Registry / compare
Anthropic API vs Claude via AWS Bedrock
The same dimension can grade differently depending on who serves the model. Every cell links to its source; grades are evidence grades, not endorsements.
| Dimension | Anthropic API | Claude via AWS Bedrock |
|---|---|---|
| SOC 2 Type II | ●Yes, public Anthropic's official help-center certifications page publicly states "SOC 2 Type I & Type II" for commercial products "such as Claude for Work and the Anthropic API". The... | ●Yes, public Two-level rule: this grades AWS (the serving platform), not Anthropic. Amazon Bedrock is listed with a checkmark on AWS's SOC services-in-scope page. The SOC 2 Type II report... |
| ISO 27001 | ●Yes, public Publicly listed on Anthropic's certifications page; certificate copies are obtained via the Trust Portal (trust.anthropic.com). | ●Yes, public AWS holds ISO/IEC 27001:2022 certification with Amazon Bedrock named on the public ISO-certified services list (also 27017/27018/27701 programs). Certificates downloadable via... |
| ISO 42001 | ●Yes, public Anthropic announced accredited ISO/IEC 42001:2023 certification on 2025-01-13, issued by Schellman (accredited by the ANSI National Accreditation Board), and states it is one... | ●Yes, public AWS holds an accredited ISO/IEC 42001:2023 AI-management-system certification; AWS announced (Nov 2024) that the initial scope covered Amazon Bedrock, Amazon Q Business, Amazon... |
| Trust center | ●Yes, public Maintained trust portal at trust.anthropic.com; Anthropic's official pages (help center, API docs) direct readers there for compliance documentation, incl. the HIPAA... | ●Yes, public AWS Artifact is the compliance portal: on-demand, self-serve access to auditor-issued reports/certifications and to agreements (e.g. the BAA) from the AWS console. Public... |
| HIPAA BAA | ◐Yes, sales-gated BAA available for the first-party API: contact Anthropic sales to sign a BAA, then Anthropic provisions a dedicated HIPAA-enabled organization that automatically blocks... | ●Yes, public Amazon Bedrock is on AWS's public HIPAA Eligible Services list. PHI use requires first entering the AWS Business Associate Addendum (accepted self-serve via AWS Artifact... |
| GDPR DPA | ●Yes, public Public DPA incorporated by reference into the Anthropic Commercial Terms of Service (no separate signature flow required). Schedule 3 contains EU SCCs, UK Addendum, and Swiss... | ●Yes, public The AWS GDPR Data Processing Addendum is incorporated automatically into the AWS Service Terms for all customers, includes the 2021 EU Standard Contractual Clauses, and AWS... |
| No-training default | ●Yes, public Commercial Terms (Customer Content section) state Anthropic may not train models on Customer Content from the Services; API docs reiterate retained data "is never used for... | ●Yes, public Bedrock FAQ: "your content is not used to improve the base models and is not shared with any model providers"; AWS and third-party model providers "will not use any inputs to... |
| Retention / ZDR | ◐Yes, sales-gated Retention is documented per-feature in public API docs: conversation content is not retained by default, feature-specific TTLs are listed, and safety-flagged content may be... | ◔Partial Retention is thoroughly documented, hence not a clean "yes". Bedrock's baseline is zero data retention and zero operator access, inputs/outputs are not stored by default, and... |
| Residency | ◔Partial Region pinning exists but is US-only. The inference_geo API parameter ("us" or "global", default global) controls where inference runs, self-serve at 1.1x pricing on... | ●Yes, public Bedrock FAQ: "Any customer content processed by Amazon Bedrock is encrypted and stored at rest in the AWS Region where you are using Amazon Bedrock." Claude is offered in EU... |
| GPAI Code | ●Yes, public Anthropic appears on the European Commission's GPAI Code of Practice signatory list. The EC page singles out xAI as having signed only the Safety and Security chapter; no such... | ●Yes, public Two-level rule: the GPAI Code of Practice is a provider (model developer) obligation, so this cell grades Anthropic, not AWS. Anthropic is on the EC's signatory list for the... |
| Art. 53 summary | ○No public evidence No public training-content summary using the EC's Article 53(1)(d) template was found on anthropic.com, the Transparency Hub, or the Trust Center as of 2026-07-05. Model/system... | ○No public evidence Grades Anthropic (model developer). No public training-content summary using the EU Commission's Article 53(1)(d) template was found on anthropic.com (Transparency Hub, news,... |