General-purpose · General-purpose assistants · High confidence
Anthropic, PBC · Consumer Free, Pro and Max, including Claude Code signed in with those accounts. Different terms from Team/Enterprise/API. Not a firm processor contract.
Individual consumer assistant. Training is opt-out, there is no DPA or firm admin, and it is not suitable for confidential or privileged matter data.
Opens a private software assessment of Claude for one task, with this profile’s questions to hand.
| Deployment | SaaS |
|---|---|
| Hosting regions | Worldwide or dynamically routed |
| Australian region | No |
| Model providers | Anthropic |
| Training on customer content | Opt-out |
| Retention summary | Deleted chats removed from history immediately and backend within 30 days. If model-improvement is enabled, de-identified training-pipeline data may be kept up to 5 years. Feedback 5 years. Safety flags up to 2 years / 7 years scores. |
| Integrations | Microsoft 365 (Pro/Max), Google Drive, web search |
| Pricing summary | Published consumer prices. Free tier plus Pro and Max. Not sold as a firm workspace. |
| Legal content coverage | None. Consumer Claude is not a licensed legal research product. |
| Australian presence | Yes — Consumer Claude.ai is available in Australia; that is not an Australian hosting commitment. |
Define the configuration, people, information and tasks being assessed.
Not confirmed
This profile covers consumer Claude Free, Pro (from USD 17/month annual or USD 20 monthly) and Max (from USD 100/month). These plans are governed by Consumer Terms, not Commercial Terms. A paid personal subscription is not an enterprise workspace.
Ask: Confirm no one in the firm is putting client or matter data into Free, Pro or Max, including Claude Code signed in with a personal account.
Public claim only
Consumer SaaS via web, desktop and mobile. Not a firm-managed tenant. Work email can later be captured into an organisation account.
Ask: How do we block consumer Claude on firm devices and capture existing work-email consumer accounts?
Public claim only
Chat, projects (limited on Free), web search, Claude Code on Pro/Max, Chrome and Microsoft 365 add-ins on Pro/Max. No organisation admin, SSO, SCIM or audit logs.
Ask: List every consumer surface (Chrome, desktop, mobile, Code) that must be blocked on the firm network.
Public claim only
Australia is a supported country for Claude.ai. Consumer terms are California law.
Ask: Is consumer Claude permitted for any firm use from Australia once client data is involved?
Record the practical work needed to introduce and maintain the software.
Public claim only
Published consumer prices. Price and plans subject to change at Anthropic's discretion. Not designed as a firm licence.
Ask: There is no firm licence to negotiate on this plan; the question is whether any residual personal use remains.
Not confirmed
Pro/Max offer Claude for Microsoft 365, Outlook and Chrome, plus connectors. There is no firm SSO or DMS permission boundary. Copy-paste into a personal account bypasses DMS ethical walls.
Ask: Are consumer add-ins and extensions blocked in Microsoft 365 admin and browser allow-lists?
Not confirmed
Consumer support is via help centre / Intercom-class channels. No contractual SLA for a law firm.
Ask: Not applicable as a firm supplier unless residual personal use is in scope; if so, what is the security contact?
Compare complete work at the required quality, including checking and correction.
Public claim only
Consumer Terms require users to acknowledge outputs may be inaccurate. No firm-level quality programme exists on this plan.
Ask: Not a supported configuration for matter work; if used, how will the firm verify every output?
Not confirmed
A public/consumer LLM makes an amber legal task red for confidentiality purposes. Not suitable for confidential or privileged matter data.
Ask: Has the firm recorded that consumer Claude is out of scope for client work?
Compare the actual configuration with firm, client and jurisdiction requirements, supported by evidence.
Not confirmed
Consumer Claude can be used by anyone with an account, including non-lawyers. It does not implement practitioner review gates. Putting client confidential information into a consumer generative AI service is the scenario Australian professional guidance treats as high risk.
Ask: Confirm consumer Claude will not be used for client-facing or matter work.
Public claim only
Anthropic. Covered Models and ZDR exclusions include consumer products.
Ask: No enterprise model-routing contract exists on this plan.
Public claim only
Trust Center list includes hosting, Stripe, Intercom, Nutun, Brave Search, TurboPuffer, Persona and Yoti (identity for Free/Pro/Max). Consumer customers do not get DPA objection rights in the same way as Commercial Terms customers.
Ask: A firm cannot rely on consumer subprocessor objection rights; use Team/Enterprise instead.
Public claim only
Consumer Terms: Anthropic may use Materials to train models unless the user opts out in account settings. Even after opt-out, training still occurs when the user submits Feedback or content is flagged for safety review. Incognito chats are not used to improve Claude. This is not a contractual no-training commitment of the kind in Commercial Terms.
Ask: If any personal account remains, is model-improvement opted out, and has the firm accepted that feedback and safety flags still allow training?
Public claim only
Thumbs-up/down stores the conversation for up to five years and may be used to train models even if model-improvement is off.
Ask: Instruct users (if any residual personal use exists) never to rate chats that contain work content.
Public claim only
User-deleted chats: history immediately, backend within 30 days. If model-improvement is on, de-identified training-pipeline data may be kept up to 5 years. Usage Policy flags: up to 2 years / 7 years scores. Feedback: 5 years. ZDR does not apply to consumer products.
Ask: Consumer retention cannot be set by a firm administrator.
Public claim only
Users can delete conversations (backend within 30 days). There is no firm-directed certified deletion of a matter. Training runs already in progress are not unwound by later opt-out or delete.
Ask: There is no enterprise deletion certificate on this plan.
Public claim only
Safety-flagged content may be reviewed. Consumer Access Transparency is not offered.
Ask: Assume consumer chats can be reviewed by Anthropic safety staff when flagged; do not put privileged material here.
Not confirmed
Individual login, optional MFA at the account level. No SSO, SCIM, or firm admin. Shared personal logins cannot be governed.
Ask: Block consumer Claude rather than trying to administer it.
Not confirmed
The consumer privacy policy does not restate the DPA AES-256 / TLS 1.2+ schedule. Trust Center certifications cover Claude Team/Enterprise/API more clearly than Free.
Ask: Do not treat consumer Claude as having the same contractual encryption schedule as the DPA.
Public claim only
Trust Center certifications are listed for API, Enterprise and Team. Consumer Free is not the HIPAA or FedRAMP offering.
Ask: There is no SOC 2 report a firm can rely on for consumer Claude as a processor of its matter data.
Public claim only
Consumer Terms: as-is services, California courts, Anthropic may use Materials to train unless opted out. No DPA is incorporated. Not an appropriate processor contract for a law practice putting client data in.
Ask: Will the firm prohibit consumer terms for any client or matter data?
Not confirmed
Consumer processing locations are not the same documented US-storage / selectable-inference article written for commercial products. Privacy policy is global.
Ask: Assume overseas disclosure without an APP 8-ready DPA if consumer Claude is used.
Not confirmed
No 48-hour Security Breach clause equivalent to the commercial DPA applies to consumer users as customers of a firm.
Ask: The firm would remain responsible for NDB if staff put personal information into consumer Claude.
Public claim only
Consumer Terms may be updated; users must stop using the service if they do not agree. Training default and privacy settings have changed over time and must be re-checked.
Ask: Who in the firm watches consumer-term changes if any personal use is still allowed for non-matter tasks?
Public claim only
User can delete chats and the account. No organisation export. Training data already used is not fully retractable.
Ask: How will the firm evidence that consumer accounts used with work email have been deleted?
Not confirmed
Consumer plans can connect apps. Raw connector content is described as excluded from training unless pasted, but the conversation still holds whatever was brought in.
Ask: Disable consumer connectors on firm-managed browsers and M365.
Public claim only
Web search is on for Free/Pro/Max. Queries may reveal confidential matter if typed into the prompt.
Ask: Treat web search on consumer Claude as an uncontrolled disclosure path.
Not confirmed
Claude Code, Chrome and computer-use style features exist on paid consumer plans with no firm policy engine.
Ask: Block consumer Claude Code and Chrome on endpoints that hold client files.
Public claim only
Consumer Terms tell the user not to rely on outputs without checking. There is no supervisor audit log for a firm.
Ask: Consumer Claude cannot meet a firm's supervision record for AI use.
Official pages reviewed for this profile, last reviewed 2026-09-20.
Add this product to your toolset for a particular task, or use it with a practice-area checklist. Add to your toolset Practice areas Best AI general-purpose assistants tools Australia
