# Anthropic Security Questionnaire Answer Template

Use this template when a buyer or security reviewer names Anthropic directly and wants a concrete response about workflow scope, data categories, retention stance, customer impact, and proof.

## Copy-Paste Answer

**Anthropic use in scope:** We use Anthropic for [exact product feature or internal workflow]. The workflow is currently [planned / active / replacing an existing process] and is limited to [state the user or operational context].

**Data categories involved:** The workflow may process [list the customer, user, support, prompt, or operational data categories in scope]. It does not intentionally expand beyond this workflow without additional internal review.

**Supporting vendor chain:** Supporting vendors for this workflow include [hosting vendor], [database vendor], [analytics vendor], [support tool], and any other providers tied to the same operating path.

**Retention and training stance:** Our current operating position is [state the retention or training stance in plain language], with the supporting source of truth recorded in [vendor terms / internal review note / packet link].

**Customer scope and impact:** The workflow affects [name the customer segment, product line, contract class, or region]. We are also checking whether this workflow changes any subprocessor-page, notice, or counsel-review requirements for that segment.

**Proof and owner:** Supporting proof for this answer includes [public page / packet draft / screenshots / tracker row / owner notes]. The current reply owner is [owner name or function], and open questions are [list unresolved reviewer questions].

## Fill Before Sending

1. Name the specific Anthropic-backed workflow instead of describing the whole product as "AI-powered."
2. State the actual data categories in scope.
3. Separate the retention or training stance from marketing language and point to the proof source.
4. Include the rest of the operating chain if Anthropic is not the only vendor in the workflow.
5. Show the affected customer scope so the review path is clear.