--- title: "Claude Team Plan DPA & GDPR Compliance Guide" description: "Yes — Claude Team has a DPA under Article 28 GDPR. Covers what Team includes, EU data residency limits, and when to upgrade to Enterprise." image: "https://compound.law/assets/images/og-image-en.webp" source: "https://compound.law/en-DE/tools/claude-team-gdpr/" language: "en" --- ![Claude Team GDPR compliance — DPA and data protection guide for businesses](https://compound.law/assets/images/tools/tools_1.webp) tools # Claude Team Plan DPA & GDPR Compliance Guide 28 April 2026 Short answer Claude Team includes a DPA and meets the minimum requirements for GDPR-compliant business use. Limitations apply: no EU data residency, no zero data retention, no advanced security controls. Whether Claude Team is sufficient depends on the data categories and compliance requirements of the specific use case. - Claude Team includes a DPA — Free and Pro tiers do not. At minimum, Team is required for business use involving personal data. - EU data residency and zero data retention are not available on Claude Team — this limits suitability for sensitive data workflows. - Article 9 GDPR special-category data, strict confidentiality requirements, or audit log obligations require Claude Enterprise or individual legal review. **Claude Team** includes a Data Processing Agreement (DPA) and meets the minimum requirements for GDPR-compliant business use — unlike the consumer plans Free and Pro. The critical limitations are EU data residency, zero data retention, and advanced security controls, which are only available from Claude Enterprise onwards. Whether the Team plan is sufficient for your organisation depends on which data you process and which compliance requirements apply. This page provides general legal information and is not legal advice for a specific situation. For a broader overview of Claude under German data protection law, see our pages on the [Claude DPA](https://compound.law/en-DE/tools/claude-dpa/) and [Claude GDPR compliance](https://compound.law/en-DE/tools/claude-gdpr/). ## What Is Claude Team? **Claude Team** is Anthropic’s commercial group plan for a minimum of five users. It is aimed at agencies, small and medium-sized businesses, and teams that want to use AI-assisted work in a managed corporate environment — without the complexity of an Enterprise implementation. Key features of Claude Team: - **Minimum users:** 5 - **Conversations:** not used for model training - **DPA:** automatically incorporated into the Commercial Terms - **Administration:** central team dashboard for user management - **Model access:** access to Anthropic’s most capable Claude models Claude Team differs from **Claude Pro** (personal single-user plan, no DPA) and from **Claude Enterprise** (extended business plan with SSO, audit logs, zero data retention, and configurable data location). ## Does Claude Team Include a DPA? **Yes.** Anthropic provides a Data Processing Agreement (DPA) under **Article 28 GDPR** for all commercial products — Team, Enterprise, and API. The DPA is incorporated into the Anthropic Commercial Terms and applies from 1 January 2026 onwards. No separate signature or negotiation is required for standard deployments. **Important:** Free and Pro plans do not include a DPA. Organisations processing personal data on these plans operate without a contractual basis for data processing — this is not defensible under data protection law. You access the DPA electronically through the Anthropic customer portal at console.anthropic.com. It is not available as a standalone PDF download. For detailed information on the DPA’s content and how to review it, see our page on the [Claude DPA](https://compound.law/en-DE/tools/claude-dpa/). The DPA covers the mandatory content required under Article 28 GDPR: - Subject matter, duration, and purpose of processing - Anthropic’s obligation to act on instructions - Confidentiality obligations - Technical and organisational measures under Article 32 GDPR - Subprocessor arrangements - Support with data subject rights - Deletion and return at end of contract - Standard Contractual Clauses (SCCs) for third-country transfers ## Is Claude Team GDPR Compliant? Claude Team **can** be used in a GDPR-compliant way — but with limitations that are relevant for a portion of business scenarios. The following table compares the plans: | Feature | Claude Free / Pro | Claude Team | Claude Enterprise | | ------------------- | ----------------- | ----------- | ----------------------------------- | | DPA available | No | **Yes** | **Yes** | | EU data residency | No | No | Configurable (via Bedrock / Vertex) | | Zero data retention | No | No | Configurable | | SSO / SCIM | No | No | **Yes** | | Audit logs | No | No | **Yes** | | Training opt-out | No | **Yes** | **Yes** | | Minimum users | — | 5 | Individual | The key takeaway: **Claude Team meets the minimum bar** for GDPR-compliant business use (DPA, training opt-out) but provides no extended security controls. Organisations that need to contractually guarantee EU data localisation, or that require zero data retention for sensitive projects, will reach the limits of Claude Team. This section stays Team-plan-scoped. For the plan-agnostic head answer to **[Is Claude GDPR compliant?](https://compound.law/en-DE/tools/claude-eu-hosting/)** — including where Claude processes and stores data by deployment — see our Claude EU hosting guide. ## What Data Can You Use With Claude Team? The suitability of Claude Team depends heavily on the categories of data being processed. **Suitable — generally low risk:** - Internal documents with no or minimal personal data - Productivity tasks (drafting, summarising, translating) - Internal analysis and research without customer data - General knowledge management and onboarding materials **Use with caution — individual review recommended:** - General customer communications with limited personal data - Employee data for non-evaluative, administrative purposes - Contract drafts without particularly confidential content **Not recommended — Claude Enterprise or individual review required:** - Special categories under **Article 9 GDPR** (health, biometrics, trade union membership, criminal records) - Strictly confidential business documents (M\&A, term sheets, board materials) - Financial, banking, or patient data - Workflows where EU-exclusive processing must be contractually guaranteed - HR decisions with a surveillance or profiling effect The line is not always clear. When in doubt: the more sensitive the data, the stronger the case for Claude Enterprise or an individually assessed legal review. ## When Is Claude Team Not Enough? The following table helps you decide when Claude Team is sufficient and when Claude Enterprise is the better choice: | Requirement | Claude Team sufficient? | Recommendation | | ------------------------------------------ | ----------------------- | ------------------------------ | | DPA under Article 28 GDPR | **Yes** | Team sufficient | | Training opt-out | **Yes** | Team sufficient | | EU data residency contractually required | No | Enterprise + AWS Bedrock EU | | Zero data retention for sensitive projects | No | Enterprise (configurable) | | Audit logs for compliance evidence | No | Enterprise | | SSO / SCIM provisioning | No | Enterprise | | Article 9 data or M\&A documents | No | Enterprise + individual review | | Internal, non-sensitive workflows | **Yes** | Team sufficient | For a full comparison of data protection features across both plans, see our page on [Claude Enterprise](https://compound.law/en-DE/tools/claude-enterprise/). For information on EU data residency and the available deployment options, see our page on [Claude EU hosting](https://compound.law/en-DE/tools/claude-eu-hosting/). ## Claude Team GDPR Compliance Checklist Before an organisation-wide rollout of Claude Team, the following seven steps should be completed: 1. **Review and document the DPA.** Retrieve the current version of the Anthropic Commercial Terms via console.anthropic.com and keep a record of the retrieval internally. 2. **Check subprocessors.** Request the current subprocessor list from Anthropic and compare it against your internal vendor register. In particular, check whether subprocessors outside the EEA are involved. 3. **Verify SCCs for third-country transfers.** Anthropic does not process data exclusively within the EEA. SCCs are incorporated into the Commercial Terms — ensure this transfer mechanism is documented in your records of processing activities. 4. **Update your records of processing activities.** Add Claude Team as a new processor with purpose, data categories, data subject groups, transfer mechanism, and retention periods. 5. **Conduct a DPIA threshold assessment.** A Data Protection Impact Assessment under **Article 35 GDPR** is typically triggered by systematic, large-scale automated processing involving profiling. Assess whether your planned Claude deployment reaches this threshold. 6. **Establish an internal usage policy.** Define internally which data categories may and may not be entered into Claude Team. Train staff accordingly. 7. **Communicate prohibited data categories.** Ensure that Article 9 data, trade secrets, and highly confidential documents are not processed in Claude Team unless a formal clearance process is in place. ## When You Need More Than General Guidance The information in this guide covers the typical standard case. A more in-depth legal review is generally required when: - **Regulated industry:** your organisation operates in finance, healthcare, or insurance, where sector-specific requirements go beyond the GDPR. - **Large-scale processing:** Claude Team is used for extensive customer communications, HR evaluations, or profiling. - **Special data categories:** personal data under Article 9 GDPR is involved. - **Strict data localisation:** contractual or regulatory requirements demand EU-exclusive processing. - **Works council:** your company has a works council (Betriebsrat) with co-determination rights under **§ 87(1)(6) BetrVG** when introducing technical monitoring or analysis systems. In these situations, Anthropic’s DPA alone does not resolve the compliance question. What matters is whether the specific workflow is sustainable under the GDPR, contract law, and internal governance rules. Compound Law advises businesses, founders, and in-house teams in Germany on **GDPR, AI procurement, and commercial contracts**. If you want to review Claude Team or another AI deployment before rollout, [contact us](https://compound.law/en-DE/#booking). *** *This guide provides general legal information and does not replace individual legal advice. Specific data protection reviews — in particular DPIA decisions and contract analyses — require advice tailored to your use case.* *** ### Does Claude Team Include a DPA? Yes. Anthropic provides a Data Processing Agreement (DPA) under Article 28 GDPR for commercial products — Team, Enterprise, and API. Free and Pro plans do not include a DPA and are not suitable for processing personal data in a business context. ### Is Claude Team GDPR Compliant? Claude Team can be used in a GDPR-compliant way for standard business workflows. However, EU data residency and zero data retention are not available on this plan. Whether it is sufficient depends on the data categories processed and the organisation’s specific compliance requirements. ### What Is the Difference Between Claude Team and Claude Enterprise for Data Protection? Claude Enterprise adds zero data retention, SSO, audit logs, and configurable data location via AWS Bedrock or Vertex AI. Claude Team includes a DPA and training opt-out, but none of the extended security or residency controls available at the Enterprise tier. ### Can I Use Claude Team for Customer Data? With limitations. Internal documents with minimal personal data are often low risk. Sensitive customer data, Article 9 GDPR special-category data, or workflows with strict confidentiality requirements require individual review — and Claude Enterprise may be more appropriate. ### Where Can I Find the DPA for Claude Team? The DPA is embedded in the Anthropic Commercial Terms and accessed electronically via the Anthropic customer portal (console.anthropic.com). It is not available as a standalone PDF download. ## Related Tool Guides [![Canva DPA data processing addendum reviewed under Article 28 GDPR](https://compound.law/assets/images/tools/tools_3.webp)](https://compound.law/en-DE/tools/canva-dpa/) [tools](https://compound.law/en-DE/tools/canva-dpa/) ### [Does Canva Offer a DPA? Yes — Canva DPA Guide for Germany](https://compound.law/en-DE/tools/canva-dpa/) [Yes — Canva provides a Data Processing Addendum on paid plans. See what the Canva DPA covers clause by clause: SCCs, subprocessors, audits, German-law gaps.](https://compound.law/en-DE/tools/canva-dpa/) [![Cursor DPA data processing agreement Art. 28 GDPR review for Germany](https://compound.law/assets/images/tools/tools_1.webp)](https://compound.law/en-DE/tools/cursor-dpa/) [tools](https://compound.law/en-DE/tools/cursor-dpa/) ### [Cursor DPA: Yes — What the Anysphere Data Processing Agreement Covers](https://compound.law/en-DE/tools/cursor-dpa/) [Yes, Cursor offers a DPA at cursor.com/terms/dpa. What the Cursor data processing agreement covers under GDPR Art. 28 — and how German buyers should review it.](https://compound.law/en-DE/tools/cursor-dpa/) [![ElevenLabs DPA data processing addendum reviewed under Article 28 GDPR](https://compound.law/assets/images/tools/tools_4.webp)](https://compound.law/en-DE/tools/elevenlabs-dpa/) [tools](https://compound.law/en-DE/tools/elevenlabs-dpa/) ### [Does ElevenLabs Offer a DPA? Yes — ElevenLabs DPA Guide for Germany](https://compound.law/en-DE/tools/elevenlabs-dpa/) [Yes — ElevenLabs publishes a Data Processing Addendum at elevenlabs.io/dpa. What the ElevenLabs DPA covers clause by clause under Article 28 GDPR.](https://compound.law/en-DE/tools/elevenlabs-dpa/) [![Synthesia GDPR compliance facts: AI video training policy, DPA, and EU data storage](https://compound.law/assets/images/tools/tools_4.webp)](https://compound.law/en-DE/tools/synthesia/) [tools](https://compound.law/en-DE/tools/synthesia/) ### [Synthesia GDPR: Training, DPA & German Compliance Facts](https://compound.law/en-DE/tools/synthesia/) [No — Synthesia does not train on customer content. GDPR-usable for German firms: Art. 28 DPA and EU storage in Ireland. What to verify before rollout.](https://compound.law/en-DE/tools/synthesia/) [![Claude Pro GDPR compliance review — no DPA means Claude Pro is not suitable for business personal data](https://compound.law/assets/images/tools/tools_1.webp)](https://compound.law/en-DE/tools/claude-pro-privacy/) [tools](https://compound.law/en-DE/tools/claude-pro-privacy/) ### [Claude Pro GDPR Compliance: Not for Business, Team vs Enterprise](https://compound.law/en-DE/tools/claude-pro-privacy/) [Claude Pro is not the GDPR-compliant business tier. Claude Team adds the Article 28 DPA; Enterprise adds stronger controls and EU residency options.](https://compound.law/en-DE/tools/claude-pro-privacy/) [![Claude EU hosting options with AWS Bedrock Frankfurt and Google Vertex AI for GDPR compliance](https://compound.law/assets/images/tools/tools_1.webp)](https://compound.law/en-DE/tools/claude-eu-hosting/) [tools](https://compound.law/en-DE/tools/claude-eu-hosting/) ### [Where Is Claude Hosted? EU Hosting & Data Residency Facts (2026)](https://compound.law/en-DE/tools/claude-eu-hosting/) [Where is Claude hosted? No EU residency by default; EU path is Bedrock/Vertex AI](https://compound.law/en-DE/tools/claude-eu-hosting/) Tool Library ### Browse More AI Tools by Topic Compare more tools, privacy issues, and deployment scenarios in the full AI tool library. [View all AI tools](https://compound.law/en-DE/tools/) - [Claude ZDR: What It Covers, Who Qualifies, How to Get It tools](https://compound.law/en-DE/tools/claude-zdr/) - [Cursor DPA: Where to Find It and Which Plan German Teams Need tools](https://compound.law/en-DE/tools/cursor/) - [Is DeepSeek GDPR Compliant? What German Companies Need to Know tools](https://compound.law/en-DE/tools/deepseek/) - [Is Zapier GDPR Compliant? Germany Guide 2026 tools](https://compound.law/en-DE/tools/zapier/) - [Claude Code Data Privacy: GDPR, DPA & No Training Policy tools](https://compound.law/en-DE/tools/claude-code-gdpr/) - [HubSpot Privacy in Germany: GDPR, DPA, and Works Council Risks tools](https://compound.law/en-DE/tools/hubspot/) - [Claude GDPR: Which Claude Plans Work for Germany in 2026 tools](https://compound.law/en-DE/tools/claude-gdpr/) - [Anthropic SCCs: GDPR Data Transfer Guide for Module 2 and 3 tools](https://compound.law/en-DE/tools/anthropic-scc/) - [Zoom AI Companion GDPR Compliance for German Businesses tools](https://compound.law/en-DE/tools/zoom/) - [Claude Team vs Enterprise: Which Plan Is GDPR-Compliant for Your Team? tools](https://compound.law/en-DE/tools/claude-business/) - [Claude Team vs Enterprise: Plan Comparison for German Businesses tools](https://compound.law/en-DE/tools/claude-team-vs-enterprise/) - [Claude Enterprise for Law Firms and Legal Teams tools](https://compound.law/en-DE/tools/claude-enterprise-legal-teams/) - [Anthropic Data Processing Addendum: Where to Find the Official DPA tools](https://compound.law/en-DE/tools/anthropic-data-processing-addendum/) - [Anthropic DPA: GDPR Article 28 Guide for German Companies tools](https://compound.law/en-DE/tools/anthropic-dpa/) - [Claude Enterprise GDPR: DPA Yes, EU Residency No by Default tools](https://compound.law/en-DE/tools/claude-enterprise/) ## Frequently asked questions Yes. Anthropic provides a DPA under Article 28 GDPR for commercial products (Team, Enterprise, API). Free and Pro tiers do not receive a DPA. Claude Team can be used in a GDPR-compliant way. However, EU data residency and zero data retention are not available. Whether the plan is sufficient depends on the workflow and data categories involved. Claude Enterprise adds zero data retention, SSO, audit logs, and configurable data location via AWS Bedrock or Vertex AI. Claude Team includes the DPA but none of these extended controls. With limitations. Internal data without personal data is often low risk. For sensitive customer data, Article 9 special-category data, or strict confidentiality requirements, an individual review is needed — Claude Enterprise may be more appropriate. The DPA is embedded in the Anthropic Commercial Terms and accessed electronically via the Anthropic customer portal (console.anthropic.com). It is not available as a standalone PDF download. ## Structured data ```json [ { "@context": "https://schema.org", "@type": [ "Organization", "LegalService" ], "@id": "https://compound.law/#organization", "name": "Compound Law", "alternateName": "Compound Law — AI Law Firm", "url": "https://compound.law/", "logo": { "@type": "ImageObject", "url": "https://compound.law/press/logos/PNG/Compound_Law_Icon.png", "width": 1024, "height": 1024 }, "image": "https://compound.law/assets/images/og-image.webp", "description": "The AI-native law firm in Berlin for start-ups, mid-sized companies and corporates: commercial and contract law, data protection, the EU AI Act, trademarks, corporate law, and restructuring and insolvency. A lawyer reviews every result, billed at a flat fee.", "foundingDate": "2026", "founder": [ { "@type": "Person", "name": "Marko Bradic", "jobTitle": "CEO", "url": "https://compound.law/en-DE/tech-team/marko-bradic/", "sameAs": [ "https://www.linkedin.com/in/markobradic/" ], "knowsAbout": [ "Product strategy and development", "Scaling technology companies", "FinTech and financial services", "AI-powered product innovation", "Business operations and growth", "Digital transformation" ] }, { "@type": "Person", "name": "Mohit Tilwani", "jobTitle": "CTO", "url": "https://compound.law/en-DE/tech-team/mohit-tilwani/", "sameAs": [ "https://www.linkedin.com/in/mohit-tilwani/" ], "knowsAbout": [ "Engineering leadership and architecture", "Scaling high-traffic systems", "AI and machine learning infrastructure", "FinTech platform development", "Cloud infrastructure and DevOps", "Product engineering" ] }, { "@type": "Person", "name": "Julian Jantze", "jobTitle": "Rechtsanwalt", "url": "https://compound.law/en-DE/lawyers/julian-jantze/", "sameAs": [ "https://www.linkedin.com/in/julian-jantze-957b95158/" ], "knowsAbout": [ "Corporate law and corporate governance for technology companies", "Employment law and HR compliance", "EU AI Act compliance and AI governance", "Employee participation models (VSOP/ESOP)", "Regulatory compliance for tech companies", "Legal operations and Legal Tech implementation" ] } ], "employee": [ { "@type": "Person", "name": "Marko Bradic", "jobTitle": "CEO", "url": "https://compound.law/en-DE/tech-team/marko-bradic/", "sameAs": [ "https://www.linkedin.com/in/markobradic/" ], "knowsAbout": [ "Product strategy and development", "Scaling technology companies", "FinTech and financial services", "AI-powered product innovation", "Business operations and growth", "Digital transformation" ] }, { "@type": "Person", "name": "Mohit Tilwani", "jobTitle": "CTO", "url": "https://compound.law/en-DE/tech-team/mohit-tilwani/", "sameAs": [ "https://www.linkedin.com/in/mohit-tilwani/" ], "knowsAbout": [ "Engineering leadership and architecture", "Scaling high-traffic systems", "AI and machine learning infrastructure", "FinTech platform development", "Cloud infrastructure and DevOps", "Product engineering" ] }, { "@type": "Person", "name": "Julian Jantze", "jobTitle": "Rechtsanwalt", "url": "https://compound.law/en-DE/lawyers/julian-jantze/", "sameAs": [ "https://www.linkedin.com/in/julian-jantze-957b95158/" ], "knowsAbout": [ "Corporate law and corporate governance for technology companies", "Employment law and HR compliance", "EU AI Act compliance and AI governance", "Employee participation models (VSOP/ESOP)", "Regulatory compliance for tech companies", "Legal operations and Legal Tech implementation" ] }, { "@type": "Person", "name": "Marc Schuba", "jobTitle": "Founding Partner, Rechtsanwalt (German attorney)", "url": "https://compound.law/en-DE/lawyers/marc-schuba/", "sameAs": [ "https://www.linkedin.com/in/marcschuba/" ], "knowsAbout": [ "IP and IT law", "SaaS and IT contracts, IT outsourcing", "Software and open-source licensing", "Data protection law (GDPR)", "AI law and the EU AI Act" ] }, { "@type": "Person", "name": "Dr. Markus Dreißigacker", "jobTitle": "Rechtsanwalt", "url": "https://compound.law/en-DE/lawyers/markus-dreissigacker/", "sameAs": [ "https://www.linkedin.com/in/markusdreissigacker" ], "knowsAbout": [ "M&A (Due diligence, post-merger integration, IPO readiness)", "Corporate Law (Governance, board work, restructuring)", "Commercial Law (Customer contracts, supplier agreements, NDAs)", "IP (Trademark management, IP transfer agreements)", "Compliance & ESG (Global compliance programs, human rights, sustainability)", "Data Protection (GDPR strategy, DPO experience, privacy programs)" ] }, { "@type": "Person", "name": "Philipp Brandt", "jobTitle": "Partner, Rechtsanwalt (German attorney), Specialist Lawyer for Intellectual Property Law", "url": "https://compound.law/en-DE/lawyers/philipp-brandt/", "sameAs": [ "https://www.linkedin.com/in/philipp-brandt-81b446a/" ], "knowsAbout": [ "Restructuring and insolvency law (crisis advice for management, protective shield and insolvency plan proceedings, insolvency administration)", "Intellectual property (trademarks, unfair competition, copyright, trade secrets, licence agreements)", "Data protection law (data breaches, regulatory fine proceedings, access and damages claims)", "Distribution and commercial law (distribution agreements, acquisition and sale of industrial plants)" ] } ], "address": { "@type": "PostalAddress", "addressLocality": "Berlin", "addressCountry": "DE" }, "areaServed": [ "Germany", "Austria", "Switzerland", "European Union", "United Kingdom", "United States", "Singapore" ], "availableLanguage": [ "de", "en" ], "serviceType": [ "AI law firm", "AI-native legal services", "legal counsel for start-ups and growth companies", "legal counsel for mid-sized companies and corporates", "Commercial Law", "Corporate Law", "Employment Law", "Regulatory & Compliance", "Intellectual Property", "Insolvency & Restructuring" ], "hasOfferCatalog": { "@type": "OfferCatalog", "name": "Compound Law services", "itemListElement": [ { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "Commercial Contracts", "description": "Battle-tested contracts for your sales process", "serviceType": [ "enterprise contracts", "MSA", "DPA", "sales contracts" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "International Employment", "description": "Compliant hiring across borders", "serviceType": [ "international employment", "hiring abroad", "employment contracts" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "VSOP/ESOP Setup", "description": "Employee participation that actually works", "serviceType": [ "VSOP", "ESOP", "employee stock options", "equity incentives" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "Funding Round Support", "description": "Clean legal for your next raise", "serviceType": [ "funding round", "term sheet", "SHA", "due diligence", "cap table" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "Corporate Housekeeping", "description": "Get your legal house in order", "serviceType": [ "corporate governance", "board resolutions", "shareholder register" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "Data Protection & Privacy", "description": "GDPR compliance that doesn't slow you down", "serviceType": [ "GDPR", "data protection", "privacy", "DPA", "cookies", "data breach response", "GDPR fines", "Art. 82 GDPR" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "AI Act Compliance", "description": "Navigate EU AI regulation", "serviceType": [ "AI Act", "AI compliance", "AI governance", "EU AI regulation" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "IP & Competition", "description": "Protect and enforce what you've built", "serviceType": [ "IP protection", "intellectual property", "trademarks", "trademark enforcement", "warning letters", "preliminary injunctions", "unfair competition", "software licensing", "open source compliance" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "Fractional General Counsel", "description": "In-house legal without the full-time cost", "serviceType": [ "fractional GC", "fractional general counsel", "outsourced legal", "legal retainer" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "FinTech Compliance", "description": "Navigate financial regulation", "serviceType": [ "fintech compliance", "BaFin", "banking regulation", "AML", "KYC" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "Legal Retainer", "description": "Predictable legal support when you need it", "serviceType": [ "legal retainer", "legal subscription", "ongoing legal support" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "M&A Preparation", "description": "Get ready for acquisition interest", "serviceType": [ "M&A preparation", "acquisition", "due diligence", "exit" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "Restructuring & Insolvency", "description": "From the first liquidity check to the restructuring itself", "serviceType": [ "restructuring", "insolvency", "StaRUG", "self-administration", "insolvency plan", "director liability" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } } ] }, "contactPoint": { "@type": "ContactPoint", "contactType": "sales", "email": "contact@compound.law", "availableLanguage": [ "English", "German" ], "areaServed": [ "DE", "AT", "CH", "EU", "GB", "US", "SG" ] }, "email": "contact@compound.law", "sameAs": [ "https://www.linkedin.com/company/compoundlawfirm", "https://x.com/CompoundLawFirm" ], "knowsAbout": [ "Commercial Contracts", "enterprise contracts", "MSA", "DPA", "sales contracts", "International Employment", "international employment", "hiring abroad", "employment contracts", "VSOP/ESOP Setup", "VSOP", "ESOP", "employee stock options", "equity incentives", "Funding Round Support", "funding round", "term sheet", "SHA", "due diligence", "cap table", "Corporate Housekeeping", "corporate governance", "board resolutions", "shareholder register", "Data Protection & Privacy", "GDPR", "data protection", "privacy", "cookies", "data breach response", "GDPR fines", "Art. 82 GDPR", "AI Act Compliance", "AI Act", "AI compliance", "AI governance", "EU AI regulation", "IP & Competition", "IP protection", "intellectual property", "trademarks", "trademark enforcement", "warning letters", "preliminary injunctions", "unfair competition", "software licensing", "open source compliance", "Fractional General Counsel", "fractional GC", "fractional general counsel", "outsourced legal", "legal retainer", "FinTech Compliance", "fintech compliance", "BaFin", "banking regulation", "AML", "KYC", "Legal Retainer", "legal subscription", "ongoing legal support", "M&A Preparation", "M&A preparation", "acquisition", "exit", "Restructuring & Insolvency", "restructuring", "insolvency", "StaRUG", "self-administration", "insolvency plan", "director liability" ] }, { "@context": "https://schema.org", "@type": "Article", "headline": "Claude Team Plan DPA & GDPR Compliance Guide", "description": "Yes — Claude Team has a DPA under Article 28 GDPR. Covers what Team includes, EU data residency limits, and when to upgrade to Enterprise.", "image": "https://compound.law/assets/images/tools/tools_1.webp", "datePublished": "2026-04-28T00:00:00.000Z", "dateModified": "2026-04-28T00:00:00.000Z", "author": { "@type": "Person", "name": "Julian Jantze", "image": "https://compound.law/assets/images/team/julianjantze.webp" }, "publisher": { "@type": "Organization", "@id": "https://compound.law/#organization", "name": "Compound Law" }, "mainEntityOfPage": { "@type": "WebPage", "@id": "https://compound.law/en-DE/tools/claude-team-gdpr/" } }, { "@context": "https://schema.org", "@type": "BreadcrumbList", "itemListElement": [ { "@type": "ListItem", "position": 1, "name": "Home", "item": "https://compound.law/en-DE/" }, { "@type": "ListItem", "position": 2, "name": "AI Tools", "item": "https://compound.law/en-DE/tools/" }, { "@type": "ListItem", "position": 3, "name": "Claude Team Plan DPA & GDPR Compliance Guide", "item": "https://compound.law/en-DE/tools/claude-team-gdpr/" } ] }, { "@context": "https://schema.org", "@type": "FAQPage", "mainEntity": [ { "@type": "Question", "name": "Does Claude Team include a DPA?", "acceptedAnswer": { "@type": "Answer", "text": "Yes. Anthropic provides a DPA under Article 28 GDPR for commercial products (Team, Enterprise, API). Free and Pro tiers do not receive a DPA." } }, { "@type": "Question", "name": "Is Claude Team GDPR compliant?", "acceptedAnswer": { "@type": "Answer", "text": "Claude Team can be used in a GDPR-compliant way. However, EU data residency and zero data retention are not available. Whether the plan is sufficient depends on the workflow and data categories involved." } }, { "@type": "Question", "name": "What is the difference between Claude Team and Claude Enterprise for data protection?", "acceptedAnswer": { "@type": "Answer", "text": "Claude Enterprise adds zero data retention, SSO, audit logs, and configurable data location via AWS Bedrock or Vertex AI. Claude Team includes the DPA but none of these extended controls." } }, { "@type": "Question", "name": "Can I use Claude Team for customer data?", "acceptedAnswer": { "@type": "Answer", "text": "With limitations. Internal data without personal data is often low risk. For sensitive customer data, Article 9 special-category data, or strict confidentiality requirements, an individual review is needed — Claude Enterprise may be more appropriate." } }, { "@type": "Question", "name": "Where can I find the DPA for Claude Team?", "acceptedAnswer": { "@type": "Answer", "text": "The DPA is embedded in the Anthropic Commercial Terms and accessed electronically via the Anthropic customer portal (console.anthropic.com). It is not available as a standalone PDF download." } } ] } ] ```