Anthropic

Retention

Recipient will destroy Confidential Information promptly upon request, except where retained to comply with law or in automated back-up systems.

Transfer mechanism

SCCs (Module 2 controller-to-processor and Module 3 processor-to-processor) plus UK Addendum

SCC modules

Module 2 · Module 3

DPA available

Yes

Certifications

SOC 2

GDPR addressed

Yes

CCPA addressed

Yes

Tracked documents

Recent changes

Public summary; per-account review history visible to subscribers tracking this vendor.

Track Anthropic in your workspace.

Get notified when Anthropic adds a subprocessor, changes retention, updates their DPA, or quietly amends their privacy posture.