Anthropic Subprocessor Changes

tencentshill 56 points 30 comments March 26, 2026
trust.anthropic.com · View on Hacker News

Discussion Highlights (8 comments)

tencentshill

Notable: Added "Microsoft Azure, which provides cloud infrastructure for all Anthropic products (Worldwide)."

gnabgib

Title: Welcome to the Anthropic Trust Center .. was this a deep link? You might want to repeat in the comments

octoberfranklin

WTF is a "subprocessor"? They should just be honest and say "data loophole".

craxyfrog

Worth noting the distinction between subprocessors that handle customer data vs. those that handle operational/business data. The ones in the "Customer Data" category are where the compliance implications are most significant for enterprise customers under GDPR, HIPAA, or similar frameworks. For anyone evaluating this for a procurement decision: the relevant questions are (1) which subprocessors have access to content you send in API requests, (2) what data processing agreements are in place with each, and (3) what is the notification window for new subprocessor additions. The 30-day notice for customer data subprocessors is fairly standard for enterprise SaaS at this point. Publishing this list proactively rather than only on request is a positive signal, even if the list itself is fairly short.

craxyfrog

Worth noting the distinction between subprocessors that handle customer data vs. those that handle operational/business data. The ones in the "Customer Data" category are where the compliance implications are most significant for enterprise customers under GDPR, HIPAA, or similar frameworks. For anyone evaluating this for a procurement decision: the relevant questions are (1) which subprocessors have access to content you send in API requests, (2) what data processing agreements are in place with each, and (3) what is the notification window for new subprocessor additions. The 30-day notice for customer data subprocessors is fairly standard for enterprise SaaS at this point. Publishing this list proactively rather than only on request is a positive signal, even if the list itself is fairly short.

ehnto

With respect to my private data, it seems all roads eventually lead to California.

asawfofor

so i thought there were multiple fedramp service providers offering hosted claude models. not sure why they are linking to one in particular

yalogin

I don’t know what I am looking at there. What is a subprocessor?

Semantic search powered by Rivestack pgvector
3,471 stories · 32,344 chunks indexed