Files
ai_tools_analysis/evaluation_development_claude_code.md
T

289 lines
9.0 KiB
Markdown

# Claude Code - Enterprise Compatibility Evaluation
## Overview
Claude Code is Anthropic's agentic AI coding tool that understands entire codebases and can edit files, run commands, and debug issues autonomously. It's available as a CLI tool, VS Code extension, JetBrains plugin, and Slack integration.
## Enterprise/Commercial Use Permission
**Status: YES - Permitted with appropriate plans**
Claude Code explicitly permits enterprise and commercial use through Team and Enterprise plans. Consumer plans (Free, Pro, Max) are also available for individual developers.
**Key Points:**
- Claude Code is covered by existing commercial agreements (API, Team, Enterprise)
- Commercial use permitted under Commercial Terms of Service
- Consumer use permitted under Consumer Terms of Service
- Enterprise customers maintain full control with Zero Data Retention (ZDR) options
**Sources:**
- https://claude.com/product/claude-code
- https://code.claude.com/docs/en/legal-and-compliance
- https://www.anthropic.com/legal/commercial-terms
---
## Data Training Policies
### Consumer Plans (Free, Pro, Max)
**Default Behavior (as of September 2025):**
- Users can opt-in to allow data to be used for model improvement
- If opted-in: Data may be retained up to 5 years for training
- If opted-out: Standard 30-day retention applies
- Setting is user-controllable in Privacy Settings
**Key Policy Statement:**
> "Anthropic will train new models using data from Free, Pro, and Max accounts when the training setting is on, including when users use Claude Code from these accounts."
### Commercial Plans (Team, Enterprise, API)
**No Training Guarantee:**
- Code snippets are NOT used for training models
- Customer data is never used for AI model training
- Prompts and outputs are not used for training (except for Trust & Safety review)
- Zero Data Retention (ZDR) available for sensitive industries
**Key Policy Statement:**
> "Business users receive Commercial or Enterprise Terms of Service instead. These terms explicitly prohibit data training without exception."
**Sources:**
- https://privacy.claude.com/en/articles/10301952-updates-to-our-privacy-policy
- https://www.anthropic.com/news/updates-to-our-consumer-terms
---
## Data Retention and Sharing Policies
**Consumer Plans (Free, Pro, Max):**
- **Deleted conversations**: Removed within 30 days
- **With training opt-in**: Up to 5 years in de-identified form
- **Without training opt-in**: 30 days standard retention
**Commercial Plans (Team, Enterprise, API):**
- Prompts processed in real-time
- No long-term storage beyond operational needs
- **Zero Data Retention (ZDR)**: Available via security addendum - eliminates stored records entirely
**Data Location:**
- Processed within Anthropic's secure infrastructure
- SOC 2 Type II certified data centers
- Complies with GDPR, CCPA, HIPAA (with BAA)
**Claude Code Specifics:**
> "When interacting with Claude Code, files that Claude Code reads are sent in their entirety to Anthropic's servers for analysis. Only files that Claude Code explicitly reads are sent."
**Sources:**
- https://privacy.claude.com/en/articles/10023548-how-long-do-you-store-my-data
- https://trust.anthropic.com/
---
## IP and Confidentiality Concerns
**Intellectual Property:**
- **Code Ownership**: Users retain full ownership of their code
- **Generated Code**: Users own code generated by Claude Code
- **No IP Claims**: Anthropic makes no claims on customer IP
**Confidentiality Protections:**
- Commercial plans include confidentiality guarantees
- Code is not exposed to other users
- Enterprise-grade security and compliance certifications
**Known Considerations:**
- Files read by Claude Code are transmitted to Anthropic servers
- Use ZDR for highest sensitivity requirements
- Consider air-gapped alternatives (Continue.dev) for classified code
**Compliance Certifications:**
- SOC 2 Type I & Type II
- ISO 27001:2022
- ISO/IEC 42001:2023 (AI Management)
- HIPAA-ready (with BAA and ZDR)
**Sources:**
- https://privacy.claude.com/en/articles/10015870-what-certifications-has-anthropic-obtained
- https://trust.anthropic.com/
---
## Free Tier Details
**Claude Free**
**Features Included:**
- Access to Claude Code via CLI and extensions
- Basic code completions and assistance
- Multi-file editing capabilities
- Command execution and debugging
**Limits:**
- Limited daily/weekly message allowance (varies by demand)
- Lower priority during high-demand periods
- Training opt-in available (can be disabled)
**Privacy Note:**
- Data MAY be used for training if opted-in
- Recommend disabling training in Privacy Settings for sensitive work
---
## Paid Plans
### Claude Pro
**Price:** $20/month (per user)
**Features:**
- Full Claude Code access
- ~45 prompts per 5-hour window
- Weekly usage cap suitable for individual developers
- 5x more usage than Free plan
- All IDE integrations (VS Code, JetBrains, CLI)
**Data Policy:**
- Training opt-in/out available
- 30-day retention (without training)
- 5 years (with training enabled)
**Best For:** Individual developers
---
### Claude Max
**Price:** $100/month (Max 5x) or $200/month (Max 20x)
**Features:**
- All Pro features
- Up to 20x higher throughput
- Combined Sonnet and Opus hours
- Intensive multi-session workflows
- Up to 50 sessions per month
**Data Policy:**
- Same as Pro (training opt-in/out)
- Ability to purchase additional usage at API rates
**Best For:** Heavy solo developers, agencies
---
### Claude Team
**Price:** $25-30/month per user (minimum 5 users)
**Features:**
- All Max features
- Administrative controls and usage analytics
- **NO training on customer data**
- Centralized governance
- Premium seats available ($150/month) with full Claude Code access
**Data Policy:**
- Commercial Terms apply
- No data used for training
- Enhanced privacy protections
**Best For:** Development teams
---
### Claude Enterprise
**Price:** Custom (~$60/seat reported, 70 user minimum, annual contract)
**Features:**
- All Team features
- 400K+ context window
- SCIM provisioning
- Audit logs
- Advanced security controls
- Zero Data Retention (ZDR) available
- Business Associate Agreement (BAA) for HIPAA
- Compliance API for regulatory requirements
**Data Policy:**
- **Explicit no-training guarantee**
- Zero Data Retention option
- BAA automatically extends to Claude Code (with ZDR)
**Best For:** Large enterprises, regulated industries
---
## Usage Limits
### Shared Limits:
> "Both Pro and Max plans offer usage limits that are shared across Claude and Claude Code, meaning all activity in both tools counts against the same usage limits."
### Rate Limits:
- **Pro**: ~45 prompts per 5-hour window
- **Max 5x**: 5x Pro limits
- **Max 20x**: 20x Pro limits
- **Team/Enterprise**: Custom limits available
### Monitoring:
- Use `/status` command to check remaining allocation
- Warning messages displayed as limits approach
### Important Note:
> "If you have an ANTHROPIC_API_KEY environment variable set, Claude Code will use API key authentication instead of your subscription, resulting in API rate charges."
---
## Summary Recommendation
### Best for Enterprise Use:
**Claude Team or Enterprise** plans are recommended for organizations:
**Strengths:**
- Clear no-training guarantee for commercial plans
- SOC 2, ISO 27001, HIPAA certifications
- Zero Data Retention option for sensitive data
- Full codebase understanding and autonomous editing
- Strong compliance framework (Compliance API)
**Considerations:**
- Consumer plans (Free/Pro/Max) can have training enabled
- Files read are transmitted to Anthropic servers
- Usage limits shared across Claude and Claude Code
- For highest sensitivity, consider air-gapped alternatives
### Recommendation Matrix:
| Use Case | Recommended Plan | Training Status |
|----------|-----------------|-----------------|
| Personal/learning | Free/Pro | Opt-out recommended |
| Non-sensitive work | Pro/Max | Opt-out recommended |
| Team development | Team ($25-30/user) | No training |
| Regulated industry | Enterprise + ZDR | No training, no retention |
| Classified code | Use Continue.dev | Air-gapped alternative |
**Ideal For:**
- Development teams of any size
- Organizations with compliance requirements
- Companies already using Claude/Anthropic products
- Teams needing agentic AI coding capabilities
---
## Verification Checklist
Before implementing, verify the following:
- [ ] Current pricing at https://claude.ai/pricing
- [ ] Privacy settings and training opt-out
- [ ] Commercial terms at https://www.anthropic.com/legal/commercial-terms
- [ ] SOC 2 report via Trust Portal (under NDA for Enterprise)
- [ ] BAA requirements if handling PHI
- [ ] ZDR addendum if needed
---
**Last Updated:** February 2, 2026
**Additional Sources:**
- [Claude Code Documentation](https://code.claude.com/docs)
- [Anthropic Trust Center](https://trust.anthropic.com/)
- [Anthropic Privacy Center](https://privacy.claude.com/)
- [Claude Help Center](https://support.claude.com/)
**Note:** Policies and pricing may change. Always verify current terms at official Anthropic documentation before making procurement decisions.