Registry / Claude via Google Vertex AI
Claude via Google Vertex AI
Anthropic's Claude models served as partner models on Google Cloud Vertex AI (Model Garden). Vendor-trust and data-handling dimensions below describe Google Cloud / Vertex AI as the serving platform; EU AI Act dimensions describe Anthropic as the model developer.
Watch-outs 2
The cells where this offering is not a clean public yes. This is what to check before you sign.
- SOC 2 Type II: Yes, sales-gated SOC 2 Type II report exists but requires request access via Anthropic Trust Center.
- Art. 53 summary: Yes, sales-gated summary requires request‑access form, not publicly viewable
Anthropic lists the SOC 2 Type II report in its Trust Center but gates the PDF behind a request form, confirming the report is available yet not publicly downloadable.
To access sensitive documents, please click the "request access" button at the top of the page and complete the request form.
Anthropic's own trust center publicly shows ISO 27001 with ✅ for rows applicable to "the model itself and containers supplied to partners," which covers Claude on any platform including Vertex AI, per the precedent on model-developer certificates.
Scope | SOC 2 Type 2 | ISO 27001 | ISO 42001 | CSA Star | HIPAA | NIST 800-171 | FedRAMP High | DoD IL4 | DoD IL5 ... *(Only applicable to the model itself and containers supplied to partners by Anthropic)
Anthropic’s own public announcement confirms ISO/IEC 42001 certification for its AI management system, which applies to Claude regardless of deployment.
We are excited to announce that Anthropic has achieved accredited certification under the new ISO/IEC 42001:2023 standard for our AI management system.
Google Cloud provides a publicly accessible Trust Center page that aggregates security, privacy, and compliance information, serving as a maintained compliance portal for services like Claude via Vertex AI.
We undergo independent verification of our security, privacy, and compliance controls to help you meet your regulatory objectives.
Google's own support page shows the HIPAA BAA is accepted self-serve in the Cloud console (Review and Accept / I Accept), so it is publicly available with no sales gate — not yes_sales_gated. The cited cloud.google.com/security/compliance/hipaa page itself states "Google will enter into Business Ass
For customers with HIPAA compliance needs, Google offers a Business Associate Addendum (BAA)... Go to the Google Cloud IAM & Admin page... Below Google Cloud Platform HIPAA Business Associate Addendum, click Review and Accept. Read the agreement and then click I Accept.
Verified the recorded quote and subprocessor reference on Google's own authoritative DPA page; SCCs are included and a public subprocessor list is published, satisfying yes_public.
"Customer SCCs means the SCCs (Controller-to-Processor), the SCCs (Processor-to-Processor) and/or the SCCs (Processor-to-Controller), as applicable." ... "Names, locations and activities of Subprocessors are described at: a. https://cloud.google.com/terms/subprocessors"
Google's publicly available data‑governance page explicitly states a default no‑training commitment that applies to all managed models on Vertex AI, including Claude.
Google won't use your data to train or fine-tune any AI/ML models without your prior permission or instruction.
The provider’s own data‑governance page documents retention policy and describes how to achieve zero data retention for all managed models, which includes partner models like Claude via Vertex AI.
Customer data is retained ... To achieve zero data retention, customers must take specific actions ... This applies to all managed models on Gemini Enterprise Agent Platform, including GA and pre-GA models.
Google Cloud's own blog documents self-serve EU multi-region endpoints for Claude on Vertex AI (now generally available), confirming public, non-gated EU data-residency pinning.
U.S. and EU multi-region endpoints for Claude on Vertex AI are available in public preview ... ensuring your data processing remains within your preferred geography to meet your compliance needs. [Editor's note: announced general availability on May 15, 2026]
The EC's official GPAI Code of Practice signatory list publicly includes Anthropic, confirming the model developer of Claude is a signatory.
Anthropic
The Anthropic Trust Center page lists the Claude Sonnet 5 training-data summary but notes access requires a request form, confirming it exists but is not publicly available.
To access sensitive documents, please click the "request access" button at the top of the page and complete the request form.
Spotted an error? Submit a correction with evidence, corrections with a primary source are folded in and credited in the changelog.