Get the weekly research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean. No account.
The document lists three subprocessors providing user support functions across all Claude products except Claude for Government: Intercom in the United States, Nutun in South Africa, and Boldr in Canada. All three are explicitly excluded from Claude for Government.
This analysis describes what Anthropic's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
User support processing typically involves contact information, account details, and the content of support communications, which may include sensitive personal information. The geographic distribution across three jurisdictions, including South Africa (no EU adequacy decision), creates multi-jurisdictional transfer documentation requirements for GDPR-covered data.
Under these provisions, user support interactions for non-government Claude products may be processed by vendors in three different countries: the United States (Intercom), South Africa (Nutun), and Canada (Boldr). Canada holds an EU adequacy decision for private sector organizations under PIPEDA, while South Africa does not, creating differing transfer mechanism requirements.
Cross-platform context
See how other platforms handle User Support Subprocessors: Intercom, Nutun, Boldr and similar clauses.
Compare across platforms →Monitoring
Anthropic has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
"Intercom • User support United States Products: All Products except Claude for Government Nutun • User support South Africa Products: All Products except Claude for Government Boldr • User support Canada Products: All Products except Claude for GovernmentExcerpt from Anthropic's Sub-Processors
(1) REGULATORY LANDSCAPE: Canada holds a GDPR adequacy decision for private sector organizations governed by PIPEDA, making Boldr's Canadian location relatively straightforward for EU data transfer purposes. South Africa does not hold an EU adequacy decision, requiring SCCs or other GDPR Chapter V mechanisms for Nutun. Intercom in the United States requires a valid transfer mechanism for EU personal data. The ICO imposes parallel requirements under UK GDPR. (2) GOVERNANCE EXPOSURE: Medium. Support ticket content may include personal data beyond standard contact information, including account issues that reveal financial, usage, or other personal details. Multi-jurisdictional support processing requires layered transfer documentation and may complicate data subject access request fulfillment if support records are held across three vendors. (3) JURISDICTION FLAGS: EU and EEA users have the most significant exposure due to the South Africa transfer for Nutun and the U.S. transfer for Intercom. UK users face parallel UK GDPR considerations. Canadian users whose data is processed by Boldr are subject to PIPEDA-based protections. California residents may have CCPA rights regarding support data. (4) CONTRACT AND VENDOR IMPLICATIONS: Enterprise customers should confirm that their DPAs with Anthropic address user support data flows to all three vendors. Data subject access request procedures should account for support records potentially held by Intercom, Nutun, and Boldr, and Anthropic's process for fulfilling such requests across multiple vendors should be documented. (5) COMPLIANCE CONSIDERATIONS: Compliance teams should map support data flows to each of the three vendors, confirm transfer mechanisms are documented for Intercom and Nutun, assess whether support content data is subject to any sector-specific confidentiality requirements applicable to their industry, and review data retention obligations applicable to support records held by subprocessors.
Full institutional analysis
Regulatory citations, enforcement risk, and due diligence action items.
Monitor: same-day alerts on the platforms you choose. Analyst: full institutional analysis.
Compliance Governance Intelligence
Need to monitor specific governance provisions?
Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
User support processing typically involves contact information, account details, and the content of support communications, which may include sensitive personal information. The geographic distribution across three jurisdictions, including South Africa (no EU adequacy decision), creates multi-jurisdictional transfer documentation requirements for GDPR-covered data.
Under these provisions, user support interactions for non-government Claude products may be processed by vendors in three different countries: the United States (Intercom), South Africa (Nutun), and Canada (Boldr). Canada holds an EU adequacy decision for private sector organizations under PIPEDA, while South Africa does not, creating differing transfer mechanism requirements.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Anthropic.