Last checked:
Scorecard › Is Claude safe for business?
Is Claude safe for business?
Best-graded plan: Claude Team (A). Claude Team does not train on your data by default.
| Plan | Grade | Trains by default | Human review | Retention | DPA | SOC 2 |
|---|---|---|---|---|---|---|
| Free / Pro | C | unknown (training is a user setting; default not stated) | Safety-flagged chats may be reviewed | Deleted chats removed from back-end within 30 days; up to 5 years de-identified if training is allowed | unknown | unknown |
| Team | A | no | Limited: designated Trust & Safety staff for Usage Policy enforcement; flagged chats kept up to 2 years | Chats kept in the product for history; custom retention on Enterprise only | yes (built into Commercial Terms, with SCCs) | yes (Type I & II); ISO 27001, ISO 42001 |
Sources: Free / Pro · Team
C Claude Free / Pro
Training depends on a user setting whose default isn't stated. Safety-flagged chats and feedback may be used. If training is on, data can be kept up to 5 years.
"We will use your chats and coding sessions (including to improve our models) if: You choose to allow us"
A Claude Team
No training by default, DPA built into Commercial Terms, SOC 2 Type I & II and ISO 27001 (Anthropic Privacy Center).
"By default, we will not use your inputs or outputs from our commercial products ... to train our models."
Grades describe published policies, not security testing. How we grade.
More on Claude