Anthropic compliance, certifications and attestations

AI labs · 10 certifications held · 1 from public registries · read Sep 24, 2026

Certification	Status	Source	Evidence
SOC reports
SOC 2 Type II Vendor page	Type II	Vendor page	Sep 24, 2026
SOC 3 Held Vendor page	Held	Vendor page	Sep 24, 2026
ISO standards
ISO/IEC 27001 Held Vendor page	Held	Vendor page	Sep 24, 2026
AI governance
ISO/IEC 42001 Held Partner entry in the STAR Registry CSA STAR Registry and vendor page	Held	CSA STAR Registry and vendor page	Sep 24, 2026
US government
DoD Impact Level IL5 Vendor page	IL5	Vendor page	Sep 24, 2026
NIST SP 800-171 Held Vendor page	Held	Vendor page	Sep 24, 2026
Section 508 / VPAT Held Vendor page	Held	Vendor page	Sep 24, 2026
Health
HIPAA (BAA) Held Vendor page	Held	Vendor page	Sep 24, 2026
Regional programs
Cyber Essentials (UK) Basic Vendor page	Basic	Vendor page	Sep 24, 2026
Education
HECVAT Held Vendor page	Held	Vendor page	Sep 24, 2026

From public trust centers and registries on the date shown. Confirm scope with the vendor. Logos via logo.dev; trademarks belong to their owners.

About Anthropic

Claude models, Claude Enterprise and the Claude API.

No public evidence found for

SOC reports: SOC 1
ISO standards: ISO 27017, ISO 27018, ISO 27701, ISO 9001, ISO 22301, ISO 20000, ISO 27799
AI governance: STAR AI
US government: FedRAMP, GovRAMP, TX-RAMP, CMMC, 800-53, FIPS 140, ITAR, CJIS, IRS 1075
Finance: PCI DSS, PCI 3DS, SWIFT, 17a-4, GLBA, SOX, FFIEC, MAS TRM, APRA, OSFI, FISC, DORA
Health: HITRUST, HDS, NHS DSPT, PHIPA
Life sciences (GxP): GxP, Part 11, Annex 11, CSV
Privacy and cloud: DPF, CBPR, EU CoC, CSA STAR
Regional programs: G-Cloud, C5, ENS, SecNum, IRAP, ISMAP, MTCS, K-ISMS, TISAX
Education: FERPA, COPPA

Certification changes by email