5 ms·

Anthropic Subprocessor Changes

114 points by tencentshill 7mo ago

gnabgib 7mo ago
Title: Welcome to the Anthropic Trust Center .. was this a deep link? You might want to repeat in the comments
- barbazoo 7mo ago
  > Anthropic Subprocessor Changes > General > Published March 26, 2026 > We've updated our subprocessor list with three additions Works for me, gotta scroll down a bit
  - gnabgib 7mo ago
    That's an h3 not a title. Looks like they probably meant: https://trust.anthropic.com/updates https://trust.anthropic.com/updates, it's still an entry in an h3 (with "Welcome to the Anthropic Trust Center" as the title), but it is at least the most recent update (canonical would stop this being directly linked)
tencentshill 7mo ago
Notable: Added "Microsoft Azure, which provides cloud infrastructure for all Anthropic products (Worldwide)."
- cdrnsf 7mo ago
  Hopefully it goes better for them than it has for GitHub.
  - dylan604 7mo ago
    hope in one hand and do something in the other to see which one fills up faster. hoping is always a strained good idea, but hoping on Azure really strains credulity
    - copperx 7mo ago
      But increases credibility?
    - seemaze 7mo ago
      If you hope for a hand full of do, you win(doze?)
- varispeed 7mo ago
  Ahh now it is clear why so many outages lately. Solid choice.
  - victor106 7mo ago
    When you host a solid model on terrible infrastructure, the infrastructure wins
    - baq 7mo ago
      As God intended. I fear the day it becomes the other way around.
      - withinboredom 7mo ago
        Hold my beer.
- pwarner 7mo ago
  Microsoft 365 Copilot has enabled Claude models, and I imagine they want that running on Azure?
  - jadbox 7mo ago
    Likely. MS doesn't like using models that are not hosted by them internally (see VSCode Copilot)
- rvz 7mo ago
  There you go. So when Azure has an outage, so will Anthropic (and Github). Now expect both of them to have unstable uptime and outages every week.
  - brookst 7mo ago
    You don’t thino Anthropic has any kind of resiliency, so net new compute reduces downtime? Any docs on that view?
- CodeCompost 7mo ago
  That is significant for us. We have already accepted the risk of using Microsoft Azure so we use GitHub Copilot for that reason. We have Claude disabled at the moment but if Anthropic has moved over to Azure then we can consider to start using it. "Accepted the risk", just in case people don't know, is a compliancy term. I don't mean that Azure is risky.
  - speedgoose 7mo ago
    > I don't mean that Azure is risky. Depending on the company and their sector, people will nod in approval, or start laughing. My company also accepted the risk of using Microsoft. We have a "data sharing agreement" together, with very powerful magical words. Compliance people are happy and sleep well.
    - djhn 7mo ago
      I consider Azure risky and I would love to hear more about the companies and sectors that would laugh (with me). So which ones are you talking about?
  - ptx 7mo ago
    They added Microsoft but alongside them also list Google and Amazon for "all products".
rvz 7mo ago
[flagged]
- iambateman 7mo ago
  I hear the slot machine thing a lot but I don’t get it. I use Claude Code every day for coding because it makes me way more productive. But I don’t resonate with the slot machine effect. Can you expand on what mechanism you see that give it a slot machine effect? Is it for all users or just a subset?
  - fenykep 7mo ago
    I think it is just a strawman extrapolation of the nondeterministic nature of LLMs.
    - rvz 7mo ago
      [flagged]
  - svnt 7mo ago
    For people who want to ask a model for an app, or a website, or something at a level of “hey you make apps right, I have had this idea for years…” the experience is akin to a slot machine — sometimes they get what they imagined their description would create and it works, and sometimes they get a hollow chocolate approximation.
octoberfranklin 7mo ago
WTF is a "subprocessor"? They should just be honest and say "data loophole".
- pdabbadabba 7mo ago
  It is an important legal concept under the GDPR and other data governance frameworks.
- dchuk 7mo ago
  It’s basically another party that is used as infrastructure by the company you’re using the services of, who has access to your data, but that sub processor doesn’t need to extend its terms down into the eula. So like if you host databases on aws, they are your sub processor.
deleted 7mo ago
[deleted]
wewewedxfgdf 7mo ago
[flagged]
- deleted 7mo ago
  [deleted]
- sdwr 7mo ago
  The more they share, the easier it is to exploit the system.
- alexjurkiewicz 7mo ago
  "I'm trying to do something illegal and Anthropic are aware. Why do they keep banning me??"
  - wewewedxfgdf 7mo ago
    Unless you're not. Look, if you make an LLM and you don't want people using it in a particular way then communicate with them. And if you can detect what you think is such behavior, then communicate. Out in real life you don't threaten people with end of relationship with every issue that comes up. It's such childish business to always pull out and threaten the ban hammer any time there's any possible issue with how they want their system used.
    - celdon25 7mo ago
      The last time I used Claude, I was completely locked out of a long chat (including not being able to view it) for sending something innocent that was written in another language, where there was apparently some confusion with the translation. I’m sure it will get worse over time until Chinese models start to proliferate more and challenge the monopoly on regulatory policy.
- deleted 7mo ago
  [deleted]
craxyfrog 7mo ago
Worth noting the distinction between subprocessors that handle customer data vs. those that handle operational/business data. The ones in the "Customer Data" category are where the compliance implications are most significant for enterprise customers under GDPR, HIPAA, or similar frameworks. For anyone evaluating this for a procurement decision: the relevant questions are (1) which subprocessors have access to content you send in API requests, (2) what data processing agreements are in place with each, and (3) what is the notification window for new subprocessor additions. The 30-day notice for customer data subprocessors is fairly standard for enterprise SaaS at this point. Publishing this list proactively rather than only on request is a positive signal, even if the list itself is fairly short.
craxyfrog 7mo ago
Worth noting the distinction between subprocessors that handle customer data vs. those that handle operational/business data. The ones in the "Customer Data" category are where the compliance implications are most significant for enterprise customers under GDPR, HIPAA, or similar frameworks. For anyone evaluating this for a procurement decision: the relevant questions are (1) which subprocessors have access to content you send in API requests, (2) what data processing agreements are in place with each, and (3) what is the notification window for new subprocessor additions. The 30-day notice for customer data subprocessors is fairly standard for enterprise SaaS at this point. Publishing this list proactively rather than only on request is a positive signal, even if the list itself is fairly short.
ehnto 7mo ago
With respect to my private data, it seems all roads eventually lead to California.
- crefiz 7mo ago
  Sorry, what does that means? GDPR national here
  - alsetmusic 7mo ago
    Probably a reference to Silicon Valley?
  - ehnto 7mo ago
    Just a quip that all technology companies seem to eventually include sending data back to a Californian company or startup, usually for the purposes of hosting, advertising or profiling.
asawfofor 7mo ago
so i thought there were multiple fedramp service providers offering hosted claude models. not sure why they are linking to one in particular
- dan000892 7mo ago
  Where are they linking to just one? The chart shows three: Palantir, AWS GovCloud, and GCP w/FR-High Assured Workload. The chart should show ITAR also IMO. Only Palantir and AWS GovCloud would have checkboxes and that’s extremely relevant to defense contractors. (Vertex AI is available within an FR-High assured workload but not ITAR, the only conceivable reason for which would be foreign person access to the US sovereign production environment.)
yalogin 7mo ago
I don’t know what I am looking at there. What is a subprocessor?
- stingraycharles 7mo ago
  It’s a legal term for handling data. It’s when Anthropic uses an external party to handle their data / systems, but Anthropic is the legal entity responsible for the data privacy, as the customer (you) has a contract with Anthropic.
- zvqcMMV6Zcr 7mo ago
  https://www.gdprsummary.com/gdpr-definitions/sub-processor/ https://www.gdprsummary.com/gdpr-definitions/sub-processor/ in context of GDPR/DORA it is about formalized agreements with 3rd parties that will handle data, your own and of your clients.
ctmnt 7mo ago
To be clear, for those reading these comments and thinking “oh no Azure”, this is an addition to the list of cloud companies that provide “cloud infrastructure worldwide” for “all products”. Alongside GCP and AWS. This is not a GitHub style announcement that they’ve moved all operations to Azure.
- kleene_op 7mo ago
  Coincidently, Claude Code appears to be down right now (in Europe West at least). Everytime I hear of something X Azure announcement, that something just seem to break right away. I know correlation is not causation, but my opinion of Azure is already too damn low to not link those two events.
  - matheusmoreira 7mo ago
    It's also down for me here in Brazil. Getting overloaded errors for about one hour now. It's been happening a lot this week. Is this normal for Anthropic?
    - SomeUserName432 7mo ago
      Working fine for me right now, from Brazil. Claude via Github Copilot at least.
      - matheusmoreira 7mo ago
        I'm using Claude Code on the terminal. Not sure if it matters. API Error: 529 { "type": "error", "error": { "type": "overloaded_error", "message": "Overloaded. https://docs.claude.com/en/api/errors" }, "request_id": "..." } The promotional double usage period is just about to end too. Sucks.
        CamouflagedKiwi 7mo ago
        It's down for me too. A colleague says it's up though - it's possible they're shedding different groups of users (he has the Max subscription, I don't).
louiereederson 7mo ago
They announced a $30b+ commitment with Azure back in November, so not really a surprise that Azure is now listed as one of their cloud providers. https://www.anthropic.com/news/microsoft-nvidia-anthropic-announce-strategic-partnerships https://www.anthropic.com/news/microsoft-nvidia-anthropic-an...
motbus3 7mo ago
The slopped page doesn't work properly on mobile chrome

114 points by tencentshill 7mo ago

gnabgib 7mo ago

Title: Welcome to the Anthropic Trust Center .. was this a deep link? You might want to repeat in the comments

barbazoo 7mo ago
> Anthropic Subprocessor Changes > General > Published March 26, 2026 > We've updated our subprocessor list with three additions Works for me, gotta scroll down a bit
- gnabgib 7mo ago
  That's an h3 not a title. Looks like they probably meant: https://trust.anthropic.com/updates https://trust.anthropic.com/updates, it's still an entry in an h3 (with "Welcome to the Anthropic Trust Center" as the title), but it is at least the most recent update (canonical would stop this being directly linked)

tencentshill 7mo ago

Notable: Added "Microsoft Azure, which provides cloud infrastructure for all Anthropic products (Worldwide)."

cdrnsf 7mo ago
Hopefully it goes better for them than it has for GitHub.
- dylan604 7mo ago
  hope in one hand and do something in the other to see which one fills up faster. hoping is always a strained good idea, but hoping on Azure really strains credulity
  - copperx 7mo ago
    But increases credibility?
  - seemaze 7mo ago
    If you hope for a hand full of do, you win(doze?)
varispeed 7mo ago
Ahh now it is clear why so many outages lately. Solid choice.
- victor106 7mo ago
  When you host a solid model on terrible infrastructure, the infrastructure wins
  - baq 7mo ago
    As God intended. I fear the day it becomes the other way around.
    - withinboredom 7mo ago
      Hold my beer.
pwarner 7mo ago
Microsoft 365 Copilot has enabled Claude models, and I imagine they want that running on Azure?
- jadbox 7mo ago
  Likely. MS doesn't like using models that are not hosted by them internally (see VSCode Copilot)
rvz 7mo ago
There you go. So when Azure has an outage, so will Anthropic (and Github). Now expect both of them to have unstable uptime and outages every week.
- brookst 7mo ago
  You don’t thino Anthropic has any kind of resiliency, so net new compute reduces downtime? Any docs on that view?
CodeCompost 7mo ago
That is significant for us. We have already accepted the risk of using Microsoft Azure so we use GitHub Copilot for that reason. We have Claude disabled at the moment but if Anthropic has moved over to Azure then we can consider to start using it. "Accepted the risk", just in case people don't know, is a compliancy term. I don't mean that Azure is risky.
- speedgoose 7mo ago
  > I don't mean that Azure is risky. Depending on the company and their sector, people will nod in approval, or start laughing. My company also accepted the risk of using Microsoft. We have a "data sharing agreement" together, with very powerful magical words. Compliance people are happy and sleep well.
  - djhn 7mo ago
    I consider Azure risky and I would love to hear more about the companies and sectors that would laugh (with me). So which ones are you talking about?
- ptx 7mo ago
  They added Microsoft but alongside them also list Google and Amazon for "all products".

rvz 7mo ago

[flagged]

iambateman 7mo ago
I hear the slot machine thing a lot but I don’t get it. I use Claude Code every day for coding because it makes me way more productive. But I don’t resonate with the slot machine effect. Can you expand on what mechanism you see that give it a slot machine effect? Is it for all users or just a subset?
- fenykep 7mo ago
  I think it is just a strawman extrapolation of the nondeterministic nature of LLMs.
  - rvz 7mo ago
    [flagged]
- svnt 7mo ago
  For people who want to ask a model for an app, or a website, or something at a level of “hey you make apps right, I have had this idea for years…” the experience is akin to a slot machine — sometimes they get what they imagined their description would create and it works, and sometimes they get a hollow chocolate approximation.

octoberfranklin 7mo ago

WTF is a "subprocessor"? They should just be honest and say "data loophole".

pdabbadabba 7mo ago
It is an important legal concept under the GDPR and other data governance frameworks.
dchuk 7mo ago
It’s basically another party that is used as infrastructure by the company you’re using the services of, who has access to your data, but that sub processor doesn’t need to extend its terms down into the eula. So like if you host databases on aws, they are your sub processor.

deleted 7mo ago

[deleted]

wewewedxfgdf 7mo ago

[flagged]

deleted 7mo ago
[deleted]
sdwr 7mo ago
The more they share, the easier it is to exploit the system.
alexjurkiewicz 7mo ago
"I'm trying to do something illegal and Anthropic are aware. Why do they keep banning me??"
- wewewedxfgdf 7mo ago
  Unless you're not. Look, if you make an LLM and you don't want people using it in a particular way then communicate with them. And if you can detect what you think is such behavior, then communicate. Out in real life you don't threaten people with end of relationship with every issue that comes up. It's such childish business to always pull out and threaten the ban hammer any time there's any possible issue with how they want their system used.
  - celdon25 7mo ago
    The last time I used Claude, I was completely locked out of a long chat (including not being able to view it) for sending something innocent that was written in another language, where there was apparently some confusion with the translation. I’m sure it will get worse over time until Chinese models start to proliferate more and challenge the monopoly on regulatory policy.
deleted 7mo ago
[deleted]

craxyfrog 7mo ago

Worth noting the distinction between subprocessors that handle customer data vs. those that handle operational/business data. The ones in the "Customer Data" category are where the compliance implications are most significant for enterprise customers under GDPR, HIPAA, or similar frameworks. For anyone evaluating this for a procurement decision: the relevant questions are (1) which subprocessors have access to content you send in API requests, (2) what data processing agreements are in place with each, and (3) what is the notification window for new subprocessor additions. The 30-day notice for customer data subprocessors is fairly standard for enterprise SaaS at this point. Publishing this list proactively rather than only on request is a positive signal, even if the list itself is fairly short.

craxyfrog 7mo ago

ehnto 7mo ago

With respect to my private data, it seems all roads eventually lead to California.

crefiz 7mo ago
Sorry, what does that means? GDPR national here
- alsetmusic 7mo ago
  Probably a reference to Silicon Valley?
- ehnto 7mo ago
  Just a quip that all technology companies seem to eventually include sending data back to a Californian company or startup, usually for the purposes of hosting, advertising or profiling.

asawfofor 7mo ago

so i thought there were multiple fedramp service providers offering hosted claude models. not sure why they are linking to one in particular

dan000892 7mo ago
Where are they linking to just one? The chart shows three: Palantir, AWS GovCloud, and GCP w/FR-High Assured Workload. The chart should show ITAR also IMO. Only Palantir and AWS GovCloud would have checkboxes and that’s extremely relevant to defense contractors. (Vertex AI is available within an FR-High assured workload but not ITAR, the only conceivable reason for which would be foreign person access to the US sovereign production environment.)

yalogin 7mo ago

I don’t know what I am looking at there. What is a subprocessor?

stingraycharles 7mo ago
It’s a legal term for handling data. It’s when Anthropic uses an external party to handle their data / systems, but Anthropic is the legal entity responsible for the data privacy, as the customer (you) has a contract with Anthropic.
zvqcMMV6Zcr 7mo ago
https://www.gdprsummary.com/gdpr-definitions/sub-processor/ https://www.gdprsummary.com/gdpr-definitions/sub-processor/ in context of GDPR/DORA it is about formalized agreements with 3rd parties that will handle data, your own and of your clients.

ctmnt 7mo ago

To be clear, for those reading these comments and thinking “oh no Azure”, this is an addition to the list of cloud companies that provide “cloud infrastructure worldwide” for “all products”. Alongside GCP and AWS. This is not a GitHub style announcement that they’ve moved all operations to Azure.

kleene_op 7mo ago
Coincidently, Claude Code appears to be down right now (in Europe West at least). Everytime I hear of something X Azure announcement, that something just seem to break right away. I know correlation is not causation, but my opinion of Azure is already too damn low to not link those two events.
- matheusmoreira 7mo ago
  It's also down for me here in Brazil. Getting overloaded errors for about one hour now. It's been happening a lot this week. Is this normal for Anthropic?
  - SomeUserName432 7mo ago
    Working fine for me right now, from Brazil. Claude via Github Copilot at least.
    - matheusmoreira 7mo ago
      I'm using Claude Code on the terminal. Not sure if it matters. API Error: 529 { "type": "error", "error": { "type": "overloaded_error", "message": "Overloaded. https://docs.claude.com/en/api/errors" }, "request_id": "..." } The promotional double usage period is just about to end too. Sucks.
      - CamouflagedKiwi 7mo ago
        It's down for me too. A colleague says it's up though - it's possible they're shedding different groups of users (he has the Max subscription, I don't).

louiereederson 7mo ago

They announced a $30b+ commitment with Azure back in November, so not really a surprise that Azure is now listed as one of their cloud providers. https://www.anthropic.com/news/microsoft-nvidia-anthropic-announce-strategic-partnerships https://www.anthropic.com/news/microsoft-nvidia-anthropic-an...

motbus3 7mo ago

The slopped page doesn't work properly on mobile chrome