Registry / compare
Anthropic API vs Claude via AWS Bedrock
The same dimension can grade differently depending on who serves the model. Every cell links to its source; grades are evidence grades, not endorsements.
| Dimension | Anthropic API | Claude via AWS Bedrock |
|---|---|---|
| SOC 2 Type II | ◐Yes, sales-gated The SOC 2 Type II report is listed in Anthropic's Trust Center but is only obtainable after submitting a request‑access form, confirming it is not publicly downloadable. | ◐Yes, sales-gated Audit confirmed: trust.anthropic.com is Anthropic's own Trust Center showing SOC 2 Type 2 in scope with the "Type 2 SOC 2 and CSA STAR L2 Report.pdf" resource, but sensitive... |
| ISO 27001 | ●Yes, public The Anthropic support article publicly confirms that ISO 27001:2022 applies to the Anthropic API. | ●Yes, public Anthropic’s Trust Center publicly lists ISO 27001 certification as covering the model itself, which includes Claude when offered via AWS Bedrock. |
| ISO 42001 | ●Yes, public Anthropic's own news page publicly confirms ISO/IEC 42001 certification for its AI management system, which includes the API offering. | ●Yes, public Anthropic, the developer of Claude, publicly confirms ISO/IEC 42001 certification for its AI management system, which by policy covers Claude on all platforms including AWS Bedrock. |
| Trust center | ●Yes, public The Anthropic Trust Center loads publicly and provides compliance artifacts, confirming a maintained public compliance portal. | ●Yes, public AWS Artifact is a publicly documented, self‑service compliance portal that all AWS accounts can access, confirming a maintained trust center. |
| HIPAA BAA | ◐Yes, sales-gated Anthropic’s own trust‑portal page confirms a BAA is offered for the API but must be signed by the organization’s Primary Owner and enabled via a sales contact, matching yes_sales_gated. | ◐Yes, sales-gated AWS lists Amazon Bedrock as HIPAA‑eligible but requires customers to first sign an AWS Business Associate Agreement, which is only available through the gated AWS Artifact portal. |
| GDPR DPA | ●Yes, public Anthropic publishes a DPA that defines SCCs and references Schedule 4, and its subprocessor list is publicly available at https://www.anthropic.com/subprocessors, meeting the... | ●Yes, public AWS provides a publicly accessible GDPR Data Processing Addendum that includes SCC language and references a publicly listed sub‑processor page, covering all AWS services... |
| No-training default | ●Yes, public Anthropic’s own privacy page publicly states that API inputs/outputs are not used for model training by default. | ●Yes, public The AWS Bedrock FAQ publicly commits that customer content is not used to improve base models, confirming a default no‑training‑on‑API‑data policy for Claude via Bedrock. |
| Retention / ZDR | ◐Yes, sales-gated The provider’s own documentation publicly describes its API data‑retention policy and states that ZDR is available only through a sales‑gated request. | ◔Partial AWS docs confirm retention settings are publicly documented and state that ZDR applies only to pre‑Fable 5 Claude models, so the claim is only partially satisfied. |
| Residency | ◔Partial Official Anthropic docs show workspace geo limited to US and inference_geo only 'us' or 'global', so data cannot be pinned to the EU, making the answer partial. | ●Yes, public AWS Bedrock model card for Claude Sonnet 5 publicly lists an EU inference profile that pins data to EU regions. |
| GPAI Code | ●Yes, public The EU Commission's official GPAI Code of Practice signatory list on its website includes Anthropic, confirming the model developer is a signatory. | ●Yes, public Anthropic is listed among the signatories on the EU Commission's official GPAI Code of Practice signatory page, confirming the model developer is a signatory. |
| Art. 53 summary | ◐Yes, sales-gated Anthropic's own Trust Center lists the Claude Sonnet 5 training‑data summary but indicates it is behind a request‑access form, matching the definition of a sales‑gated publication. | ◐Yes, sales-gated Anthropic’s Trust Center page for the Claude Sonnet 5 training‑data summary is gated behind a request‑access form, confirming the summary is not publicly available. |