Claude via Google Vertex AI

Anthropic’s Trust Center lists SOC 2 Type II coverage for Claude and the report is only available after a gated request, confirming sales‑gated availability.

To access sensitive documents, please click the "request access" button at the top of the page and complete the request form.

source

Anthropic’s public Trust Center shows ISO 27001 certification with a note that it applies to the Claude model and partner‑supplied containers, thus covering Claude when offered via Google Vertex AI.

(Only applicable to the model itself and containers supplied to partners by Anthropic)

source

Anthropic's public ISO/IEC 42001 certification for its AI management system covers Claude, so the model on Google Vertex AI is certified.

We are excited to announce that Anthropic has achieved accredited certification under the new ISO/IEC 42001:2023 standard for our AI management system.

source

Google Cloud's own trust center (cloud.google.com/trust-center) is a publicly accessible, maintained compliance portal covering Google Cloud products including Vertex AI, and the recorded quote appears verbatim on the page.

We undergo independent verification of our security, privacy, and compliance controls to help you meet your regulatory and policy objectives.

source

Google's own HIPAA page and BAA support page publicly offer a self-serve Business Associate Addendum (review-and-accept in the Cloud Console), covering Google Cloud infrastructure including Vertex AI, so the BAA for Claude via Vertex AI is publicly verifiable, not absent or sales-gated.

Google will enter into Business Associate Agreements with customers as necessary under HIPAA.

source

The DPA page confirms a public DPA with SCCs, and Google provides a publicly accessible subprocessor list, satisfying both requirements.

Google Cloud offers Cloud Data Processing Addendum (CDPA) ... which incorporates Standard Contract Clauses (SCC) as a means of meeting the security, contracting, and data transfer requirements under EU, UK, and Swiss data protection laws.

source

The provider's public data governance page explicitly states a commitment not to use customer data for training by default, and Claude is offered as a managed model on the Gemini Enterprise Agent Platform, so the commitment covers it.

Google won't use your data to train or fine-tune any AI/ML models without your prior permission or instruction. This applies to all managed models on Gemini Enterprise Agent Platform, including GA and pre-GA models.

source

Google publicly documents its zero-data-retention policy for all managed models on Gemini Enterprise Agent Platform, and Claude is listed as a managed model on the platform, so retention is documented and zero-data-retention is available.

This applies to all managed models on Gemini Enterprise Agent Platform, including GA and pre‑GA models.

source

Google Cloud’s blog confirms publicly that EU multi‑region endpoints let users pin data processing to the EU geography for Claude on Vertex AI.

U.S. and EU multi-region endpoints for Claude on Vertex AI are available in public preview... ensuring your data processing remains within your preferred geography to meet your compliance needs.

source

The European Commission's official GPAI Code of Practice signatory list includes Anthropic, confirming the model developer is a signatory.

- Anthropic

source

Anthropic’s own Trust Center page for the Claude Sonnet 5 training‑data summary is gated behind a request‑access form, so the summary is not publicly available.

To access sensitive documents, please click the "request access" button at the top of the page and complete the request form.

source