Anthropic's own hosted API for the Claude models, separate from Claude Code, Cowork, or a Claude model reached through a cloud platform such as Bedrock, Microsoft Foundry or Google Cloud's Agent Platform.
Our description, from the vendor's documentation, as of 2026-09-24.
Compliance: For Claude API, SOC 2 Type II; ISO/IEC 27001; ISO/IEC 42001; HIPAA BAA (Commercial, Enterprise; under a conditionThe mark holds only under a setting or an agreement the line names.); DPA (company-wideThe mark rests on a sentence that names no product, so check on the page whether it covers this one.).
Data: For Claude API, training use and zero-retention option stated on the maker's pageA sentence on the maker's page answers it for this product.; default retention and data residency not stated on the pages readWe read a page that could answer and found no sentence that does. It says nothing about what the maker does..
Model and where it runs: Hosted by the maker; for Claude API, model provider stated on the maker's pageA sentence on the maker's page answers it for this product.; where it can run not stated on the pages readWe read a page that could answer and found no sentence that does. It says nothing about what the maker does..
Details: What the maker's own pages state, not a compliance determination, unverified after 2026-12-23: trust page, trust.anthropic.com.
What the maker's own pages said on the dates shown, not a compliance determination.
Also covers
The vendor's own pages present these as parts or modes of this product, so each is described here and has no page of its own.
Claude Managed Agents
A hosted service from Anthropic, in beta, that runs an agent for you: it holds the loop that decides the next step, and it supplies the sandbox the agent's tools run in, either in Anthropic's cloud or on your own infrastructure through a worker process you run.
Our description, from the vendor's documentation, as of 2026-09-09.
Compliance: SOC 2 Type II (company-wideThe mark rests on a sentence that names no product, so check on the page whether it covers this one.); ISO/IEC 27001:2022 (company-wideThe mark rests on a sentence that names no product, so check on the page whether it covers this one.); ISO/IEC 42001:2023 (company-wideThe mark rests on a sentence that names no product, so check on the page whether it covers this one.); DPA (company-wideThe mark rests on a sentence that names no product, so check on the page whether it covers this one.).
Data: Training use, default retention and data residency not stated on the pages readWe read a page that could answer and found no sentence that does. It says nothing about what the maker does.; zero-retention option excluded on the maker's pageThe page places this product, or a plan or option of it, outside the item..
Model and where it runs: Hosted by the maker; model provider not stated on the pages readWe read a page that could answer and found no sentence that does. It says nothing about what the maker does.; where it can run only on some plans or optionsNothing found covers the product as a whole; what was found holds only for the plans, options or regions named. (“Self-hosted sandboxes”).
Details: What the maker's own pages state, not a compliance determination, unverified after 2026-12-23: trust page, trust.anthropic.com.
What the maker's own pages said on the dates shown, not a compliance determination.
Our reading of vendors' pages, as of the dates shown. Confirm on the vendor's page before relying on any line that cites it. To report an error write to report@crinaro.ai