AI tool summary for DPOs and governors
Claude (Free / Pro / Max)
Anthropic · Facts last checked 2026-10-23 · Printed 23 October 2026
AI Prefect
- Supplier acts as a data controller, not a processor for the school
- Supplier acts as a data controller, not a processor for the school
| Supplier | Anthropic |
|---|---|
| Category | general chatbot |
| Pupil-facing | not stated |
| Processor or controller | controller (consumer service) |
| Where data is stored | not stated |
| Trains AI models on inputs | depends - your choice in Settings > Privacy (Help improve our AI models) |
| How long inputs are kept | deleted chats removed within 30 days; up to 5 years (de-identified) if training is on; flagged chats up to 2 years |
| Data processing agreement (DPA) | not stated |
| Signs individual DPAs with schools | not stated |
| UK GDPR representative / DPO | not stated |
| Minimum age | not stated |
| Key safety note | not stated |
| Main use | General AI assistant / chatbot |
Better-rated alternatives for the same use: ChatGPT Edu (Green), Gemini app (Workspace for Education) (Green), Microsoft 365 Copilot (Green)
Sources: https://privacy.claude.com/en/articles/12109829-how-do-i-change-my-model-improvement-privacy-settings · https://privacy.claude.com/en/articles/10023548-how-long-do-you-store-my-data · https://www.anthropic.com/news/updates-to-our-consumer-terms
Full entry: aiprefect.co.uk/tools/claude. Rating is a rules-based summary of the supplier’s published terms. “Not stated” means we could not find it in their documents. This is not legal advice and does not replace your DPIA.