--- title: "Where Is Claude Hosted? EU Hosting & Data Residency Facts (2026)" description: "Where is Claude hosted? No EU residency by default; EU path is Bedrock/Vertex AI" image: "https://compound.law/assets/images/og-image-en.webp" source: "https://compound.law/en-DE/tools/claude-eu-hosting/" language: "en" --- ![Claude EU hosting options with AWS Bedrock Frankfurt and Google Vertex AI for GDPR compliance](https://compound.law/assets/images/tools/tools_1.webp) tools # Where Is Claude Hosted? EU Hosting & Data Residency Facts (2026) 15 August 2026 Where is Claude hosted? Nowhere EU-only by default. Direct Anthropic (claude.ai and API) may process commercial data in Europe but stores it in the US by default. EU-region Claude hosting runs through AWS Bedrock (eu-central-1 Frankfurt) or Google Vertex AI EU regions, each with its own contract and region verification. - Direct Anthropic is transfer-based, not EU-only: processing may touch Europe, but storage defaults to the US. - Claude Enterprise does not add EU data residency — it strengthens governance, not hosting geography. - Zero data retention answers retention, not geography; treat the two controls separately. - Bedrock Frankfurt (eu-central-1) and Vertex AI EU regions are the documentable EU path. **Claude is not hosted EU-only by default.** Direct Anthropic (claude.ai and the API) may process commercial data in Europe but stores it in the US by default. EU-region Claude hosting runs through **AWS Bedrock (eu-central-1 Frankfurt)** or **Google Vertex AI EU regions**, each with its own contract and region verification. This page answers where Claude is hosted, whether it can run EU-only, and which deployment path German procurement teams can defend. Verbatim, excerpt-ready answers to “Is Claude GDPR compliant?” and “Is Claude European?” follow below. This page provides general information, not legal advice for a specific deployment; individual situations require counsel. ## Where is Claude hosted? The short answer For procurement purposes, collapse the hosting question into three deployment paths: | Deployment path | EU-only hosting? | What to verify | | ----------------------------------------------- | ----------------------------------------------------------------------------------------------- | ----------------------------------------------------------------------- | | Direct Anthropic (`claude.ai` or Anthropic API) | **No** — processing may include Europe, but default storage is US-based unless otherwise agreed | DPA, SCCs, transfer impact assessment, retention settings | | Claude via AWS Bedrock in an EU region | **Usually yes for the deployment architecture** | Region lock or EU geo profile, logs, support access, contract structure | | Claude via Google Vertex AI in an EU region | **Usually yes for the deployment architecture** | Region, connected services, logging, contract path | The short version for an internal memo: **do not describe direct Anthropic Claude as EU-only hosted; describe Bedrock or Vertex AI EU deployments as EU-region hosting only after region and contract verification.** Both extremes you will hear in vendor conversations are too blunt. “Claude has no Europe story at all” ignores documented European processing and the EU-region paths above. “Claude is EU hosted” overstates a US-storage default into a residency commitment. German buyers at this stage usually want the procurement defensible answer, not a slogan — the rest of this page separates the four questions that get collapsed into one search term. ## Is Claude GDPR compliant? Commercial Claude plans ship a Data Processing Addendum (Article 28 terms) with Standard Contractual Clauses for Chapter V GDPR transfers — but no default “GDPR compliant” badge exists. Where data is processed depends on deployment: direct claude.ai or API use means US-based processing under SCCs; contractual EU data residency exists only via AWS Bedrock eu-central-1 (Frankfurt) or Vertex AI EU regions. For a German controller, that distinction decides the review path. If your workflow can accept a transfer-based model, the review turns on the [Claude DPA](https://compound.law/en-DE/tools/claude-dpa/), a transfer impact assessment, and retention settings. If a customer contract, regulator, or professional-secrecy duty requires EU-only processing, SCCs do not carry it — you need an EU-region deployment. Note that team-plan buyers have narrower questions: our [Claude Team GDPR guide](https://compound.law/en-DE/tools/claude-team-gdpr/) covers the Team plan’s DPA scope only, while our [Anthropic GDPR compliance guide](https://compound.law/en-DE/compliance/anthropic-gdpr-compliance/) keeps the full compliance picture. What a German reviewer documents either way: - the **DPA** that actually governs the deployment (Anthropic direct, AWS, or Google Cloud) - **transfer mechanism and TIA** where processing or support access touches third countries - **retention settings** and whether covered data is persisted after use - whether a **DPIA** trigger applies under Article 35 GDPR for the intended workflow ## Is Claude European? Anthropic is a US company headquartered in San Francisco, and Claude is not an EU product — no European Claude is built and hosted in the EU. EU availability comes through hyperscaler EU regions: AWS Bedrock (eu-central-1 Frankfurt and other EU regions) or Google Vertex AI EU regions, each with its own contract and region verification. For German procurement, the practical consequence is not that Claude is unusable — it is that you document it like a **US-headquartered processor**: Article 28 terms, Chapter V transfer mechanism, subprocessor review, and, where required, an EU-region deployment. Claude servers located in the EU are a deployment choice, not a property of the product. That is also the honest answer for employee-facing questions. If a works council or an employee asks whether “the AI” stores data in Germany, the defensible answer for direct Claude is no — and for a Bedrock or Vertex AI deployment it is “in an EU region, under these contract terms, with these remaining review points.” Precision here prevents both overclaiming in vendor decks and unnecessary blocking of useful workflows. ## Anthropic EU servers: processing vs storage For **direct Anthropic**, the practical answer is: **Claude may process commercial customer data in Europe and other regions, but storage is still US-based by default unless otherwise agreed**. If the buyer question is really “where are Claude servers located?”, do not simplify that into “Europe” for the direct product. The safer answer is that Anthropic describes a **multi-region processing model with US storage by default**, not an EU-only hosting product. Anthropic’s commercial privacy materials distinguish between **processing geography** and **storage geography**. The practical reading as reviewed on **October 25, 2026** is: - customer data may be processed in multiple regions, including **Europe** - customer data is stored in the **US by default** unless otherwise agreed Anthropic’s developer documentation sharpens the same distinction: the `inference_geo` control offers only **US-only or global** inference routing — there is no EU option — and the workspace storage geo is currently **US-only**, with US-only inference carrying a documented pricing multiplier. In other words, Anthropic sells geography control for the US, not for the EU. For procurement teams, the wording matters. “May be processed in Europe” is **not** the same statement as “is EU hosted” or “is stored only in the EU.” ## Does Claude Enterprise include EU data residency? **No.** Claude Enterprise is mainly the **procurement and governance layer**. It can improve internal controls, admin oversight, and retention posture, but it does not by itself turn direct Anthropic into an EU-only hosting setup. Use the adjacent pages for the other questions: - [Claude Enterprise](https://compound.law/en-DE/tools/claude-enterprise/) for plan and governance scope - [Claude ZDR](https://compound.law/en-DE/tools/claude-zdr/) for retention controls - [Claude DPA](https://compound.law/en-DE/tools/claude-dpa/) for the Article 28 GDPR contract layer - [Anthropic SCC](https://compound.law/en-DE/tools/anthropic-scc/) for transfer analysis ## EU hosting vs EU data residency vs ZDR vs Enterprise | Term | What it answers | What it does not answer | | ----------------------- | ----------------------------------------------------------------------------- | ------------------------------------------------------------ | | **EU hosting** | Where the model stack runs | Whether all storage, logs, and support access stay in the EU | | **EU data residency** | Whether data stays within the agreed geography under the real operating model | Whether retention is zero or near-zero | | **Zero data retention** | Whether covered prompts and outputs are persisted after use | Whether processing is EU-only | | **Claude Enterprise** | Whether you get stronger governance and admin controls | Whether Anthropic direct becomes EU-only | For German buyers, this is where many reviews go wrong. Someone searching `anthropic eu data residency` is rarely asking whether Enterprise has better admin controls. They are asking whether they can describe the deployment as EU-only without overstating the facts. Map your requirement to the path before you compare plans: | If your requirement is… | Best starting answer | Why | | ------------------------------------------------------------- | ---------------------------------------- | ------------------------------------------------------------------------------- | | ”We need the cleanest EU-only hosting story” | **Bedrock or Vertex AI in an EU region** | The infrastructure story is usually easier to document than on Anthropic direct | | ”We can accept transfers if the contract path is defensible” | **Direct Anthropic may still work** | The legal review turns on the DPA, SCCs, retention, and workflow sensitivity | | ”We need lower storage risk, not necessarily EU-only hosting” | **Check ZDR separately** | Zero data retention answers retention, not geography | | ”We need admin and governance controls for rollout” | **Check Claude Enterprise separately** | Enterprise improves governance, not hosting geography | ## When Bedrock or Vertex AI is the cleaner answer For many procurement teams in Germany, the easiest path is not to argue that Anthropic direct is “close enough” to EU hosting. It is to choose the stack that gives the clearest geography story. ### AWS Bedrock Bedrock is often the cleaner path when your company already runs regulated workloads on AWS. AWS confirms that customer content in a selected region stays at rest in that region, and it explicitly positions its EU **geographic (Geo) inference profiles** — which keep prompts and outputs within EU regions — for GDPR-scoped data residency requirements. Verify: - the exact **EU region** selected for Claude, and whether your model version runs **in-region** (for example in `eu-central-1` Frankfurt) or only through the **EU geo profile**, which keeps processing inside EU regions but may move it between them - whether any **cross-region routing** remains enabled - where **logs and telemetry** are stored - whether support or incident handling introduces a separate transfer path ### Google Vertex AI Vertex AI can offer the same clarity for companies standardized on Google Cloud. Verify: - the exact **EU region** used for the Claude deployment - whether connected Google services create a non-EU path - how logging, monitoring, and support are actually handled - which contract path governs the real processing flow ## When direct Anthropic + SCCs is still the answer Not every company needs strict EU-only architecture. If your company can accept a transfer-based model, the real question may be whether direct Anthropic is acceptable under **Article 28 GDPR**, **Chapter V GDPR**, and your internal risk model. That is often the better framing where: - the workflow is lower sensitivity - your legal team is comfortable with a transfer-based setup - there is no customer or regulator requirement for EU-only storage - the business wants direct Anthropic features rather than cloud intermediary deployment The important drafting point is simple: **an SCC-based answer is not the same as an EU-only hosting answer.** ## Microsoft 365 Copilot and the EU Data Boundary Do not assume that enabling Claude models inside Microsoft 365 Copilot keeps the related model processing inside Microsoft’s EU Data Boundary. Microsoft currently states that Anthropic models used in its Copilot experiences are **excluded from the EU Data Boundary** and, where applicable, in-country processing commitments. For an EU tenant, confirm the Anthropic-model admin setting, the Microsoft DPA and subprocessor terms, and the data flow for the specific Copilot experience before approval. A general Microsoft 365 residency commitment should not be treated as proof that Claude processing is EU-only. ## What to verify before signing A practical review memo should cover at least these five points: 1. **Contract path**: Are you buying from Anthropic directly, through AWS, or through Google Cloud? 2. **Region lock**: Is the intended EU region actually fixed, or can routing fail over elsewhere? 3. **Storage and retention**: Where is data stored, and for how long? 4. **Support and subprocessors**: Could support access, telemetry, or subprocessors create a non-EU path? 5. **Workflow sensitivity**: Is this an internal research workflow, or does it involve employee, customer, or regulated data? If the review surfaces that your workflows need EU-only processing, the deployment section above is the place to start; if it surfaces only retention concerns, [Claude ZDR](https://compound.law/en-DE/tools/claude-zdr/) answers a different question and both controls can be combined. ## Need a Claude deployment review? Compound Law advises businesses, founders, and in-house teams in Germany on **AI procurement, GDPR, commercial contracts, and AI governance**. If you need a deployment-specific review of **Claude hosting, data residency, DPA terms, or transfer risk**, [contact us](https://compound.law/en-DE/#booking). ## Related Tool Guides [![Canva DPA data processing addendum reviewed under Article 28 GDPR](https://compound.law/assets/images/tools/tools_3.webp)](https://compound.law/en-DE/tools/canva-dpa/) [tools](https://compound.law/en-DE/tools/canva-dpa/) ### [Does Canva Offer a DPA? Yes — Canva DPA Guide for Germany](https://compound.law/en-DE/tools/canva-dpa/) [Yes — Canva provides a Data Processing Addendum on paid plans. See what the Canva DPA covers clause by clause: SCCs, subprocessors, audits, German-law gaps.](https://compound.law/en-DE/tools/canva-dpa/) [![Cursor DPA data processing agreement Art. 28 GDPR review for Germany](https://compound.law/assets/images/tools/tools_1.webp)](https://compound.law/en-DE/tools/cursor-dpa/) [tools](https://compound.law/en-DE/tools/cursor-dpa/) ### [Cursor DPA: Yes — What the Anysphere Data Processing Agreement Covers](https://compound.law/en-DE/tools/cursor-dpa/) [Yes, Cursor offers a DPA at cursor.com/terms/dpa. What the Cursor data processing agreement covers under GDPR Art. 28 — and how German buyers should review it.](https://compound.law/en-DE/tools/cursor-dpa/) [![ElevenLabs DPA data processing addendum reviewed under Article 28 GDPR](https://compound.law/assets/images/tools/tools_4.webp)](https://compound.law/en-DE/tools/elevenlabs-dpa/) [tools](https://compound.law/en-DE/tools/elevenlabs-dpa/) ### [Does ElevenLabs Offer a DPA? Yes — ElevenLabs DPA Guide for Germany](https://compound.law/en-DE/tools/elevenlabs-dpa/) [Yes — ElevenLabs publishes a Data Processing Addendum at elevenlabs.io/dpa. What the ElevenLabs DPA covers clause by clause under Article 28 GDPR.](https://compound.law/en-DE/tools/elevenlabs-dpa/) [![Synthesia GDPR compliance facts: AI video training policy, DPA, and EU data storage](https://compound.law/assets/images/tools/tools_4.webp)](https://compound.law/en-DE/tools/synthesia/) [tools](https://compound.law/en-DE/tools/synthesia/) ### [Synthesia GDPR: Training, DPA & German Compliance Facts](https://compound.law/en-DE/tools/synthesia/) [No — Synthesia does not train on customer content. GDPR-usable for German firms: Art. 28 DPA and EU storage in Ireland. What to verify before rollout.](https://compound.law/en-DE/tools/synthesia/) [![Claude Pro GDPR compliance review — no DPA means Claude Pro is not suitable for business personal data](https://compound.law/assets/images/tools/tools_1.webp)](https://compound.law/en-DE/tools/claude-pro-privacy/) [tools](https://compound.law/en-DE/tools/claude-pro-privacy/) ### [Claude Pro GDPR Compliance: Not for Business, Team vs Enterprise](https://compound.law/en-DE/tools/claude-pro-privacy/) [Claude Pro is not the GDPR-compliant business tier. Claude Team adds the Article 28 DPA; Enterprise adds stronger controls and EU residency options.](https://compound.law/en-DE/tools/claude-pro-privacy/) [![Claude ZDR zero data retention guide for Anthropic API and Claude Code enterprise use](https://compound.law/assets/images/tools/tools_1.webp)](https://compound.law/en-DE/tools/claude-zdr/) [tools](https://compound.law/en-DE/tools/claude-zdr/) ### [Claude ZDR: What It Covers, Who Qualifies, How to Get It](https://compound.law/en-DE/tools/claude-zdr/) [Claude ZDR is available for the Anthropic API and Claude Code. See which plans qualify, what's excluded, and how to request enablement for your organization.](https://compound.law/en-DE/tools/claude-zdr/) Tool Library ### Browse More AI Tools by Topic Compare more tools, privacy issues, and deployment scenarios in the full AI tool library. [View all AI tools](https://compound.law/en-DE/tools/) - [Cursor DPA: Where to Find It and Which Plan German Teams Need tools](https://compound.law/en-DE/tools/cursor/) - [Is DeepSeek GDPR Compliant? What German Companies Need to Know tools](https://compound.law/en-DE/tools/deepseek/) - [Is Zapier GDPR Compliant? Germany Guide 2026 tools](https://compound.law/en-DE/tools/zapier/) - [Claude Code Data Privacy: GDPR, DPA & No Training Policy tools](https://compound.law/en-DE/tools/claude-code-gdpr/) - [HubSpot Privacy in Germany: GDPR, DPA, and Works Council Risks tools](https://compound.law/en-DE/tools/hubspot/) - [Claude GDPR: Which Claude Plans Work for Germany in 2026 tools](https://compound.law/en-DE/tools/claude-gdpr/) - [Anthropic SCCs: GDPR Data Transfer Guide for Module 2 and 3 tools](https://compound.law/en-DE/tools/anthropic-scc/) - [Zoom AI Companion GDPR Compliance for German Businesses tools](https://compound.law/en-DE/tools/zoom/) - [Claude Team vs Enterprise: Which Plan Is GDPR-Compliant for Your Team? tools](https://compound.law/en-DE/tools/claude-business/) - [Claude Team vs Enterprise: Plan Comparison for German Businesses tools](https://compound.law/en-DE/tools/claude-team-vs-enterprise/) - [Claude Enterprise for Law Firms and Legal Teams tools](https://compound.law/en-DE/tools/claude-enterprise-legal-teams/) - [Anthropic Data Processing Addendum: Where to Find the Official DPA tools](https://compound.law/en-DE/tools/anthropic-data-processing-addendum/) - [Anthropic DPA: GDPR Article 28 Guide for German Companies tools](https://compound.law/en-DE/tools/anthropic-dpa/) - [Claude Enterprise GDPR: DPA Yes, EU Residency No by Default tools](https://compound.law/en-DE/tools/claude-enterprise/) - [Claude Team Plan DPA & GDPR Compliance Guide tools](https://compound.law/en-DE/tools/claude-team-gdpr/) ## Frequently asked questions Nowhere EU-only by default. Anthropic's commercial privacy materials allow commercial customer data to be processed in Europe and other regions, while storage stays in the US by default unless otherwise agreed — as reviewed October 25, 2026. EU-region Claude hosting runs through AWS Bedrock (eu-central-1 Frankfurt) or Google Cloud Vertex AI EU regions, each with its own contract and region verification. For direct Anthropic there is no EU-only server location to point to: Anthropic's documentation describes US or global inference routing and US-only workspace storage. Claude traffic is therefore not EU hosted even when some processing happens in Europe. Companies that need a documentable EU location deploy Claude through AWS Bedrock in an EU region such as Frankfurt or through Vertex AI EU regions. Commercial Claude plans ship a Data Processing Addendum with Article 28 GDPR processor terms and Standard Contractual Clauses for Chapter V transfers, so Claude is not GDPR non-compliant by default — but there is no default GDPR compliant badge. Where data is processed depends on the deployment: direct claude.ai or API use means US-based processing under SCCs, while contractual EU data residency exists only via AWS Bedrock eu-central-1 (Frankfurt) or Vertex AI EU regions. German buyers should document purpose, data categories, retention, and a transfer impact assessment where SCCs carry the transfer. No. Anthropic is a US company headquartered in San Francisco, and Claude is not an EU product. EU availability comes through hyperscaler EU regions — AWS Bedrock (including eu-central-1 Frankfurt) or Google Vertex AI EU regions — where the cloud provider's DPA and region configuration govern processing. Buying direct from Anthropic means a US-centric architecture with SCC-based transfers. No. Claude Enterprise does not include EU data residency. The plan uses US-based infrastructure by default. EU data residency for Claude requires deployment via AWS Bedrock EU profiles (Frankfurt eu-central-1) or Google Cloud Vertex AI EU regions — both require a separate cloud provider setup outside the Claude Enterprise contract. Claude Enterprise includes Anthropic's commercial DPA and Standard Contractual Clauses for relevant Chapter V GDPR transfers, so it is not non-compliant by default. It does not include EU data residency. German businesses must assess purpose, data categories, retention, transfer risks, and EU-only duties; where EU-only processing is required, use Bedrock or Vertex AI in an EU region. No. Zero data retention addresses whether covered data is persisted after use. EU hosting or EU residency addresses where processing and storage occur. A company may need both controls separately. For teams that need a stronger EU-region answer, Claude via AWS Bedrock or Google Vertex AI in EU regions is usually easier to defend than direct Anthropic, assuming the region, logging, support access, and contract path are also documented. ## Structured data ```json [ { "@context": "https://schema.org", "@type": [ "Organization", "LegalService" ], "@id": "https://compound.law/#organization", "name": "Compound Law", "alternateName": "Compound Law — AI Law Firm", "url": "https://compound.law/", "logo": { "@type": "ImageObject", "url": "https://compound.law/press/logos/PNG/Compound_Law_Icon.png", "width": 1024, "height": 1024 }, "image": "https://compound.law/assets/images/og-image.webp", "description": "The AI-native law firm in Berlin for start-ups, mid-sized companies and corporates: commercial and contract law, data protection, the EU AI Act, trademarks, corporate law, and restructuring and insolvency. A lawyer reviews every result, billed at a flat fee.", "foundingDate": "2026", "founder": [ { "@type": "Person", "name": "Marko Bradic", "jobTitle": "CEO", "url": "https://compound.law/en-DE/tech-team/marko-bradic/", "sameAs": [ "https://www.linkedin.com/in/markobradic/" ], "knowsAbout": [ "Product strategy and development", "Scaling technology companies", "FinTech and financial services", "AI-powered product innovation", "Business operations and growth", "Digital transformation" ] }, { "@type": "Person", "name": "Mohit Tilwani", "jobTitle": "CTO", "url": "https://compound.law/en-DE/tech-team/mohit-tilwani/", "sameAs": [ "https://www.linkedin.com/in/mohit-tilwani/" ], "knowsAbout": [ "Engineering leadership and architecture", "Scaling high-traffic systems", "AI and machine learning infrastructure", "FinTech platform development", "Cloud infrastructure and DevOps", "Product engineering" ] }, { "@type": "Person", "name": "Julian Jantze", "jobTitle": "Rechtsanwalt", "url": "https://compound.law/en-DE/lawyers/julian-jantze/", "sameAs": [ "https://www.linkedin.com/in/julian-jantze-957b95158/" ], "knowsAbout": [ "Corporate law and corporate governance for technology companies", "Employment law and HR compliance", "EU AI Act compliance and AI governance", "Employee participation models (VSOP/ESOP)", "Regulatory compliance for tech companies", "Legal operations and Legal Tech implementation" ] } ], "employee": [ { "@type": "Person", "name": "Marko Bradic", "jobTitle": "CEO", "url": "https://compound.law/en-DE/tech-team/marko-bradic/", "sameAs": [ "https://www.linkedin.com/in/markobradic/" ], "knowsAbout": [ "Product strategy and development", "Scaling technology companies", "FinTech and financial services", "AI-powered product innovation", "Business operations and growth", "Digital transformation" ] }, { "@type": "Person", "name": "Mohit Tilwani", "jobTitle": "CTO", "url": "https://compound.law/en-DE/tech-team/mohit-tilwani/", "sameAs": [ "https://www.linkedin.com/in/mohit-tilwani/" ], "knowsAbout": [ "Engineering leadership and architecture", "Scaling high-traffic systems", "AI and machine learning infrastructure", "FinTech platform development", "Cloud infrastructure and DevOps", "Product engineering" ] }, { "@type": "Person", "name": "Julian Jantze", "jobTitle": "Rechtsanwalt", "url": "https://compound.law/en-DE/lawyers/julian-jantze/", "sameAs": [ "https://www.linkedin.com/in/julian-jantze-957b95158/" ], "knowsAbout": [ "Corporate law and corporate governance for technology companies", "Employment law and HR compliance", "EU AI Act compliance and AI governance", "Employee participation models (VSOP/ESOP)", "Regulatory compliance for tech companies", "Legal operations and Legal Tech implementation" ] }, { "@type": "Person", "name": "Marc Schuba", "jobTitle": "Founding Partner, Rechtsanwalt (German attorney)", "url": "https://compound.law/en-DE/lawyers/marc-schuba/", "sameAs": [ "https://www.linkedin.com/in/marcschuba/" ], "knowsAbout": [ "IP and IT law", "SaaS and IT contracts, IT outsourcing", "Software and open-source licensing", "Data protection law (GDPR)", "AI law and the EU AI Act" ] }, { "@type": "Person", "name": "Dr. Markus Dreißigacker", "jobTitle": "Rechtsanwalt", "url": "https://compound.law/en-DE/lawyers/markus-dreissigacker/", "sameAs": [ "https://www.linkedin.com/in/markusdreissigacker" ], "knowsAbout": [ "M&A (Due diligence, post-merger integration, IPO readiness)", "Corporate Law (Governance, board work, restructuring)", "Commercial Law (Customer contracts, supplier agreements, NDAs)", "IP (Trademark management, IP transfer agreements)", "Compliance & ESG (Global compliance programs, human rights, sustainability)", "Data Protection (GDPR strategy, DPO experience, privacy programs)" ] }, { "@type": "Person", "name": "Philipp Brandt", "jobTitle": "Partner, Rechtsanwalt (German attorney), Specialist Lawyer for Intellectual Property Law", "url": "https://compound.law/en-DE/lawyers/philipp-brandt/", "sameAs": [ "https://www.linkedin.com/in/philipp-brandt-81b446a/" ], "knowsAbout": [ "Restructuring and insolvency law (crisis advice for management, protective shield and insolvency plan proceedings, insolvency administration)", "Intellectual property (trademarks, unfair competition, copyright, trade secrets, licence agreements)", "Data protection law (data breaches, regulatory fine proceedings, access and damages claims)", "Distribution and commercial law (distribution agreements, acquisition and sale of industrial plants)" ] } ], "address": { "@type": "PostalAddress", "addressLocality": "Berlin", "addressCountry": "DE" }, "areaServed": [ "Germany", "Austria", "Switzerland", "European Union", "United Kingdom", "United States", "Singapore" ], "availableLanguage": [ "de", "en" ], "serviceType": [ "AI law firm", "AI-native legal services", "legal counsel for start-ups and growth companies", "legal counsel for mid-sized companies and corporates", "Commercial Law", "Corporate Law", "Employment Law", "Regulatory & Compliance", "Intellectual Property", "Insolvency & Restructuring" ], "hasOfferCatalog": { "@type": "OfferCatalog", "name": "Compound Law services", "itemListElement": [ { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "Commercial Contracts", "description": "Battle-tested contracts for your sales process", "serviceType": [ "enterprise contracts", "MSA", "DPA", "sales contracts" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "International Employment", "description": "Compliant hiring across borders", "serviceType": [ "international employment", "hiring abroad", "employment contracts" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "VSOP/ESOP Setup", "description": "Employee participation that actually works", "serviceType": [ "VSOP", "ESOP", "employee stock options", "equity incentives" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "Funding Round Support", "description": "Clean legal for your next raise", "serviceType": [ "funding round", "term sheet", "SHA", "due diligence", "cap table" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "Corporate Housekeeping", "description": "Get your legal house in order", "serviceType": [ "corporate governance", "board resolutions", "shareholder register" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "Data Protection & Privacy", "description": "GDPR compliance that doesn't slow you down", "serviceType": [ "GDPR", "data protection", "privacy", "DPA", "cookies", "data breach response", "GDPR fines", "Art. 82 GDPR" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "AI Act Compliance", "description": "Navigate EU AI regulation", "serviceType": [ "AI Act", "AI compliance", "AI governance", "EU AI regulation" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "IP & Competition", "description": "Protect and enforce what you've built", "serviceType": [ "IP protection", "intellectual property", "trademarks", "trademark enforcement", "warning letters", "preliminary injunctions", "unfair competition", "software licensing", "open source compliance" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "Fractional General Counsel", "description": "In-house legal without the full-time cost", "serviceType": [ "fractional GC", "fractional general counsel", "outsourced legal", "legal retainer" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "FinTech Compliance", "description": "Navigate financial regulation", "serviceType": [ "fintech compliance", "BaFin", "banking regulation", "AML", "KYC" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "Legal Retainer", "description": "Predictable legal support when you need it", "serviceType": [ "legal retainer", "legal subscription", "ongoing legal support" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "M&A Preparation", "description": "Get ready for acquisition interest", "serviceType": [ "M&A preparation", "acquisition", "due diligence", "exit" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "Restructuring & Insolvency", "description": "From the first liquidity check to the restructuring itself", "serviceType": [ "restructuring", "insolvency", "StaRUG", "self-administration", "insolvency plan", "director liability" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } } ] }, "contactPoint": { "@type": "ContactPoint", "contactType": "sales", "email": "contact@compound.law", "availableLanguage": [ "English", "German" ], "areaServed": [ "DE", "AT", "CH", "EU", "GB", "US", "SG" ] }, "email": "contact@compound.law", "sameAs": [ "https://www.linkedin.com/company/compoundlawfirm", "https://x.com/CompoundLawFirm" ], "knowsAbout": [ "Commercial Contracts", "enterprise contracts", "MSA", "DPA", "sales contracts", "International Employment", "international employment", "hiring abroad", "employment contracts", "VSOP/ESOP Setup", "VSOP", "ESOP", "employee stock options", "equity incentives", "Funding Round Support", "funding round", "term sheet", "SHA", "due diligence", "cap table", "Corporate Housekeeping", "corporate governance", "board resolutions", "shareholder register", "Data Protection & Privacy", "GDPR", "data protection", "privacy", "cookies", "data breach response", "GDPR fines", "Art. 82 GDPR", "AI Act Compliance", "AI Act", "AI compliance", "AI governance", "EU AI regulation", "IP & Competition", "IP protection", "intellectual property", "trademarks", "trademark enforcement", "warning letters", "preliminary injunctions", "unfair competition", "software licensing", "open source compliance", "Fractional General Counsel", "fractional GC", "fractional general counsel", "outsourced legal", "legal retainer", "FinTech Compliance", "fintech compliance", "BaFin", "banking regulation", "AML", "KYC", "Legal Retainer", "legal subscription", "ongoing legal support", "M&A Preparation", "M&A preparation", "acquisition", "exit", "Restructuring & Insolvency", "restructuring", "insolvency", "StaRUG", "self-administration", "insolvency plan", "director liability" ] }, { "@context": "https://schema.org", "@type": "Article", "headline": "Where Is Claude Hosted? EU Hosting & Data Residency Facts (2026)", "description": "Where is Claude hosted? No EU residency by default; EU path is Bedrock/Vertex AI", "image": "https://compound.law/assets/images/tools/tools_1.webp", "datePublished": "2026-08-15T00:00:00.000Z", "dateModified": "2026-08-15T00:00:00.000Z", "author": { "@type": "Person", "name": "Julian Jantze", "image": "https://compound.law/assets/images/team/julianjantze.webp" }, "publisher": { "@type": "Organization", "@id": "https://compound.law/#organization", "name": "Compound Law" }, "mainEntityOfPage": { "@type": "WebPage", "@id": "https://compound.law/en-DE/tools/claude-eu-hosting/" } }, { "@context": "https://schema.org", "@type": "BreadcrumbList", "itemListElement": [ { "@type": "ListItem", "position": 1, "name": "Home", "item": "https://compound.law/en-DE/" }, { "@type": "ListItem", "position": 2, "name": "AI Tools", "item": "https://compound.law/en-DE/tools/" }, { "@type": "ListItem", "position": 3, "name": "Where Is Claude Hosted? EU Hosting & Data Residency Facts (2026)", "item": "https://compound.law/en-DE/tools/claude-eu-hosting/" } ] }, { "@context": "https://schema.org", "@type": "FAQPage", "mainEntity": [ { "@type": "Question", "name": "Where is Claude hosted?", "acceptedAnswer": { "@type": "Answer", "text": "Nowhere EU-only by default. Anthropic's commercial privacy materials allow commercial customer data to be processed in Europe and other regions, while storage stays in the US by default unless otherwise agreed — as reviewed October 25, 2026. EU-region Claude hosting runs through AWS Bedrock (eu-central-1 Frankfurt) or Google Cloud Vertex AI EU regions, each with its own contract and region verification." } }, { "@type": "Question", "name": "Where are Claude's servers located?", "acceptedAnswer": { "@type": "Answer", "text": "For direct Anthropic there is no EU-only server location to point to: Anthropic's documentation describes US or global inference routing and US-only workspace storage. Claude traffic is therefore not EU hosted even when some processing happens in Europe. Companies that need a documentable EU location deploy Claude through AWS Bedrock in an EU region such as Frankfurt or through Vertex AI EU regions." } }, { "@type": "Question", "name": "Is Claude GDPR compliant?", "acceptedAnswer": { "@type": "Answer", "text": "Commercial Claude plans ship a Data Processing Addendum with Article 28 GDPR processor terms and Standard Contractual Clauses for Chapter V transfers, so Claude is not GDPR non-compliant by default — but there is no default GDPR compliant badge. Where data is processed depends on the deployment: direct claude.ai or API use means US-based processing under SCCs, while contractual EU data residency exists only via AWS Bedrock eu-central-1 (Frankfurt) or Vertex AI EU regions. German buyers should document purpose, data categories, retention, and a transfer impact assessment where SCCs carry the transfer." } }, { "@type": "Question", "name": "Is Claude European?", "acceptedAnswer": { "@type": "Answer", "text": "No. Anthropic is a US company headquartered in San Francisco, and Claude is not an EU product. EU availability comes through hyperscaler EU regions — AWS Bedrock (including eu-central-1 Frankfurt) or Google Vertex AI EU regions — where the cloud provider's DPA and region configuration govern processing. Buying direct from Anthropic means a US-centric architecture with SCC-based transfers." } }, { "@type": "Question", "name": "Does Claude Enterprise include EU data residency?", "acceptedAnswer": { "@type": "Answer", "text": "No. Claude Enterprise does not include EU data residency. The plan uses US-based infrastructure by default. EU data residency for Claude requires deployment via AWS Bedrock EU profiles (Frankfurt eu-central-1) or Google Cloud Vertex AI EU regions — both require a separate cloud provider setup outside the Claude Enterprise contract." } }, { "@type": "Question", "name": "Is Claude Enterprise GDPR compliant?", "acceptedAnswer": { "@type": "Answer", "text": "Claude Enterprise includes Anthropic's commercial DPA and Standard Contractual Clauses for relevant Chapter V GDPR transfers, so it is not non-compliant by default. It does not include EU data residency. German businesses must assess purpose, data categories, retention, transfer risks, and EU-only duties; where EU-only processing is required, use Bedrock or Vertex AI in an EU region." } }, { "@type": "Question", "name": "Is zero data retention the same as EU hosting?", "acceptedAnswer": { "@type": "Answer", "text": "No. Zero data retention addresses whether covered data is persisted after use. EU hosting or EU residency addresses where processing and storage occur. A company may need both controls separately." } }, { "@type": "Question", "name": "Which Claude path is easiest to defend in Germany?", "acceptedAnswer": { "@type": "Answer", "text": "For teams that need a stronger EU-region answer, Claude via AWS Bedrock or Google Vertex AI in EU regions is usually easier to defend than direct Anthropic, assuming the region, logging, support access, and contract path are also documented." } } ] } ] ```