Registry / compare
Anthropic API vs Claude via AWS Bedrock
The same dimension can grade differently depending on who serves the model. Every cell links to its source; grades are evidence grades, not endorsements.
| Dimension | Anthropic API | Claude via AWS Bedrock |
|---|---|---|
| SOC 2 Type II | ◐Yes, sales-gated Anthropic lists the SOC 2 Type II report in its Trust Center but requires a request to obtain it, confirming it is not publicly downloadable. | ◐Yes, sales-gated Anthropic’s Trust Center lists a SOC 2 Type II report and requires a request form to view it, confirming the report is available but not public. |
| ISO 27001 | ●Yes, public Anthropic's own support page publicly lists ISO 27001:2022 as a certification it maintains, with no login or sales gate to see that claim — making it yes_public, not... | ●Yes, public trust.anthropic.com is Anthropic's own authoritative trust portal and shows ISO 27001 marked ✅ in its scope table; per the ISO 42001 precedent, Anthropic's own certification... |
| ISO 42001 | ●Yes, public Anthropic's own news page publicly confirms ISO/IEC 42001 certification for its AI management system, which encompasses the Anthropic API. | ●Yes, public Anthropic’s own public announcement confirms ISO/IEC 42001 certification for its AI management system, which covers Claude on any platform including AWS Bedrock. |
| Trust center | ●Yes, public The Anthropic trust center page is publicly accessible and contains the quoted statement, confirming a maintained compliance portal. | ●Yes, public AWS Artifact is a publicly accessible self‑service portal that provides on‑demand access to compliance reports for AWS services and ISVs, covering Claude offered via Bedrock. |
| HIPAA BAA | ◐Yes, sales-gated Anthropic’s own privacy page confirms a BAA exists for the API but can only be activated after the primary owner signs it and coordinates with sales, satisfying the sales‑gated... | ◐Yes, sales-gated AWS offers a BAA through its Artifact portal and lists Amazon Bedrock as a HIPAA‑eligible service, so a HIPAA BAA can be signed for Claude via Bedrock, but access is gated... |
| GDPR DPA | ●Yes, public The DPA is publicly available, defines SCCs, and authorizes Subprocessors listed in Schedule 4, which Anthropic publishes at https://trust.anthropic.com/subprocessors,... | ●Yes, public The AWS DPA on AWS's own domain is public, incorporates SCCs, and its §6.1 confirms a published subprocessor list, satisfying yes_public for the Bedrock platform's DPA. |
| No-training default | ●Yes, public Verified verbatim on Anthropic's own privacy domain, covering the Anthropic API by name; a public commitment with no gate, so yes_public is correct. | ●Yes, public The AWS Bedrock FAQ publicly states that customer content, including API data, is not used to train or improve the underlying models, covering Claude via Bedrock. |
| Retention / ZDR | ◐Yes, sales-gated Anthropic’s official docs publicly describe data retention and state ZDR is available only after contacting the sales team, matching yes_sales_gated. | ◔Partial Retention is publicly documented and self-serve configurable, but ZDR access for Claude models is gated behind AWS/Anthropic account representative approval, fitting partial... |
| Residency | ◔Partial Anthropic's official data residency docs confirm self‑serve region pinning exists but is limited to US only, so EU pinning is not possible, matching a partial answer. | ●Yes, public AWS Bedrock model card explicitly states the EU geo inference ID keeps data within EU regions, confirming data can be pinned to an EU region. |
| GPAI Code | ●Yes, public Anthropic is listed among the signatories on the EU Commission's public GPAI Code of Practice signatory list. | ●Yes, public Anthropic is listed among the public signatories of the GPAI Code of Practice on the European Commission site. |
| Art. 53 summary | ◐Yes, sales-gated Anthropic lists the training‑data summary PDFs in its Trust Center but the page requires a request‑access step, so the Art. 53 summary is not publicly available. | ◐Yes, sales-gated Anthropic lists a Claude Sonnet 5 Training Data Summary but gated behind a request‑access form, meeting the definition of yes_sales_gated. |