A change to Anthropic's privacy policy took effect on July 8 that lets the company ask consumer Claude users for a government-issued photo ID, a live selfie, and a facial-geometry scan before granting or keeping access to the service. The verification, first flagged in June, is now part of the terms.
The reach is narrower than the headline suggests, and that distinction matters. The checks apply to consumer accounts, meaning Claude Free, Pro and Max. Claude Team, Enterprise, the developer platform, and anything covered by a separate commercial contract are not affected. Anthropic runs the verification through a third party, Persona Identities, which collects and stores the ID and selfie images rather than Anthropic holding them directly.
What is collected, and what is not explained
The data set is substantial: an image of the identity document and the details printed on it, a photo or video of the user, a facial-geometry template, and the verification result. What the policy does not spell out is nearly as notable as what it does. There is no published list of what triggers a check, no stated retention period for the collected data, and no described consequence for refusing beyond the plain risk of losing access. Hand over the biometrics or lose the account, with the middle ground left undefined.
Age gates, export deals, and an IPO
Anthropic frames the measure as age verification, part of a wider industry move to keep minors away from adult capabilities and to satisfy tightening rules on that front. The timing also sits inside a run of compliance pressure the company has been under. The policy update was part of the timeline set when Washington lifted the Fable 5 export ban, and it lands while Anthropic tightens who can reach its models after moving to close overseas access loopholes. Some coverage has also tied the identity push to the company's reported march toward a public listing, where know-your-customer expectations run higher.
The trade-off is the uncomfortable part. Verifying age and identity is a reasonable answer to real legal and safety demands. Collecting facial geometry from paying users, through a third party, with no published retention limit, is a heavy instrument for that job. The policy is now live, and the details it leaves blank are the ones users will notice first if a check ever lands on their account.
Sources
- i. techcrunch.com
- ii. cybernews.com
- iii. www.techtimes.com
- iv. www.medianama.com
Commentarii · 0