Anthropic

Framework

Responsible Scaling Policy since 2023

Its own scale

Four capability thresholds, each paired with recommended mitigations; AI Safety Levels now name present safeguards only

Risk domains

CBRN, loss of control, AI R&D

External evaluation

committed to

Commits to stop

qualified: Commits to a decision process rather than to an outcome.

Rewritten as version 3 in February 2026; version 3.4 took effect on 8 July 2026. The earlier commitment not to train or deploy without adequate safeguards is gone: it commits to delay development and deployment only while Anthropic leads or its competitors have strong safety measures, and otherwise publishes Risk Reports with a risk-benefit determination by its chief executive and Responsible Scaling Officer. It no longer has a cyber threshold.

• 15 of 15 with a system card on the day
• 0 that no card names
• 9 naming a government institute that tested before release
• 12 stated to have reached a threshold in its own framework

Earlier releases 5

Anthropic releases since January 2025, earlier, with the card published for each.

Released	Model	Card	Results	Government tested	Threshold
2025-09-29	Claude Sonnet 4.5	at release	results	UK AISI	reached Requires ASL-3 protection
2025-08-05	Claude Opus 4.1 The card says no new pre-deployment evaluations were run with government partners for this release.	at release	results	none named	reached Deployed under the ASL-3 Standard as a precaution
2025-05-22	Claude Sonnet 4 The card names institute testing of Claude Opus 4 only.	at release	results	none named	below Does not require the ASL-3 Standard
2025-05-22	Claude Opus 4	at release	results	US AISI, UK AISI	reached Deployed with ASL-3 measures because ASL-3 risks could not be ruled out
2025-02-24	Claude 3.7 Sonnet	at release	results	US AISI, UK AISI	below ASL-2 safeguards remain appropriate

Every entry is Anthropic's own statement about its own models under its own framework. The rules behind each column are on the alignment page. Frontier Safety Framework Index This site Licence MIT Updated quarterly Retrieved 2026-10-18, 10 days ago Data JSON CSV Our own reading of each developer's published safety framework and model cards. Every field is what the developer says about itself: these are self-assessments under self-written frameworks with no common scale and no external audit, and they are indexed here for exactly that reason. Not a ranking, and not a verification. Cite AI Safety Tracker, "Frontier Safety Framework Index". https://aisafetytracker.org/alignment/#frameworks. Retrieved 18 October 2026. Release Safety Disclosure Index This site Licence MIT Updated monthly Retrieved 2026-10-18, 10 days ago Data JSON CSV Our own reading of the system card, model card or safety report each developer published for each release Epoch AI lists from 2025, joined to Epoch's list. Every cell is what a developer says about its own model under its own framework: whether a card came out with the release, whether it reports dangerous-capability results, which government institutes it names as pre-release testers, and whether it says a risk threshold was reached. None of it is verified. A release Epoch adds after the last review is shown as awaiting review. Cite AI Safety Tracker, "Release Safety Disclosure Index". https://aisafetytracker.org/alignment/#releases. Retrieved 18 October 2026. Notable AI Models Epoch AI Licence CC-BY-4.0 Updated weekly Retrieved 2026-10-18, 10 days ago Inclusion is editorial ("notability criteria"), not exhaustive. Compute figures are frequently estimates; check the per-row confidence and notes columns before treating any value as measured. Cite Epoch AI, "Notable AI Models". https://epoch.ai/data/ai-models. Retrieved 18 October 2026 via AI Safety Tracker, https://aisafetytracker.org/developers/anthropic/.

Also named as tenant at Western Downs Digital Park (proposed, lease signed, subject to approvals), from the developers' statements in the AI Datacentre Index.

Power is Epoch's estimate from imagery and permits, IT power where it states one. Confidence is Epoch's own label for each owner or user. AI Data Centers Epoch AI Licence CC-BY-4.0 Updated several times a week Retrieved 2026-10-28, today The largest AI sites Epoch has found, mostly in the United States. Epoch estimated in September 2026 that they hold 44% of the world's deployed AI compute, with a 90% interval of 23% to 81%. Power, compute and cost are Epoch's estimates from satellite imagery, permits and company statements; four in five IT power estimates fall within a factor of 1.4 of the true value. The owner is the owner of the chips, not necessarily of the building. Capacity after the date of retrieval is Epoch's projection. Coordinates are read from the hub's map page, which publishes them; the downloads do not. Cite Epoch AI, "AI Data Centers". https://epoch.ai/data/ai-data-centers. Retrieved 28 October 2026 via AI Safety Tracker, https://aisafetytracker.org/developers/anthropic/. AI Datacentre Index This site Licence MIT Updated quarterly Retrieved 2026-10-28, today Data JSON AI datacentre sites that Epoch AI's hub does not hold, recorded from the statements of developers, named tenants and planning authorities. Australia only so far. A site is included only where a primary source says it is built for AI compute or names the AI deployment inside it. Capacity is as the developer states it, IT or facility power as labelled, and is not an estimate; most of it is proposed and not yet approved. Coordinates are this site's placement of each stated address or area. Cite AI Safety Tracker, "AI Datacentre Index". https://aisafetytracker.org/datacentres/#added. Retrieved 28 October 2026.

Publishes use by task in the Anthropic Economic Index, but no volume.

Volumes are normalised to a month and are comparable only within one company's own scope. Every series with its scope is on the usage page. AI Usage Disclosure Index This site Licence MIT Updated quarterly Retrieved 2026-10-23, 5 days ago Data 3 datasets Our own compilation of the token volumes, user counts and shares of use that companies and studies have put on the record, each linked to where it was stated. Scopes, units and token definitions differ between companies, so no two figures are comparable without the scope printed beside each. Figures known only through press reporting are marked as such. Not a market share estimate, and not a measure of any company's actual volume beyond what it chose to state. Cite AI Safety Tracker, "AI Usage Disclosure Index". https://aisafetytracker.org/usage/. Retrieved 23 October 2026. AI Usage Disclosure Index This site Licence MIT Updated quarterly Retrieved 2026-10-23, 5 days ago Data 3 datasets Our own compilation of the token volumes, user counts and shares of use that companies and studies have put on the record, each linked to where it was stated. Scopes, units and token definitions differ between companies, so no two figures are comparable without the scope printed beside each. Figures known only through press reporting are marked as such. Not a market share estimate, and not a measure of any company's actual volume beyond what it chose to state. Cite AI Safety Tracker, "AI Usage Disclosure Index". https://aisafetytracker.org/usage/. Retrieved 23 October 2026.