--- title: "Claude Business, Team & Enterprise: Which Plan Includes a GDPR DPA?" description: "There is no Claude Business plan. Anthropic offers Pro, Team, and Enterprise — this guide shows which tier includes a GDPR DPA for companies in Germany." image: "https://compound.law/assets/images/og-image-en.webp" source: "https://compound.law/en-DE/tools/claude-business-gdpr/" language: "en" --- ![Claude plan comparison for GDPR compliance — Pro, Team, and Enterprise DPA guide for Germany](https://compound.law/assets/images/tools/tools_2.webp) tools # Claude Business, Team & Enterprise: Which Plan Includes a GDPR DPA? 27 April 2026 Which Claude plan includes a GDPR data processing agreement? There is no official Claude Business plan. Anthropic offers Claude Pro (individual), Claude Team (business, DPA included), and Claude Enterprise (custom, DPA included). Only Team and Enterprise are suitable for GDPR-compliant business data processing. - Claude Pro is an individual-use plan with no DPA — not suitable for business personal-data processing under GDPR. - Claude Team includes an automatic DPA with SCCs and is the minimum compliant tier for businesses. - Claude Enterprise adds SSO, audit logs, and optional Zero-Data-Retention for higher-risk workflows. There is no official plan called **Claude Business**. Anthropic’s three commercial tiers are **Claude Pro** (individual), **Claude Team** (entry-level business), and **Claude Enterprise** (custom). Buyers searching for a Claude Business plan are typically looking for the business-grade tier — and the critical GDPR question they are really asking is: which plan includes a **data processing agreement (DPA)** under Article 28 GDPR? The answer is Claude Team and Claude Enterprise. Claude Pro and Claude Free do not include a DPA and are not suitable for processing personal data in a business context. This page explains the tier differences, the GDPR implications of each, and what German companies need to review before deploying Claude. For the full DPA review, see our dedicated [Claude DPA](https://compound.law/en-DE/tools/claude-dpa/) page. For the end-to-end GDPR framework, see our [Claude GDPR compliance](https://compound.law/en-DE/tools/claude-gdpr/) page. ## Claude Plans Explained — Pro, Team, and Enterprise Many buyers and even some procurement teams still search for a **Claude Business** plan. This term does not appear in Anthropic’s current pricing. Anthropic previously used different tier naming, and third-party sources sometimes still reference old terminology — which explains the confusion. As of 2026, the current tiers are: - **Claude Free** — no-cost, consumer plan, no DPA - **Claude Pro** — paid, individual-use plan, no DPA - **Claude Team** — business plan, DPA included automatically, minimum 5 users - **Claude Enterprise** — custom-quoted enterprise plan, DPA included, full governance controls The practical GDPR consequence is immediate: only Claude Team and Claude Enterprise give companies the contractual foundation needed to use Claude as a **data processor** under Article 28 GDPR. Free and Pro are consumer products — using them to process business personal data is not legally defensible. ### Claude plan comparison for GDPR compliance | Plan | DPA/AVV included | SSO | Audit logs | Zero-Data-Retention | Suitable for GDPR business use | | ----------------- | ---------------- | --- | ---------- | ------------------- | ------------------------------ | | Claude Free | No | No | No | No | No | | Claude Pro | No | No | No | No | No | | Claude Team | Yes (automatic) | No | No | No | Yes — min. 5 users | | Claude Enterprise | Yes (automatic) | Yes | Yes | Optional add-on | Yes | | Anthropic API | Yes (automatic) | — | — | Optional | Yes | ### What happened to Claude Business? Anthropic has updated its tier naming over time. Some legacy documentation, third-party comparison tools, and media coverage still reference a “Claude Business” plan — this label is no longer used by Anthropic. If a vendor, broker, or internal procurement document references Claude Business, it almost certainly refers to what is now **Claude Team** or, in the context of larger organisations, **Claude Enterprise**. For German companies running a **GDPR vendor assessment**, this naming confusion matters. A reference to “Claude Business” in a risk register or data processing record should be clarified against the current Anthropic commercial terms — the actual tier name affects which DPA version, which SCC wording, and which product terms apply. ## Claude Pro and GDPR — Why Individual Plans Are Not GDPR-Safe for Companies This is one of the most common and consequential mistakes in practice. Employees often use personal **Claude Pro** subscriptions for work tasks. From a GDPR perspective, this creates a direct violation wherever company or customer personal data is involved. The problem is structural, not behavioural: - **No DPA:** Claude Pro is governed by Anthropic’s consumer terms, not commercial terms. There is no processor agreement. This means Anthropic is not acting as a processor under Article 28 GDPR — the controller-processor relationship that GDPR requires simply does not exist. - **Wrong role allocation:** A personal subscription means the employee is the contracting party, not the company. The company is not even a party to the Anthropic contract, let alone a controller with a valid processor relationship. - **Training risk:** Consumer plans may not carry the same data-use commitments as commercial plans. This makes retention and training-data risk harder to assess. The practical rule for German companies: if employees are processing personal data — customer names, contact details, communication content, HR data — they must not use Claude Pro or Claude Free for those tasks. The minimum compliant route is a company **Claude Team** subscription. A useful internal governance measure is an explicit AI usage policy that names the approved tools and tiers, specifies what data categories may be used with each tool, and prohibits employees from routing company or customer data through personal AI subscriptions. For guidance on AI policies for businesses in Germany, see our [Claude Enterprise](https://compound.law/en-DE/tools/claude-enterprise/) overview. ## Claude Team and GDPR **Claude Team** is Anthropic’s entry-level business tier and the minimum compliant plan for GDPR-regulated use. It includes an automatic DPA with Standard Contractual Clauses and is priced at approximately €25 per user per month on annual billing, with a minimum of five users. ### What Claude Team includes for GDPR purposes - **DPA with SCCs:** The Anthropic Data Processing Addendum is incorporated automatically into the commercial terms. No separate signature is required for standard deployment, but companies should review and document the current DPA version. - **Standard Contractual Clauses:** SCCs cover international data transfers from the EU to Anthropic’s processing infrastructure. Companies still need to carry out their own transfer analysis and document it in the record of processing activities. - **No training on customer data:** Anthropic states that commercial customer data is not used to train models by default. This applies to Claude Team. - **5-user minimum:** The 5-user minimum is a commercial requirement, not a GDPR constraint, but smaller teams need to plan for it. ### When Claude Team is sufficient Claude Team is generally suitable for lower-risk internal productivity workflows — drafting, summarisation, research support, structured knowledge work — where employees avoid routing unnecessary personal data through the system. It is the right starting point for most **SME deployments** in Germany. ### When Claude Team is not enough Claude Team lacks several governance controls that become important for more sensitive use cases: - **No SSO:** This matters for IT governance, identity management, and compliance with internal access-control policies. - **No audit logs:** If the deployment involves sensitive workflows where an audit trail is required for internal oversight or regulatory documentation, Claude Team does not provide this out of the box. - **No Zero-Data-Retention:** For workflows involving highly confidential material, the lack of ZDR means prompt data may be retained under Anthropic’s standard retention schedule. If any of these gaps are blockers, the correct tier is Claude Enterprise. ## Claude Enterprise and GDPR **Claude Enterprise** is Anthropic’s full-governance business tier, custom-quoted and designed for organisations with stricter compliance requirements. It includes everything in Claude Team, plus SSO, audit logs, custom system prompts, a significantly expanded context window, and the optional **Zero-Data-Retention (ZDR)** add-on. ### What Claude Enterprise adds for GDPR purposes - **SSO and admin controls:** Centralised user management and single sign-on integration make Claude Enterprise appropriate for organisations with IT governance or identity-management requirements — typical in larger German companies and regulated sectors. - **Audit logs:** Activity and usage logs support internal oversight, vendor-risk documentation, and compliance reporting. In Germany, these also contribute to demonstrating accountability under Article 5(2) GDPR. - **Zero-Data-Retention (ZDR):** With ZDR enabled, inputs and outputs are not stored after the request completes. This is especially relevant for M\&A preparation, legally privileged communications, board-level documents, and other workflows where standard retention is unacceptable. - **Custom system prompts:** Organisations can set governance guardrails at the organisational level — relevant for defining consistent, policy-compliant input boundaries across all users. ### When companies need Claude Enterprise Claude Enterprise is the appropriate tier where: - the deployment involves **employee data**, HR analytics, or workflows with monitoring or evaluation effects — triggering stricter review under GDPR and potentially co-determination requirements under **section 87(1) no. 6 BetrVG** - the organisation is in a **regulated sector** such as financial services, healthcare, or professional advisory services - **audit logs** are required for internal compliance reporting or regulatory inspection - the **ZDR add-on** is needed for high-sensitivity document workflows - IT governance requires **SSO** and centralised access management - the workflow involves large documents requiring a significantly wider context window For a full review of Claude Enterprise from a German law perspective, see our [Claude Enterprise](https://compound.law/en-DE/tools/claude-enterprise/) guide. ## What to Check Before Buying Any Claude Plan Regardless of which Claude tier a company selects, the GDPR compliance work does not end at purchase. A DPA being included in the commercial terms is a starting point, not a complete GDPR answer. ### Six checks before rollout 1. **Confirm the exact deployment path.** If Claude is accessed directly from Anthropic, the Anthropic commercial terms apply. If accessed through a third-party platform such as AWS Bedrock or Google Vertex AI, the relevant contract stack changes. EU-only data residency is only architecturally available via [AWS Bedrock EU regions or Google Vertex AI EU profiles](https://compound.law/en-DE/tools/claude-eu-hosting/) — not directly from Anthropic. 2. **Document the legal basis under Article 6 GDPR.** The most common bases for business Claude use are Article 6(1)(f) legitimate interests (with a documented balancing test) or Article 6(1)(b) contract performance. The chosen basis must be documented before deployment. 3. **Review the DPA against the actual workflow.** Verify that the purposes, data categories, and instructions language in the DPA match how Claude will actually be used. A generic DPA reference does not substitute for a use-case-specific review. 4. **Cover international transfers.** The SCCs in Anthropic’s commercial terms provide the transfer mechanism, but companies must still map the actual transfer path, document it in the record of processing activities, and assess whether a Transfer Impact Assessment is required. 5. **Assess DPIA obligation.** Workflows involving systematic profiling, employee evaluation, large-scale processing of sensitive data, or automated decisions with significant individual effects require a Data Protection Impact Assessment under Article 35 GDPR. 6. **Check works council requirements.** If Claude is deployed in ways that affect employees — productivity tools, HR analytics, monitoring-adjacent workflows — works council involvement under **section 87(1) no. 6 BetrVG** may be mandatory before rollout. This is a German labour-law requirement separate from the GDPR review. This page is general information and not legal advice for a specific implementation. Compound Law advises businesses, startups, and in-house legal teams in Germany on **GDPR, AI procurement, commercial contracts, and employment law**. If you want to assess which Claude plan fits your GDPR requirements or review the Anthropic DPA for your specific use case, [contact us](https://compound.law/en-DE/#booking). ## FAQ ### Does Anthropic offer a Claude Business plan? No. Anthropic does not use the name “Claude Business” for any current tier. The commercial plans are Claude Pro (individual, no DPA), Claude Team (business, DPA included, minimum 5 users), and Claude Enterprise (custom, full governance). Buyers searching for “Claude Business” are typically looking for Claude Team or Claude Enterprise. ### Which Claude plan includes a GDPR data processing agreement? Claude Team and Claude Enterprise both include an automatic DPA with Standard Contractual Clauses. The DPA is incorporated into Anthropic’s commercial terms and does not require a separate signature for standard deployments. Claude Free and Claude Pro do not include a DPA and cannot be used for GDPR-regulated business personal-data processing. ### Is Claude Team GDPR compliant for businesses in Germany? Claude Team can support GDPR-compliant use. It includes a DPA and SCCs, and Anthropic states that commercial data is not used to train models by default. Compliance still depends on the specific use case, the documented legal basis under Article 6 GDPR, data category analysis, transfer documentation, and appropriate technical safeguards. ### What is the difference between Claude Team and Claude Enterprise? Claude Team is the entry-level business tier: DPA included, 5-user minimum, approximately €25 per user per month, no SSO or audit logs. Claude Enterprise is custom-quoted and adds SSO, audit logs, custom system prompts, a larger context window, and the optional Zero-Data-Retention add-on. For organisations with stricter governance, audit, or residency requirements, Claude Enterprise is the appropriate choice. ### Can employees use personal Claude Pro subscriptions for work? Not for work involving personal data. Claude Pro is a consumer plan with no DPA. Employees processing company or customer personal data through a personal Claude Pro account create a GDPR violation — there is no processor agreement in place, and Anthropic is not acting as a processor. The minimum compliant option for business personal-data use is a company Claude Team subscription. ### When does a company need Claude Enterprise instead of Claude Team? Claude Enterprise is appropriate when the organisation needs SSO, audit logs, custom governance controls, or the optional Zero-Data-Retention add-on. It is also the practical choice for regulated-sector deployments, employee data workflows, M\&A-sensitive document processing, and any use case where stricter oversight, a larger context window, or a documented audit trail is required. ## Related Tool Guides [![Canva DPA data processing addendum reviewed under Article 28 GDPR](https://compound.law/assets/images/tools/tools_3.webp)](https://compound.law/en-DE/tools/canva-dpa/) [tools](https://compound.law/en-DE/tools/canva-dpa/) ### [Does Canva Offer a DPA? Yes — Canva DPA Guide for Germany](https://compound.law/en-DE/tools/canva-dpa/) [Yes — Canva provides a Data Processing Addendum on paid plans. See what the Canva DPA covers clause by clause: SCCs, subprocessors, audits, German-law gaps.](https://compound.law/en-DE/tools/canva-dpa/) [![Cursor DPA data processing agreement Art. 28 GDPR review for Germany](https://compound.law/assets/images/tools/tools_1.webp)](https://compound.law/en-DE/tools/cursor-dpa/) [tools](https://compound.law/en-DE/tools/cursor-dpa/) ### [Cursor DPA: Yes — What the Anysphere Data Processing Agreement Covers](https://compound.law/en-DE/tools/cursor-dpa/) [Yes, Cursor offers a DPA at cursor.com/terms/dpa. What the Cursor data processing agreement covers under GDPR Art. 28 — and how German buyers should review it.](https://compound.law/en-DE/tools/cursor-dpa/) [![ElevenLabs DPA data processing addendum reviewed under Article 28 GDPR](https://compound.law/assets/images/tools/tools_4.webp)](https://compound.law/en-DE/tools/elevenlabs-dpa/) [tools](https://compound.law/en-DE/tools/elevenlabs-dpa/) ### [Does ElevenLabs Offer a DPA? Yes — ElevenLabs DPA Guide for Germany](https://compound.law/en-DE/tools/elevenlabs-dpa/) [Yes — ElevenLabs publishes a Data Processing Addendum at elevenlabs.io/dpa. What the ElevenLabs DPA covers clause by clause under Article 28 GDPR.](https://compound.law/en-DE/tools/elevenlabs-dpa/) [![Synthesia GDPR compliance facts: AI video training policy, DPA, and EU data storage](https://compound.law/assets/images/tools/tools_4.webp)](https://compound.law/en-DE/tools/synthesia/) [tools](https://compound.law/en-DE/tools/synthesia/) ### [Synthesia GDPR: Training, DPA & German Compliance Facts](https://compound.law/en-DE/tools/synthesia/) [No — Synthesia does not train on customer content. GDPR-usable for German firms: Art. 28 DPA and EU storage in Ireland. What to verify before rollout.](https://compound.law/en-DE/tools/synthesia/) [![Claude Pro GDPR compliance review — no DPA means Claude Pro is not suitable for business personal data](https://compound.law/assets/images/tools/tools_1.webp)](https://compound.law/en-DE/tools/claude-pro-privacy/) [tools](https://compound.law/en-DE/tools/claude-pro-privacy/) ### [Claude Pro GDPR Compliance: Not for Business, Team vs Enterprise](https://compound.law/en-DE/tools/claude-pro-privacy/) [Claude Pro is not the GDPR-compliant business tier. Claude Team adds the Article 28 DPA; Enterprise adds stronger controls and EU residency options.](https://compound.law/en-DE/tools/claude-pro-privacy/) [![Claude EU hosting options with AWS Bedrock Frankfurt and Google Vertex AI for GDPR compliance](https://compound.law/assets/images/tools/tools_1.webp)](https://compound.law/en-DE/tools/claude-eu-hosting/) [tools](https://compound.law/en-DE/tools/claude-eu-hosting/) ### [Where Is Claude Hosted? EU Hosting & Data Residency Facts (2026)](https://compound.law/en-DE/tools/claude-eu-hosting/) [Where is Claude hosted? No EU residency by default; EU path is Bedrock/Vertex AI](https://compound.law/en-DE/tools/claude-eu-hosting/) Tool Library ### Browse More AI Tools by Topic Compare more tools, privacy issues, and deployment scenarios in the full AI tool library. [View all AI tools](https://compound.law/en-DE/tools/) - [Claude ZDR: What It Covers, Who Qualifies, How to Get It tools](https://compound.law/en-DE/tools/claude-zdr/) - [Cursor DPA: Where to Find It and Which Plan German Teams Need tools](https://compound.law/en-DE/tools/cursor/) - [Is DeepSeek GDPR Compliant? What German Companies Need to Know tools](https://compound.law/en-DE/tools/deepseek/) - [Is Zapier GDPR Compliant? Germany Guide 2026 tools](https://compound.law/en-DE/tools/zapier/) - [Claude Code Data Privacy: GDPR, DPA & No Training Policy tools](https://compound.law/en-DE/tools/claude-code-gdpr/) - [HubSpot Privacy in Germany: GDPR, DPA, and Works Council Risks tools](https://compound.law/en-DE/tools/hubspot/) - [Claude GDPR: Which Claude Plans Work for Germany in 2026 tools](https://compound.law/en-DE/tools/claude-gdpr/) - [Anthropic SCCs: GDPR Data Transfer Guide for Module 2 and 3 tools](https://compound.law/en-DE/tools/anthropic-scc/) - [Zoom AI Companion GDPR Compliance for German Businesses tools](https://compound.law/en-DE/tools/zoom/) - [Claude Team vs Enterprise: Which Plan Is GDPR-Compliant for Your Team? tools](https://compound.law/en-DE/tools/claude-business/) - [Claude Team vs Enterprise: Plan Comparison for German Businesses tools](https://compound.law/en-DE/tools/claude-team-vs-enterprise/) - [Claude Enterprise for Law Firms and Legal Teams tools](https://compound.law/en-DE/tools/claude-enterprise-legal-teams/) - [Anthropic Data Processing Addendum: Where to Find the Official DPA tools](https://compound.law/en-DE/tools/anthropic-data-processing-addendum/) - [Anthropic DPA: GDPR Article 28 Guide for German Companies tools](https://compound.law/en-DE/tools/anthropic-dpa/) - [Claude Enterprise GDPR: DPA Yes, EU Residency No by Default tools](https://compound.law/en-DE/tools/claude-enterprise/) ## Frequently asked questions No. Anthropic does not have an official plan called Claude Business. The three commercial tiers are Claude Pro (individual), Claude Team (business, minimum 5 users), and Claude Enterprise (custom). Claude Team is the entry-level tier that includes a DPA and is suitable for GDPR business use. Claude Team and Claude Enterprise both include an automatic DPA with Standard Contractual Clauses. Claude Pro and Claude Free are consumer plans with no DPA and are not suitable for GDPR-regulated business use involving personal data. Claude Team can support GDPR-compliant use. It includes a DPA, has a 5-user minimum, and covers SCCs for international transfers. Compliance depends on the specific use case, legal basis, data categories, and safeguards your team puts in place. Claude Team is the entry-level business tier with a DPA and a 5-user minimum, priced at around €25 per user per month. Claude Enterprise is custom-quoted and adds SSO, audit logs, custom system prompts, a larger context window, and optional Zero-Data-Retention for organisations with stricter compliance needs. Not for processing personal data. Claude Pro is a consumer plan with no DPA. Employees using a personal Claude Pro account to process company or customer personal data creates a GDPR violation — there is no processor agreement in place. Claude Enterprise is appropriate when the organisation needs SSO, audit logs, custom system prompts, a larger context window, or the optional Zero-Data-Retention add-on. It is also the practical choice for regulated sectors, employee data workflows, and deployments requiring stricter governance controls. ## Structured data ```json [ { "@context": "https://schema.org", "@type": [ "Organization", "LegalService" ], "@id": "https://compound.law/#organization", "name": "Compound Law", "alternateName": "Compound Law — AI Law Firm", "url": "https://compound.law/", "logo": { "@type": "ImageObject", "url": "https://compound.law/press/logos/PNG/Compound_Law_Icon.png", "width": 1024, "height": 1024 }, "image": "https://compound.law/assets/images/og-image.webp", "description": "The AI-native law firm in Berlin for start-ups, mid-sized companies and corporates: commercial and contract law, data protection, the EU AI Act, trademarks, corporate law, and restructuring and insolvency. A lawyer reviews every result, billed at a flat fee.", "foundingDate": "2026", "founder": [ { "@type": "Person", "name": "Marko Bradic", "jobTitle": "CEO", "url": "https://compound.law/en-DE/tech-team/marko-bradic/", "sameAs": [ "https://www.linkedin.com/in/markobradic/" ], "knowsAbout": [ "Product strategy and development", "Scaling technology companies", "FinTech and financial services", "AI-powered product innovation", "Business operations and growth", "Digital transformation" ] }, { "@type": "Person", "name": "Mohit Tilwani", "jobTitle": "CTO", "url": "https://compound.law/en-DE/tech-team/mohit-tilwani/", "sameAs": [ "https://www.linkedin.com/in/mohit-tilwani/" ], "knowsAbout": [ "Engineering leadership and architecture", "Scaling high-traffic systems", "AI and machine learning infrastructure", "FinTech platform development", "Cloud infrastructure and DevOps", "Product engineering" ] }, { "@type": "Person", "name": "Julian Jantze", "jobTitle": "Rechtsanwalt", "url": "https://compound.law/en-DE/lawyers/julian-jantze/", "sameAs": [ "https://www.linkedin.com/in/julian-jantze-957b95158/" ], "knowsAbout": [ "Corporate law and corporate governance for technology companies", "Employment law and HR compliance", "EU AI Act compliance and AI governance", "Employee participation models (VSOP/ESOP)", "Regulatory compliance for tech companies", "Legal operations and Legal Tech implementation" ] } ], "employee": [ { "@type": "Person", "name": "Marko Bradic", "jobTitle": "CEO", "url": "https://compound.law/en-DE/tech-team/marko-bradic/", "sameAs": [ "https://www.linkedin.com/in/markobradic/" ], "knowsAbout": [ "Product strategy and development", "Scaling technology companies", "FinTech and financial services", "AI-powered product innovation", "Business operations and growth", "Digital transformation" ] }, { "@type": "Person", "name": "Mohit Tilwani", "jobTitle": "CTO", "url": "https://compound.law/en-DE/tech-team/mohit-tilwani/", "sameAs": [ "https://www.linkedin.com/in/mohit-tilwani/" ], "knowsAbout": [ "Engineering leadership and architecture", "Scaling high-traffic systems", "AI and machine learning infrastructure", "FinTech platform development", "Cloud infrastructure and DevOps", "Product engineering" ] }, { "@type": "Person", "name": "Julian Jantze", "jobTitle": "Rechtsanwalt", "url": "https://compound.law/en-DE/lawyers/julian-jantze/", "sameAs": [ "https://www.linkedin.com/in/julian-jantze-957b95158/" ], "knowsAbout": [ "Corporate law and corporate governance for technology companies", "Employment law and HR compliance", "EU AI Act compliance and AI governance", "Employee participation models (VSOP/ESOP)", "Regulatory compliance for tech companies", "Legal operations and Legal Tech implementation" ] }, { "@type": "Person", "name": "Marc Schuba", "jobTitle": "Founding Partner, Rechtsanwalt (German attorney)", "url": "https://compound.law/en-DE/lawyers/marc-schuba/", "sameAs": [ "https://www.linkedin.com/in/marcschuba/" ], "knowsAbout": [ "IP and IT law", "SaaS and IT contracts, IT outsourcing", "Software and open-source licensing", "Data protection law (GDPR)", "AI law and the EU AI Act" ] }, { "@type": "Person", "name": "Dr. Markus Dreißigacker", "jobTitle": "Rechtsanwalt", "url": "https://compound.law/en-DE/lawyers/markus-dreissigacker/", "sameAs": [ "https://www.linkedin.com/in/markusdreissigacker" ], "knowsAbout": [ "M&A (Due diligence, post-merger integration, IPO readiness)", "Corporate Law (Governance, board work, restructuring)", "Commercial Law (Customer contracts, supplier agreements, NDAs)", "IP (Trademark management, IP transfer agreements)", "Compliance & ESG (Global compliance programs, human rights, sustainability)", "Data Protection (GDPR strategy, DPO experience, privacy programs)" ] }, { "@type": "Person", "name": "Philipp Brandt", "jobTitle": "Partner, Rechtsanwalt (German attorney), Specialist Lawyer for Intellectual Property Law", "url": "https://compound.law/en-DE/lawyers/philipp-brandt/", "sameAs": [ "https://www.linkedin.com/in/philipp-brandt-81b446a/" ], "knowsAbout": [ "Restructuring and insolvency law (crisis advice for management, protective shield and insolvency plan proceedings, insolvency administration)", "Intellectual property (trademarks, unfair competition, copyright, trade secrets, licence agreements)", "Data protection law (data breaches, regulatory fine proceedings, access and damages claims)", "Distribution and commercial law (distribution agreements, acquisition and sale of industrial plants)" ] } ], "address": { "@type": "PostalAddress", "addressLocality": "Berlin", "addressCountry": "DE" }, "areaServed": [ "Germany", "Austria", "Switzerland", "European Union", "United Kingdom", "United States", "Singapore" ], "availableLanguage": [ "de", "en" ], "serviceType": [ "AI law firm", "AI-native legal services", "legal counsel for start-ups and growth companies", "legal counsel for mid-sized companies and corporates", "Commercial Law", "Corporate Law", "Employment Law", "Regulatory & Compliance", "Intellectual Property", "Insolvency & Restructuring" ], "hasOfferCatalog": { "@type": "OfferCatalog", "name": "Compound Law services", "itemListElement": [ { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "Commercial Contracts", "description": "Battle-tested contracts for your sales process", "serviceType": [ "enterprise contracts", "MSA", "DPA", "sales contracts" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "International Employment", "description": "Compliant hiring across borders", "serviceType": [ "international employment", "hiring abroad", "employment contracts" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "VSOP/ESOP Setup", "description": "Employee participation that actually works", "serviceType": [ "VSOP", "ESOP", "employee stock options", "equity incentives" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "Funding Round Support", "description": "Clean legal for your next raise", "serviceType": [ "funding round", "term sheet", "SHA", "due diligence", "cap table" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "Corporate Housekeeping", "description": "Get your legal house in order", "serviceType": [ "corporate governance", "board resolutions", "shareholder register" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "Data Protection & Privacy", "description": "GDPR compliance that doesn't slow you down", "serviceType": [ "GDPR", "data protection", "privacy", "DPA", "cookies", "data breach response", "GDPR fines", "Art. 82 GDPR" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "AI Act Compliance", "description": "Navigate EU AI regulation", "serviceType": [ "AI Act", "AI compliance", "AI governance", "EU AI regulation" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "IP & Competition", "description": "Protect and enforce what you've built", "serviceType": [ "IP protection", "intellectual property", "trademarks", "trademark enforcement", "warning letters", "preliminary injunctions", "unfair competition", "software licensing", "open source compliance" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "Fractional General Counsel", "description": "In-house legal without the full-time cost", "serviceType": [ "fractional GC", "fractional general counsel", "outsourced legal", "legal retainer" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "FinTech Compliance", "description": "Navigate financial regulation", "serviceType": [ "fintech compliance", "BaFin", "banking regulation", "AML", "KYC" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "Legal Retainer", "description": "Predictable legal support when you need it", "serviceType": [ "legal retainer", "legal subscription", "ongoing legal support" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "M&A Preparation", "description": "Get ready for acquisition interest", "serviceType": [ "M&A preparation", "acquisition", "due diligence", "exit" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "Restructuring & Insolvency", "description": "From the first liquidity check to the restructuring itself", "serviceType": [ "restructuring", "insolvency", "StaRUG", "self-administration", "insolvency plan", "director liability" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } } ] }, "contactPoint": { "@type": "ContactPoint", "contactType": "sales", "email": "contact@compound.law", "availableLanguage": [ "English", "German" ], "areaServed": [ "DE", "AT", "CH", "EU", "GB", "US", "SG" ] }, "email": "contact@compound.law", "sameAs": [ "https://www.linkedin.com/company/compoundlawfirm", "https://x.com/CompoundLawFirm" ], "knowsAbout": [ "Commercial Contracts", "enterprise contracts", "MSA", "DPA", "sales contracts", "International Employment", "international employment", "hiring abroad", "employment contracts", "VSOP/ESOP Setup", "VSOP", "ESOP", "employee stock options", "equity incentives", "Funding Round Support", "funding round", "term sheet", "SHA", "due diligence", "cap table", "Corporate Housekeeping", "corporate governance", "board resolutions", "shareholder register", "Data Protection & Privacy", "GDPR", "data protection", "privacy", "cookies", "data breach response", "GDPR fines", "Art. 82 GDPR", "AI Act Compliance", "AI Act", "AI compliance", "AI governance", "EU AI regulation", "IP & Competition", "IP protection", "intellectual property", "trademarks", "trademark enforcement", "warning letters", "preliminary injunctions", "unfair competition", "software licensing", "open source compliance", "Fractional General Counsel", "fractional GC", "fractional general counsel", "outsourced legal", "legal retainer", "FinTech Compliance", "fintech compliance", "BaFin", "banking regulation", "AML", "KYC", "Legal Retainer", "legal subscription", "ongoing legal support", "M&A Preparation", "M&A preparation", "acquisition", "exit", "Restructuring & Insolvency", "restructuring", "insolvency", "StaRUG", "self-administration", "insolvency plan", "director liability" ] }, { "@context": "https://schema.org", "@type": "Article", "headline": "Claude Business, Team & Enterprise: Which Plan Includes a GDPR DPA?", "description": "There is no Claude Business plan. Anthropic offers Pro, Team, and Enterprise — this guide shows which tier includes a GDPR DPA for companies in Germany.", "image": "https://compound.law/assets/images/tools/tools_2.webp", "datePublished": "2026-04-27T00:00:00.000Z", "dateModified": "2026-04-27T00:00:00.000Z", "author": { "@type": "Person", "name": "Julian Jantze", "image": "https://compound.law/assets/images/team/julianjantze.webp" }, "publisher": { "@type": "Organization", "@id": "https://compound.law/#organization", "name": "Compound Law" }, "mainEntityOfPage": { "@type": "WebPage", "@id": "https://compound.law/en-DE/tools/claude-business-gdpr/" } }, { "@context": "https://schema.org", "@type": "BreadcrumbList", "itemListElement": [ { "@type": "ListItem", "position": 1, "name": "Home", "item": "https://compound.law/en-DE/" }, { "@type": "ListItem", "position": 2, "name": "AI Tools", "item": "https://compound.law/en-DE/tools/" }, { "@type": "ListItem", "position": 3, "name": "Claude Business, Team & Enterprise: Which Plan Includes a GDPR DPA?", "item": "https://compound.law/en-DE/tools/claude-business-gdpr/" } ] }, { "@context": "https://schema.org", "@type": "FAQPage", "mainEntity": [ { "@type": "Question", "name": "Does Anthropic offer a Claude Business plan?", "acceptedAnswer": { "@type": "Answer", "text": "No. Anthropic does not have an official plan called Claude Business. The three commercial tiers are Claude Pro (individual), Claude Team (business, minimum 5 users), and Claude Enterprise (custom). Claude Team is the entry-level tier that includes a DPA and is suitable for GDPR business use." } }, { "@type": "Question", "name": "Which Claude plan includes a GDPR data processing agreement?", "acceptedAnswer": { "@type": "Answer", "text": "Claude Team and Claude Enterprise both include an automatic DPA with Standard Contractual Clauses. Claude Pro and Claude Free are consumer plans with no DPA and are not suitable for GDPR-regulated business use involving personal data." } }, { "@type": "Question", "name": "Is Claude Team GDPR compliant for businesses in Germany?", "acceptedAnswer": { "@type": "Answer", "text": "Claude Team can support GDPR-compliant use. It includes a DPA, has a 5-user minimum, and covers SCCs for international transfers. Compliance depends on the specific use case, legal basis, data categories, and safeguards your team puts in place." } }, { "@type": "Question", "name": "What is the difference between Claude Team and Claude Enterprise?", "acceptedAnswer": { "@type": "Answer", "text": "Claude Team is the entry-level business tier with a DPA and a 5-user minimum, priced at around €25 per user per month. Claude Enterprise is custom-quoted and adds SSO, audit logs, custom system prompts, a larger context window, and optional Zero-Data-Retention for organisations with stricter compliance needs." } }, { "@type": "Question", "name": "Can employees use personal Claude Pro subscriptions for work?", "acceptedAnswer": { "@type": "Answer", "text": "Not for processing personal data. Claude Pro is a consumer plan with no DPA. Employees using a personal Claude Pro account to process company or customer personal data creates a GDPR violation — there is no processor agreement in place." } }, { "@type": "Question", "name": "When does a company need Claude Enterprise instead of Claude Team?", "acceptedAnswer": { "@type": "Answer", "text": "Claude Enterprise is appropriate when the organisation needs SSO, audit logs, custom system prompts, a larger context window, or the optional Zero-Data-Retention add-on. It is also the practical choice for regulated sectors, employee data workflows, and deployments requiring stricter governance controls." } } ] } ] ```