{
  "@context": "https://spdx.org/rdf/3.0.1/spdx-context.jsonld",
  "@graph": [
    {
      "type": "CreationInfo",
      "@id": "_:creationInfo",
      "specVersion": "3.0.1",
      "created": "2026-11-04T00:00:00Z",
      "createdBy": [
        "https://jesseahawkins.com/vendors/anthropic/aibom/tool"
      ]
    },
    {
      "type": "Tool",
      "spdxId": "https://jesseahawkins.com/vendors/anthropic/aibom/tool",
      "creationInfo": "_:creationInfo",
      "name": "jesseahawkins.com vendor record"
    },
    {
      "type": "SpdxDocument",
      "spdxId": "https://jesseahawkins.com/vendors/anthropic/aibom/document",
      "creationInfo": "_:creationInfo",
      "name": "AI BOM for Anthropic: Anthropic API and Claude commercial products",
      "profileConformance": [
        "core",
        "software",
        "ai"
      ],
      "rootElement": [
        "https://jesseahawkins.com/vendors/anthropic/aibom/ai-package"
      ]
    },
    {
      "type": "ai_AIPackage",
      "spdxId": "https://jesseahawkins.com/vendors/anthropic/aibom/ai-package",
      "creationInfo": "_:creationInfo",
      "name": "Anthropic: Anthropic API and Claude commercial products"
    },
    {
      "type": "Annotation",
      "spdxId": "https://jesseahawkins.com/vendors/anthropic/aibom/annotation/customer_data_retention_period",
      "creationInfo": "_:creationInfo",
      "annotationType": "other",
      "subject": "https://jesseahawkins.com/vendors/anthropic/aibom/ai-package",
      "contentType": "text/plain",
      "statement": "customer_data_retention_period = Anthropic API: deleted within 30 days, with listed exceptions. Evidence snapshot sha256:31c58317fd20d708fdb599ee7a29d7d8bd7875152c2cdad9fcc4a427c15149c0; recorded 2026-10-24T00:00:00Z; valid from 2026-10-24. Responsive to (not compliant with): iso-42001@2023:A.7.3 nist-ai-rmf@1.0:MEASURE-2.10."
    },
    {
      "type": "Annotation",
      "spdxId": "https://jesseahawkins.com/vendors/anthropic/aibom/annotation/data_residency",
      "creationInfo": "_:creationInfo",
      "annotationType": "other",
      "subject": "https://jesseahawkins.com/vendors/anthropic/aibom/ai-package",
      "contentType": "text/plain",
      "statement": "data_residency = API inference: global by default (any geography) or US-only via inference_geo on Claude 4.6 and later, on the first-party API (except the OpenAI SDK compatibility endpoint) and some partner platforms; workspace data at rest: US only. Evidence snapshot sha256:0171e6e8e8a1d63a6e24483d2d437d75b8ef141e26b197787c969208bb2345a7; recorded 2026-10-26T00:00:00Z; valid from 2026-10-26."
    },
    {
      "type": "Annotation",
      "spdxId": "https://jesseahawkins.com/vendors/anthropic/aibom/annotation/dpa",
      "creationInfo": "_:creationInfo",
      "annotationType": "other",
      "subject": "https://jesseahawkins.com/vendors/anthropic/aibom/ai-package",
      "contentType": "text/plain",
      "statement": "dpa = Incorporated into the Commercial Terms by reference. Evidence snapshot sha256:97857ac41eabfc4bacacf57225c8385b826ffb63164398912db6e4219e4a8bb3; recorded 2026-10-24T00:00:00Z; valid from 2026-10-24."
    },
    {
      "type": "Annotation",
      "spdxId": "https://jesseahawkins.com/vendors/anthropic/aibom/annotation/trains_on_customer_data",
      "creationInfo": "_:creationInfo",
      "annotationType": "other",
      "subject": "https://jesseahawkins.com/vendors/anthropic/aibom/ai-package",
      "contentType": "text/plain",
      "statement": "trains_on_customer_data = Not by default. Evidence snapshot sha256:54617b76403faa9ba4db2ad4b7ba43a5c8d98fb8d9a2efbdbe18caac95e8a450; recorded 2026-10-24T00:00:00Z; valid from 2026-10-24. Responsive to (not compliant with): eu-ai-act@2026-07-27:annex-iv/2/d eu-ai-act@2026-07-27:annex-xi/s1/2/c iso-42001@2023:A.7.3 iso-42001@2023:A.7.5 nist-ai-rmf@1.0:MEASURE-2.10."
    },
    {
      "type": "Annotation",
      "spdxId": "https://jesseahawkins.com/vendors/anthropic/aibom/annotation/usage_limits",
      "creationInfo": "_:creationInfo",
      "annotationType": "other",
      "subject": "https://jesseahawkins.com/vendors/anthropic/aibom/ai-package",
      "contentType": "text/plain",
      "statement": "usage_limits = Spend and rate limits by usage tier, set from usage history and account standing. Evidence snapshot sha256:f865562bc3ba79d38ed8e5e7783e1ab30b0557fd518e6c1a7ed412f8caaba3c5; recorded 2026-11-03T00:00:00Z; valid from 2026-11-03."
    },
    {
      "type": "Annotation",
      "spdxId": "https://jesseahawkins.com/vendors/anthropic/aibom/annotation/zero_data_retention",
      "creationInfo": "_:creationInfo",
      "annotationType": "other",
      "subject": "https://jesseahawkins.com/vendors/anthropic/aibom/ai-package",
      "contentType": "text/plain",
      "statement": "zero_data_retention = Zero data retention, by agreement. Evidence snapshot sha256:31c58317fd20d708fdb599ee7a29d7d8bd7875152c2cdad9fcc4a427c15149c0; recorded 2026-10-24T00:00:00Z; valid from 2026-10-24."
    },
    {
      "type": "Annotation",
      "spdxId": "https://jesseahawkins.com/vendors/anthropic/aibom/annotation/ai_subprocessors",
      "creationInfo": "_:creationInfo",
      "annotationType": "other",
      "subject": "https://jesseahawkins.com/vendors/anthropic/aibom/ai-package",
      "contentType": "text/plain",
      "statement": "ai_subprocessors is recorded with no value (fact anthropic/ai_subprocessors@2026-11-04, 2026-11-04T00:00:00Z)."
    },
    {
      "type": "Annotation",
      "spdxId": "https://jesseahawkins.com/vendors/anthropic/aibom/annotation/certifications",
      "creationInfo": "_:creationInfo",
      "annotationType": "other",
      "subject": "https://jesseahawkins.com/vendors/anthropic/aibom/ai-package",
      "contentType": "text/plain",
      "statement": "certifications is recorded with no value (fact anthropic/certifications@2026-11-04, 2026-11-04T00:00:00Z)."
    },
    {
      "type": "Annotation",
      "spdxId": "https://jesseahawkins.com/vendors/anthropic/aibom/annotation/customer_data_retention_period/quote",
      "creationInfo": "_:creationInfo",
      "annotationType": "other",
      "subject": "https://jesseahawkins.com/vendors/anthropic/aibom/ai-package",
      "contentType": "text/plain",
      "statement": "customer_data_retention_period, in Anthropic's own words: \"For Anthropic API users, we automatically delete inputs and outputs on our backend within 30 days of receipt or generation\" Source: https://privacy.claude.com/en/articles/7996866-how-long-do-you-store-my-organization-s-data"
    },
    {
      "type": "Annotation",
      "spdxId": "https://jesseahawkins.com/vendors/anthropic/aibom/annotation/data_residency/quote",
      "creationInfo": "_:creationInfo",
      "annotationType": "other",
      "subject": "https://jesseahawkins.com/vendors/anthropic/aibom/ai-package",
      "contentType": "text/plain",
      "statement": "data_residency, in Anthropic's own words: \"Data residency controls let you manage where your data is processed and stored.\" Source: https://platform.claude.com/docs/en/manage-claude/data-residency"
    },
    {
      "type": "Annotation",
      "spdxId": "https://jesseahawkins.com/vendors/anthropic/aibom/annotation/dpa/quote",
      "creationInfo": "_:creationInfo",
      "annotationType": "other",
      "subject": "https://jesseahawkins.com/vendors/anthropic/aibom/ai-package",
      "contentType": "text/plain",
      "statement": "dpa, in Anthropic's own words: \"Data submitted through the Services will be processed in accordance with the Anthropic Data Processing Addendum (“DPA”), which is incorporated into these Terms by reference.\" Source: https://www.anthropic.com/legal/commercial-terms"
    },
    {
      "type": "Annotation",
      "spdxId": "https://jesseahawkins.com/vendors/anthropic/aibom/annotation/trains_on_customer_data/quote",
      "creationInfo": "_:creationInfo",
      "annotationType": "other",
      "subject": "https://jesseahawkins.com/vendors/anthropic/aibom/ai-package",
      "contentType": "text/plain",
      "statement": "trains_on_customer_data, in Anthropic's own words: \"By default, we will not use your inputs or outputs from our commercial products (e.g. Claude for Work, Anthropic API, Claude Gov, etc.) to train our models.\" Source: https://privacy.claude.com/en/articles/7996868-is-my-data-used-for-model-training"
    },
    {
      "type": "Annotation",
      "spdxId": "https://jesseahawkins.com/vendors/anthropic/aibom/annotation/usage_limits/quote",
      "creationInfo": "_:creationInfo",
      "annotationType": "other",
      "subject": "https://jesseahawkins.com/vendors/anthropic/aibom/ai-package",
      "contentType": "text/plain",
      "statement": "usage_limits, in Anthropic's own words: \"Limits are defined by usage tier. Organizations are placed on a tier automatically based on usage history and account standing and can move to a higher tier over time as they use the API.\" Source: https://platform.claude.com/docs/en/api/rate-limits"
    },
    {
      "type": "Annotation",
      "spdxId": "https://jesseahawkins.com/vendors/anthropic/aibom/annotation/zero_data_retention/quote",
      "creationInfo": "_:creationInfo",
      "annotationType": "other",
      "subject": "https://jesseahawkins.com/vendors/anthropic/aibom/ai-package",
      "contentType": "text/plain",
      "statement": "zero_data_retention, in Anthropic's own words: \"When you and we have agreed otherwise (e.g. zero data retention agreement)\" Source: https://privacy.claude.com/en/articles/7996866-how-long-do-you-store-my-organization-s-data"
    },
    {
      "type": "Annotation",
      "spdxId": "https://jesseahawkins.com/vendors/anthropic/aibom/annotation/notice",
      "creationInfo": "_:creationInfo",
      "annotationType": "other",
      "subject": "https://jesseahawkins.com/vendors/anthropic/aibom/document",
      "contentType": "text/plain",
      "statement": "This record is a factual recitation of publicly available vendor documentation as of the verification date. It does not constitute a legal opinion, a regulatory compliance certification, or an allegation of wrongdoing. The kept pages are held strictly as an evidentiary record that supports these findings."
    },
    {
      "type": "Annotation",
      "spdxId": "https://jesseahawkins.com/vendors/anthropic/aibom/annotation/signature",
      "creationInfo": "_:creationInfo",
      "annotationType": "other",
      "subject": "https://jesseahawkins.com/vendors/anthropic/aibom/document",
      "contentType": "text/plain",
      "statement": "The AIBOM files of this record are not signed. A signature waits on a signing key held in a key management service. Until then, check each quote against the kept page and its sha256."
    }
  ]
}