What we send to each AI vendor when we build and run software for you, under whose account, and what the vendor says about keeping it and training on it. Vendors change their terms, so read the vendor's own page before you rely on a quote. This is not legal advice. See also our Privacy Policy.
Anthropic (Claude API)
- What it receives: the prompts and files your work needs, such as code and documents for builds, documents for extraction, text for drafting, and the in-app assistant's conversation.
- Whose account: your own key, held in your engagement. If you do not supply a key, the work runs on Moonwater's key and you are invoiced measured usage plus 30 percent. Your order form says which applies.
- How long the vendor keeps it: Anthropic says it deletes inputs and outputs from its backend within 30 days of receipt or generation, with exceptions it lists, such as longer retention under the customer's control, usage-policy enforcement and legal compliance.
- Training: Anthropic's commercial terms say it "may not train models on Customer Content from Services."
Amazon Bedrock
- What it receives: the platform's memory: notes and summaries of your work, and their embeddings.
- Whose account: Moonwater's AWS account, in the United States.
- How long the vendor keeps it: in the default mode, AWS may keep data for safety and abuse prevention. The model provider does not receive it.
- Training: AWS states that model providers have no access to Bedrock logs or to customer prompts and completions.
Claude Code, used by our engineers
- What it receives: code, prompts and file contents in the engineer's session.
- Whose account: the engineer's Claude subscription, or Moonwater's key for Moonwater's own work.
- How long the vendor keeps it: on consumer plans, 30 days, or 5 years if the account allows model improvement. On commercial plans, 30 days.
- Training: on consumer plans, Anthropic trains on the data when the account's "Help improve Claude" setting is on. That setting is off on every Claude account an engineer uses for Moonwater work (checked 2026-10-10, and checked again at each quarterly access review).
What is not in place
- Zero data retention. No vendor has agreed it for Moonwater. It is available from Anthropic by agreement. If the key is your own, that agreement is between you and Anthropic.
- A data processing agreement. Moonwater acts as your processor. A standard agreement for this is planned and is not yet part of the order form.