Product and intended use
Define the configuration, people, information and tasks being assessed.
Plan in scope
Public claim only
Claude Team is a commercial workspace for 2 to 150 seats. Standard seats are USD 20 per seat per month billed annually (USD 25 monthly); Premium seats are USD 100 / USD 125. SSO, central billing, connector admin and enterprise search are included. SCIM, audit logs, Compliance API, custom retention, HIPAA-ready, CMEK and US-only inference are Enterprise-only on the pricing comparison.
Ask: Confirm we are buying Team not consumer Pro/Max, the seat mix, and that we accept the absence of SCIM, custom retention and audit-log export on this tier.
Deployment and hosting
Public claim only
Team is multi-tenant SaaS (web, desktop, mobile). Commercial storage is in the United States. Default inference may be routed to selected countries in the US, Europe, Asia and Australia. US-only inference is documented for usage-based Enterprise, not Team.
Ask: State storage, inference routing and backup locations for a Team tenancy, and whether US-only inference can be purchased on Team.
Legal features
Public claim only
Team includes Claude Code, Cowork, Microsoft 365, Outlook, enterprise search and connectors. Claude for Legal plugins and MCP connectors (iManage, NetDocuments and others) are described on legal pages as available to legal teams on Claude; confirm they are licensed on Team rather than Enterprise-only.
Ask: Which legal plugins and DMS connectors are actually enabled on Team for our tenancy?
Australia
Public claim only
Australia is a supported country. Anthropic opened a Sydney office in April 2026. No Australian storage region is published for Team.
Ask: Will Team be contracted for use from Australia given US storage?
Data, controls and requirements
Compare the actual configuration with firm, client and jurisdiction requirements, supported by evidence.
Client-facing use
Not confirmed
Team is a professional workspace, not a consumer chatbot, but it does not prevent a user from pasting advice to a client. No Australian client-disclosure templates were found.
Ask: Can we restrict Team to named practitioners and disable any client-facing or public-service plugins?
Model provider
Public claim only
Anthropic is the model provider. Covered Models may require 30-day retention. Team/Enterprise product interfaces are not ZDR-eligible.
Ask: Which model IDs will our Team seats use, and which are Covered Models?
Subprocessors
Public claim only
Same published Trust Center list as other commercial products (GCP, AWS, Azure, Cloudflare, Stripe, WorkOS, Intercom, Nutun, Brave Search, TurboPuffer and others). DPA 15-day objection window for new subprocessors.
Ask: Provide the Team-scoped subprocessor list and confirm we can disable web search and voice (ElevenLabs).
Training on customer content
Public claim only
Commercial Terms prohibit training on Customer Content. Commercial privacy article: Claude for Work inputs/outputs are not used to train models by default. Feedback is a separate exception. This does not apply if staff use consumer Free/Pro/Max instead of Team.
Ask: Confirm the signed Team agreement contains the no-training clause and that consumer accounts on our domain will be captured or blocked.
Feedback
Public claim only
Thumbs-up/down stores the conversation for up to five years and may be used to train models. Team Owners can disable Rate chats. If ratings stay on, matter content in that conversation can enter the training exception.
Ask: Disable Rate chats for our Team organisation before go-live.
Retention
Public claim only
Team chats are retained to provide the product. Users can delete chats (history immediately; backend within 30 days). Custom retention controls are documented as Enterprise-only. Incognito chats delete within 30 days unless flagged. Usage Policy flags: up to 2 years content / 7 years classifier scores. ZDR does not apply to Team product interfaces.
Ask: What retention period will apply to our Team chats, projects and Claude Code sessions, and can we buy custom retention without upgrading to Enterprise?
Deletion and exit
Public claim only
DPA: within 30 days of termination, return or self-service export on request, then deletion including subprocessors with legal/safety exceptions. Chat delete is user-driven. No matter-level admin deletion workflow was documented for Team.
Ask: How do we export all Team chats, projects and files on exit, and what certificate of deletion will you issue?
Vendor staff access
Public claim only
Automated safety review; human review only of flagged content, with confidentiality controls described in the legal configuration article. Access Transparency is not stated to cover Claude for Work / Team seats. Support staff via Intercom/Nutun/Boldr.
Ask: Will any Anthropic or support-subprocessor person read our Team chats without our approval, and is that access logged to us?
Identity and admin
Public claim only
Team: SSO, JIT, roles (Owner, Admin, User), spend controls, connector admin. No SCIM. JIT never auto-removes members. Audit logs and Compliance API are Enterprise-only on the pricing comparison.
Ask: Show SSO-only login, admin disable of a user, and what audit trail Team actually retains.
Encryption
Public claim only
DPA Schedule 2: AES-256 at rest, TLS 1.2+ in transit. CMEK is documented for qualifying Claude Enterprise / Platform customers, not as a Team feature.
Ask: Confirm Team encryption coverage for chats, files and backups, and whether CMEK can be added on Team.
Assurance
Public claim only
Trust Center marks Claude Team in scope for SOC 2 Type II, ISO 27001, ISO 42001, CSA STAR and NIST 800-171 (HIPAA marked N/A for Team). Full reports were not inspected.
Ask: Provide current reports whose scope includes Claude Team.
Contract
Public claim only
Commercial Terms and DPA apply to Team (not consumer terms). Customer owns Outputs; Customer Content is confidential; 12-month fee liability cap; California law and San Francisco arbitration for Australian customers.
Ask: Will the Team order form incorporate the Commercial Terms and DPA without consumer-term fallback, and can we negotiate forum and cap?
Cross-border transfers
Public claim only
US storage; default global inference routing may include Australia as a processing location, not as a storage region. SCCs in the DPA. Support locations include the United States, South Africa and Canada.
Ask: List every country for Team storage, inference, backups and support, and assist an APP 8 assessment.
Incidents
Public claim only
DPA: Security Breach notice within 48 hours of awareness. Responsible disclosure via HackerOne. Status page at status.claude.com. CVE-2026-22561 listed on the Trust Center for the Windows installer.
Ask: Confirm 48-hour NDB-usable notice applies to Team and provide a two-year incident summary.
Changes
Public claim only
Terms and prices may change on 30 days' notice. Subprocessor notice with 15-day objection. Claude for Legal launched May 2026. Series G February 2026.
Ask: What notice do Team customers get before model or plugin behaviour changes, and can we terminate if price rises uncapped?
Exit
Public claim only
DPA 30-day return/delete. Team has no documented Compliance API export. Termination for convenience exists in Commercial Terms (Anthropic 30 days).
Ask: Provide a Team export of chats, projects, files and admin logs in open formats, then certified deletion.
Connectors
Public claim only
Team includes Google Drive, Gmail, Calendar, GitHub, Microsoft 365, Slack and admin controls for remote/local connectors. Legal MCP connectors need confirmation on Team. Third-party integrations are outside ZDR (ZDR anyway does not cover Team UI).
Ask: List connectors that will be on, data sent, and permission inheritance for our DMS.
Web search
Public claim only
Web search is listed as a Team feature. Brave Search and TurboPuffer are subprocessors. Not a licensed citator.
Ask: Can web search be switched off for our Team organisation?
Agentic actions
Not confirmed
Cowork and Claude Code are included on Team. Admin connector controls and spend caps exist. No documented tenant kill-switch for in-flight agents was found.
Ask: Which Cowork/Code actions need human confirm, and how do we stop them immediately?
Human oversight
Public claim only
Commercial Terms require the customer to evaluate outputs. Team usage analytics exist; per-user audit logs are Enterprise-only on the pricing table.
Ask: What supervision records does Team actually retain, and how do we export them?
