Claude Adds Data Residency Controls for Enterprise Compliance and Privacy

Enterprise-Grade Privacy Controls

Claude Opus 4.6 shipped with new data residency controls on February 5, 2026, giving enterprises fine-grained control over where their data is processed and stored.

Available Controls

Regional Processing Options:

• Google Vertex AI (Frankfurt): Genuine in-region processing for EU organizations
• Microsoft Azure: Claude through Foundry with Azure compliance frameworks
• AWS Bedrock: Regional deployment options across AWS regions

Zero-Data-Retention (ZDR): An optional addendum ensuring maximum data isolation. With ZDR enabled, no conversation data is retained after the API response is delivered.

Default Privacy Protections

All Claude deployments include:

• Data encrypted in transit and at rest
• Enterprise inputs and outputs not used for training by default
• SOC 2 Type II compliant infrastructure
• HIPAA-ready products for healthcare use cases

European Considerations

For organizations with strict EU data sovereignty requirements:

• Claude via Google Vertex AI in Frankfurt offers the strongest in-region guarantees
• Claude via Microsoft Foundry is currently excluded from the EU Data Boundary
• Direct API access routes through select countries in US, Europe, Asia, and Australia

Why It Matters

Regulated industries — healthcare, finance, legal, and government — require certainty about where their data lives. These controls remove a common barrier to enterprise AI adoption by matching Claude's capabilities with enterprise compliance requirements.

Source: Anthropic Privacy Center | Claude Help Center | Anthropic