Claude

Self-service export is delivered as an emailed download link after processing, with the link expiring after 24 hours. No importer or non-Anthropic runtime is documented that restores the export as a working agent.

• How can I export my Claude data

The export is documented as 'conversation data and the user data for your account', and all memory data is included. It is not documented whether project instructions and knowledge files, styles, preferences or connector configuration are included, so under G12 two or more classes are treated as staying with the provider. Connectors re-link through Anthropic's cloud.

• How can I export my Claude data
• Using Claude's chat search and memory
• Get started with custom connectors using remote MCP

The agent runs only on Anthropic's hosted service and needs an Anthropic account. The Consumer Terms reserve the right to 'modify, suspend, or discontinue the Services or your access ... at any time without notice'.

• Consumer Terms of Service

Model choice is limited to the Anthropic models in the selector next to the send button. No documented way to use a third-party or local open-weight model.

• Change the model, effort, and thinking settings

The Consumer Terms allow Anthropic to suspend or terminate access 'at any time without notice' for suspected breach and 'at our option delete any Materials or other data associated with your Account'. No post-termination export window or shutdown plan is published, and state is not held locally by default.

• Consumer Terms of Service

Agent state lives on Anthropic's hosted service and is read through claude.ai. The provider holds any encryption keys. The export file format and schema are not publicly documented.

• How can I export my Claude data

Anthropic publishes the core claude.ai system prompt per model, and the selected model is shown. However, the published prompt lists classifier-triggered reminders (image_reminder, cyber_warning, system_warning, ethics_reminder, ip_reminder, long_conversation_reminder) that the owner cannot see when injected, and tool definitions are not published. Whether a provider switch such as a classifier is active cannot be determined. Two shortfalls.

• System prompts release notes
• Claude Opus 5.5 system prompts

Active chats are kept 'for as long as reasonably necessary', which is not a bounded period. Safety-flagged inputs and outputs are kept up to 2 years and trust and safety classification scores up to 7 years, and neither is visible to the owner item by item. De-identified training data is kept up to 5 years.

• How long do you store my data
• Privacy Policy

Anthropic has stated 'Claude will remain ad-free' and that responses will not be 'influenced by advertisers or include third-party product placements'. This is a news post, not binding terms, so absence of steering rests on a non-binding statement.

• Claude is a space to think

Conversation history is the only record of actions, and it is kept until the owner deletes it. No documentation shows that provider-side or staff actions are recorded, or that the owner is told when recording fails, so under G12 two shortfalls are counted.

• Privacy Policy

No integrity data, signing or verifier is documented for the conversation or action record. The record holder can change it without trace.

• Privacy Policy

No documented tool lets Claude delete or edit chat transcripts, but Anthropic documents no protection that stops the agent from altering or suppressing its record. Under G12 the pass is withheld.

• Claude Opus 5.5 system prompts

The claude.ai service and apps are closed source and hosted by Anthropic. A required component is closed.

• Consumer Terms of Service

The agent's only identity is the owner's Anthropic account, which the provider can suspend or terminate under the Consumer Terms.

• Consumer Terms of Service

Memory can be edited, but no change history, attribution or restore to a prior state is documented for memory, instructions, settings or model.

• Using Claude's chat search and memory

The owner can add user preferences, styles and project instructions. The base system prompt and injected reminders are set by Anthropic and 'periodically updated', and the owner cannot replace them.

• System prompts release notes
• Claude Opus 5.5 system prompts

Memory topics are listed under Settings > Memory with edit and delete controls. Past chats used through chat search can be deleted but not edited, and editing of per-project summaries is not documented.

• Using Claude's chat search and memory

Pro and Max users can add custom remote MCP connectors without Anthropic review and remove them. The docs do not establish that every built-in tool can be removed.

• Get started with custom connectors using remote MCP
• Manage Claude's tool access

Provider protections such as safety classifiers, classifier-triggered reminders and usage limits are applied by Anthropic. No owner setting documents a way to change or disable them. The hosted-policy exemption does not apply because no exit route exists (P1, P3).

• Claude Opus 5.5 system prompts

The claude.ai system prompt 'is periodically updated' without owner consent, and the Terms reserve the right to modify the Services 'at any time without notice'. The documented 60-day model retirement notice applies to Anthropic's API platforms, not to the claude.ai model selector.

• System prompts release notes
• Consumer Terms of Service
• Model deprecations

The owner can turn connectors on or off per conversation and set a conversation-wide tool-loading mode. There are no per-recipient, per-domain or instruction-source limits for individual plans (org-level permissions are Team/Enterprise only). Spend is treated as met under G11 because no payment capability exists. Two shortfalls: on/off-only limits and a missing instruction-source dimension.

• Manage Claude's tool access
• Use connectors to extend Claude's capabilities

Owner-set 'Always allow / Needs approval / Blocked' permissions are documented only for Team and Enterprise owners. The opened docs describe no owner-set approval gates for individual plans.

• Use connectors to extend Claude's capabilities
• Manage Claude's tool access

No opened primary source documents a global stop covering in-flight, background (for example research) and provider-side work.

The Privacy Policy states 'We may use your Inputs and Outputs to train and improve Anthropic AI models, unless you opt out', so training is on by default. Flagged conversations and feedback are used for training even after opt-out. Legal disclosure carries no owner-notice commitment, and policy changes need only notification.

• Privacy Policy
• Is my data used for model training
• Updates to our consumer terms

Connected services are listed under Customize > Connectors and can be removed one at a time. Where OAuth tokens are held, and whether provider copies are deleted on revocation, is not documented, so under G12 the pass is withheld.

• Get started with custom connectors using remote MCP
• Use connectors to extend Claude's capabilities

Pro users must cancel and wait for the billing period to end before deleting the account, and some cases need contact with support. Safety-flagged data (up to 2 years), classification scores (up to 7 years) and de-identified training data (up to 5 years) are retained, so provider-side copies survive deletion.

• Deleting Claude accounts
• How long do you store my data