Registry / compare

Claude via AWS Bedrock vs Claude via Google Vertex AI

The same dimension can grade differently depending on who serves the model. Every cell links to its source; grades are evidence grades, not endorsements.

Dimension	Claude via AWS Bedrock	Claude via Google Vertex AI
SOC 2 Type II	◐Yes, sales-gated Anthropic’s Trust Center lists a SOC 2 Type II report and requires a request form to view it, confirming the report is available but not public.	◐Yes, sales-gated Anthropic lists the SOC 2 Type II report in its Trust Center but gates the PDF behind a request form, confirming the report is available yet not publicly downloadable.
ISO 27001	●Yes, public trust.anthropic.com is Anthropic's own authoritative trust portal and shows ISO 27001 marked ✅ in its scope table; per the ISO 42001 precedent, Anthropic's own certification...	●Yes, public Anthropic's own trust center publicly shows ISO 27001 with ✅ for rows applicable to "the model itself and containers supplied to partners," which covers Claude on any platform...
ISO 42001	●Yes, public Anthropic’s own public announcement confirms ISO/IEC 42001 certification for its AI management system, which covers Claude on any platform including AWS Bedrock.	●Yes, public Anthropic’s own public announcement confirms ISO/IEC 42001 certification for its AI management system, which applies to Claude regardless of deployment.
Trust center	●Yes, public AWS Artifact is a publicly accessible self‑service portal that provides on‑demand access to compliance reports for AWS services and ISVs, covering Claude offered via Bedrock.	●Yes, public Google Cloud provides a publicly accessible Trust Center page that aggregates security, privacy, and compliance information, serving as a maintained compliance portal for...
HIPAA BAA	◐Yes, sales-gated AWS offers a BAA through its Artifact portal and lists Amazon Bedrock as a HIPAA‑eligible service, so a HIPAA BAA can be signed for Claude via Bedrock, but access is gated...	●Yes, public Google's own support page shows the HIPAA BAA is accepted self-serve in the Cloud console (Review and Accept / I Accept), so it is publicly available with no sales gate — not...
GDPR DPA	●Yes, public The AWS DPA on AWS's own domain is public, incorporates SCCs, and its §6.1 confirms a published subprocessor list, satisfying yes_public for the Bedrock platform's DPA.	●Yes, public Verified the recorded quote and subprocessor reference on Google's own authoritative DPA page; SCCs are included and a public subprocessor list is published, satisfying yes_public.
No-training default	●Yes, public The AWS Bedrock FAQ publicly states that customer content, including API data, is not used to train or improve the underlying models, covering Claude via Bedrock.	●Yes, public Google's publicly available data‑governance page explicitly states a default no‑training commitment that applies to all managed models on Vertex AI, including Claude.
Retention / ZDR	◔Partial Retention is publicly documented and self-serve configurable, but ZDR access for Claude models is gated behind AWS/Anthropic account representative approval, fitting partial...	●Yes, public The provider’s own data‑governance page documents retention policy and describes how to achieve zero data retention for all managed models, which includes partner models like...
Residency	●Yes, public AWS Bedrock model card explicitly states the EU geo inference ID keeps data within EU regions, confirming data can be pinned to an EU region.	●Yes, public Google Cloud's own blog documents self-serve EU multi-region endpoints for Claude on Vertex AI (now generally available), confirming public, non-gated EU data-residency pinning.
GPAI Code	●Yes, public Anthropic is listed among the public signatories of the GPAI Code of Practice on the European Commission site.	●Yes, public The EC's official GPAI Code of Practice signatory list publicly includes Anthropic, confirming the model developer of Claude is a signatory.
Art. 53 summary	◐Yes, sales-gated Anthropic lists a Claude Sonnet 5 Training Data Summary but gated behind a request‑access form, meeting the definition of yes_sales_gated.	◐Yes, sales-gated The Anthropic Trust Center page lists the Claude Sonnet 5 training-data summary but notes access requires a request form, confirming it exists but is not publicly available.