{"schema":"https://policywatcher.online/schemas/evidence-packet/v1","schemaVersion":"1.1.0","mappingVersion":"2026-07-29.1","changeId":"dc410e07-7a2e-4f3c-97a2-b37f64424aa2","screeningDate":"2026-10-23T11:40:53.773Z","publicationGate":"published","company":{"id":"83da1ad9-8891-4372-a9db-bdf82c894d2a","name":"Anthropic","slug":"anthropic","industry":"Tech Giant"},"policy":{"id":"54ee97fb-bc87-41ff-837d-2a06184e99a5","name":"Acceptable Use Policy","type":"aup","jurisdiction":"Global","sourceUrl":"https://www.anthropic.com/legal/aup"},"sourceConfidence":{"state":"verified-retrieval","lastCheckedAt":"2026-10-23T11:40:53.765Z","retrievalChannel":"direct","dataStatus":"Available","publicSnapshotEvidence":true,"limitation":"Source confidence describes recorded retrieval and publication state. It does not rate the provider policy or certify source authenticity."},"snapshots":{"old":{"version":2,"sha256":"707935f726b40d3e3485dc68820b0efa4dee1dccaef23da182b68c3d7bd4ff75","capturedAt":"2026-10-09T02:46:14.267Z"},"current":{"version":3,"sha256":"38321f645518cb86a6d62debf46ff043dbcbc71eb37298d7619307e70145d90c","capturedAt":"2026-10-23T11:40:53.765Z"}},"analysisLineage":{"status":"verified","requestSha256":"ef25c9ad4a6fd18024bc3d60628c6df5b9b0ed309b5eb4e430919f368445b9c5","responseSha256":"895e2a449cdc5eec8e895b24b664751b9f3ffb6b5d40e50e99ab8134dfb8ce2f","model":"gemini-3.5-flash-lite","promptVersion":"policy-analysis.v3-full-document","schemaVersion":"policy-analysis.schema.v2","inputCoverage":"complete","semanticCoverage":"not_measured","documents":{"old":{"sha256":"707935f726b40d3e3485dc68820b0efa4dee1dccaef23da182b68c3d7bd4ff75","charLength":19129,"byteLength":19175,"rangeUnit":"utf16-code-unit","includedRanges":[[0,19129]],"excludedRanges":[]},"new":{"sha256":"38321f645518cb86a6d62debf46ff043dbcbc71eb37298d7619307e70145d90c","charLength":30555,"byteLength":30661,"rangeUnit":"utf16-code-unit","includedRanges":[[0,30555]],"excludedRanges":[]}},"boundary":"Hash verification links retained inputs and the application SDK request. It does not prove provider execution, semantic completeness or legal correctness."},"captureLineage":{"old":{"provenance":"unknown","sourceUrl":null,"requestedUrl":null,"finalUrl":null,"capturedAt":"2026-10-09T02:46:14.267Z","urlDisclosure":"credentials-query-fragment-redacted"},"current":{"provenance":"captured","sourceUrl":"https://www.anthropic.com/legal/aup","requestedUrl":"https://www.anthropic.com/legal/aup","finalUrl":"https://www.anthropic.com/legal/aup","capturedAt":"2026-10-23T11:40:53.765Z","urlDisclosure":"credentials-query-fragment-redacted"}},"assessment":{"summary":"Anthropic's updated AUP structures rules into universal standards, high-risk mandates, and consumer guidelines, tightening compliance duties for businesses.","overallRisk":"Medium","overallScore":4,"previousPublicChange":{"id":"f3173b06-e116-4be0-bda3-272c3a919124","overallRisk":"Medium","overallScore":4,"screeningDate":"2026-10-09T02:46:14.270Z"},"scoreDelta":0,"direction":"unchanged","reasons":[{"icon":"info","textEn":"New high-risk framework creates strict oversight for automated recommendations.","textIt":"Il nuovo framework ad alto rischio crea una rigorosa supervisione per i consigli automatici.","deltaScore":1,"evidenceQuote":"Certain uses of our products and services can impact an individual’s health, legal rights, finances, livelihoods, or access to housing, education, or essential services.","evidenceSide":"new","relatedKpi":"kpiAutomatedDecision","anchorStatus":"verified"},{"icon":"warning","textEn":"Mandatory human review adds operational friction for enterprise AI workflows.","textIt":"La revisione umana obbligatoria aggiunge attrito operativo per i flussi di lavoro AI aziendali.","deltaScore":2,"evidenceQuote":"A qualified person must meaningfully review a High-risk AI Recommendation, with the authority to change or modify it, before it is delivered as advice","evidenceSide":"new","relatedKpi":"kpiConsentMechanism","anchorStatus":"verified"},{"icon":"info","textEn":"Explicit consumer AI disclosure requirements alter product interface obligations.","textIt":"I requisiti espliciti di informativa AI modificano gli obblighi sull'interfaccia.","deltaScore":1,"evidenceQuote":"All consumer-facing chatbots or AI agents that communicate directly with external users must disclose to users that they are interacting with AI","evidenceSide":"new","relatedKpi":"kpiAlgoTransparency","anchorStatus":"verified"}],"keyPoints":[{"textEn":"Introduces explicit High-risk Use Case Requirements for sectors like medical and finance.","textIt":"Introduce requisiti espliciti per casi d'uso ad alto rischio in settori come sanità e finanza.","sentiment":"neutral"},{"textEn":"Mandates qualified human-in-the-loop review for high-risk AI advice and decisions.","textIt":"Manda la revisione umana qualificata per consulenze e decisioni AI ad alto rischio.","sentiment":"positive"},{"textEn":"Requires clear AI interaction disclosures for consumer chatbots and agents.","textIt":"Richiede chiare informative sull'interazione AI per chatbot e agenti dei consumatori.","sentiment":"positive"},{"textEn":"Clarifies safety boundaries for physical hardware actions and robotics integration.","textIt":"Chiarisce i confini di sicurezza per azioni su hardware fisico e integrazione robotica.","sentiment":"neutral"}],"regionImpacts":[{"region":"EU","perspective":"Enterprise","riskLevel":"Medium","impactAnalysisEn":"Businesses operating in the EU must align their human-in-the-loop workflows with the newly codified high-risk mandates to meet upcoming regulatory standards.","complianceNoteEn":"EU AI Act"},{"region":"EU","perspective":"Individual","riskLevel":"Low","impactAnalysisEn":"European individuals gain stronger protections and transparency regarding AI-driven decisions in vital areas like employment and credit.","complianceNoteEn":"GDPR Art 22"},{"region":"Global","perspective":"Enterprise","riskLevel":"Medium","impactAnalysisEn":"Global deployers must audit their multi-region architectures to comply with standardized high-risk sector exclusions and safety controls.","complianceNoteEn":"Cross-Border AUP"},{"region":"Global","perspective":"Individual","riskLevel":"Low","impactAnalysisEn":"Global users receive enhanced safety guarantees across consumer interactions, child safety protection, and risk disclosures.","complianceNoteEn":"Universal Standards"},{"region":"US","perspective":"Enterprise","riskLevel":"Medium","impactAnalysisEn":"US companies deploying models for credit, insurance, or hiring must institute robust internal review processes to satisfy Anthropic's new requirements.","complianceNoteEn":"CCPA / Sector Regs"},{"region":"US","perspective":"Individual","riskLevel":"Low","impactAnalysisEn":"US consumers benefit from mandatory AI disclosure rules and safeguards when receiving automated medical or financial guidance.","complianceNoteEn":"FTC Guidelines"}],"explanationBoundary":"Score reasons and deltaScore values are stored AI-assisted screening outputs. Verified anchors confirm only that the quoted passage occurs in the named snapshot; they do not prove the interpretation."},"governance":{"boundary":"Mappings identify review relevance between recorded PolicyWatcher KPI fields and framework topics. They are not legal interpretations, conformity assessments, certifications or compliance verdicts.","mappings":[{"framework":{"id":"eu-ai-act","name":"Regulation (EU) 2024/1689 (EU AI Act)","shortName":"EU AI Act","referenceUrl":"https://eur-lex.europa.eu/eli/reg/2024/1689/oj","referenceVersion":"Official Journal text, 2024","reviewQuestion":"Which recorded policy statements may be relevant to transparency, automated decisions, data use and human oversight review?","kpiFields":["kpiAiTrainingOptOut","kpiAlgoTransparency","kpiAutomatedDecision","kpiAiBiasFairness"]},"status":"mapped","assessedCount":4,"mappedFieldCount":4,"evidence":[{"field":"kpiAiTrainingOptOut","label":"AI training opt-out","value":"Not Available"},{"field":"kpiAlgoTransparency","label":"Algorithmic transparency","value":"Published"},{"field":"kpiAutomatedDecision","label":"Automated decisions","value":"Transparent"},{"field":"kpiAiBiasFairness","label":"AI bias and fairness","value":"Committed"}]},{"framework":{"id":"iso-42001","name":"ISO/IEC 42001:2023","shortName":"ISO/IEC 42001","referenceUrl":"https://www.iso.org/standard/42001","referenceVersion":"ISO/IEC 42001:2023 overview","reviewQuestion":"Which recorded policy statements may inform an AI management-system review of transparency, risk oversight and independent assurance?","kpiFields":["kpiAlgoTransparency","kpiAiBiasFairness","kpiIndependentAudit","kpiRegulatoryCompliance"]},"status":"mapped","assessedCount":4,"mappedFieldCount":4,"evidence":[{"field":"kpiAlgoTransparency","label":"Algorithmic transparency","value":"Published"},{"field":"kpiAiBiasFairness","label":"AI bias and fairness","value":"Committed"},{"field":"kpiIndependentAudit","label":"Independent audit","value":"Mentioned"},{"field":"kpiRegulatoryCompliance","label":"Regulatory compliance","value":"Comprehensive"}]},{"framework":{"id":"nist-ai-rmf","name":"NIST AI Risk Management Framework 1.0","shortName":"NIST AI RMF","referenceUrl":"https://www.nist.gov/itl/ai-risk-management-framework","referenceVersion":"AI RMF 1.0; NIST revision in progress, checked 2026-07-29","reviewQuestion":"Which recorded policy statements may support Govern, Map, Measure or Manage review questions?","kpiFields":["kpiAlgoTransparency","kpiAutomatedDecision","kpiAiBiasFairness","kpiContentModeration"]},"status":"mapped","assessedCount":4,"mappedFieldCount":4,"evidence":[{"field":"kpiAlgoTransparency","label":"Algorithmic transparency","value":"Published"},{"field":"kpiAutomatedDecision","label":"Automated decisions","value":"Transparent"},{"field":"kpiAiBiasFairness","label":"AI bias and fairness","value":"Committed"},{"field":"kpiContentModeration","label":"Content moderation","value":"Transparent"}]},{"framework":{"id":"oecd-ai-principles","name":"OECD AI Principles","shortName":"OECD AI Principles","referenceUrl":"https://oecd.ai/en/ai-principles","referenceVersion":"OECD AI Principles, updated 2024","reviewQuestion":"Which recorded policy statements may be relevant to transparency, fairness, accountability and user agency review?","kpiFields":["kpiConsentMechanism","kpiAlgoTransparency","kpiAiBiasFairness","kpiIndependentAudit"]},"status":"mapped","assessedCount":4,"mappedFieldCount":4,"evidence":[{"field":"kpiConsentMechanism","label":"Consent mechanism","value":"Explicit Opt-In"},{"field":"kpiAlgoTransparency","label":"Algorithmic transparency","value":"Published"},{"field":"kpiAiBiasFairness","label":"AI bias and fairness","value":"Committed"},{"field":"kpiIndependentAudit","label":"Independent audit","value":"Mentioned"}]}]},"humanReviewQuestions":["Does the original Acceptable Use Policy source still match the recorded public snapshot version 3?","Do the cited source passages support each displayed reason, KPI value and regional note?","Which advisory framework topics require specialist legal, risk or governance review for this use case?","Has a later public change superseded this packet before it is reused in a decision or publication?"],"methodologyUrl":"https://policywatcher.online/methodology/confidence","changeUrl":"https://policywatcher.online/change/dc410e07-7a2e-4f3c-97a2-b37f64424aa2","boundary":"This packet records PolicyWatcher evidence and AI-assisted screening for one public change. It is not legal advice, a compliance verdict, a certification, or proof that the external source remains unchanged.","contentDigest":"8d56cdf64bb3dc971d024f65096d36ea5144f817c812ec51fa7e251eaff1f469"}