit our Trust Portal.
source & further reading
privacy.claude.com — original article
Who owns and manages the data of my team?
Who owns and manages the data of my Claude for Education account?
Does Anthropic Act as a Data Processor or Controller?