WorkOS, located in the United States, is listed as the subprocessor responsible for security and single sign-on (SSO) functionality for Claude for Work and the Claude Developer Platform, meaning authentication and identity data for enterprise and developer users is processed by WorkOS.
This analysis describes what Anthropic's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision discloses that authentication credentials and identity data for enterprise (Claude for Work) and developer platform users are processed by a US-based third party, which is relevant to organizations with identity governance, access management, and cross-border data transfer compliance obligations.
This provision establishes that authentication and single sign-on data for Claude for Work and Claude Developer Platform users is processed by WorkOS in the United States, with additional information available at the linked Anthropic support article on enterprise SSO setup.
Cross-platform context
See how other platforms handle WorkOS as SSO and Security Subprocessor and similar clauses.
Compare across platforms →"WorkOS | Security, Single Sign-On | United States | Products: Claude for Work, Claude Developer Platform.Excerpt from Anthropic's Sub-Processors
1) REGULATORY LANDSCAPE: Authentication and identity data processed by WorkOS engages GDPR principles of data minimization and purpose limitation for EU/EEA enterprise users, as well as GDPR Chapter V international transfer requirements for US-based processing.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This provision discloses that authentication credentials and identity data for enterprise (Claude for Work) and developer platform users are processed by a US-based third party, which is relevant to organizations with identity governance, access management, and cross-border data transfer compliance obligations.
This provision establishes that authentication and single sign-on data for Claude for Work and Claude Developer Platform users is processed by WorkOS in the United States, with additional information available at the linked Anthropic support article on enterprise SSO setup.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Anthropic.