What Anthropic's New Identity Verification Policy Actually Does
Anthropic is broadening the circumstances under which it can ask Claude users to prove who they are. A new section in the company's updated privacy policy—published earlier this month and set to take effect July 8—outlines a process where users may be required to upload a government-issued ID, provide a selfie or video, and submit biometric data in order to appeal an account flag rather than face an outright ban.
The company has long required users to be at least 18 to access Claude. The new policy language goes further, stating that Anthropic can request proof of age or identity "in certain circumstances," without specifying exactly when that trigger kicks in.
Why Anthropic Is Asking for IDs Now
The Appeals Process Behind the Policy Change
According to Anthropic, the identity verification update is tied specifically to the company's appeals process—giving users whose accounts have been flagged for potentially fraudulent activity a path to fight back rather than simply lose access. An Anthropic representative pointed publicly to a clarification that the policy applies only to a small portion of flagged users who haven't been outright banned.
That said, the timing matters. Anthropic is navigating a fraught relationship with the Trump administration, and stricter controls over who can use its platform may double as a compliance move amid growing regulatory and political pressure.
The Breakdown with Washington
Anthropic's political situation has deteriorated sharply in recent months. The Trump administration effectively forced the company to pull its latest cybersecurity models after alleging a jailbreak could undermine their safety guardrails—though separate reporting has pointed to deeper personality clashes between Anthropic and the administration as the real driver. Earlier, the Pentagon formally designated Anthropic a "supply chain risk," apparently in retaliation for the company's refusal to let the government deploy its AI for mass domestic surveillance or autonomous weapons.
Whether the identity verification policy is a direct response to that standoff is unclear. But it's difficult to view it in isolation.
What Information Anthropic Can Collect From You
Government Documents and Biometric Data
When an account is flagged and verification is triggered, users must upload a photo scan of a government-issued passport or driver's license. Anthropic also collects a selfie or video, plus a digitized face geometry template—the kind of data that certain U.S. states, including Illinois, classify as legally protected biometric information.
The company also retains a record of what the verification found, such as whether the user cleared a specific age threshold.
Who Actually Handles the Process
Anthropic uses Persona, a San Francisco-based identity verification firm, to run the process. Users going through verification may encounter Persona's platform when accessing specific features or during routine platform integrity checks.
Anthropic controls how long Persona holds onto user documents, but the company had not clarified when that data is actually deleted. For context, Roblox—another Persona client—states that user images are removed immediately after processing, reducing the window in which a breach or government request could expose the data.
That last point is relevant for a specific reason: Persona is backed by Founders Fund, the venture firm co-founded by Trump supporter Peter Thiel, who also has investments in Anthropic. That connection has drawn criticism before. Discord selected Persona for its own age verification rollout earlier this year, then reversed course after users pushed back over the firm's Thiel ties.
It's also worth noting that Persona, as a U.S.-based company, can face government demands for user information it holds on its servers.
Age Verification Isn't New—But the Scope Is Expanding
Anthropic rolled out age verification checks earlier this year to satisfy legal requirements in various states and countries. Identity verification was announced separately around the same time. What the July 8 privacy policy update adds is formal documentation of these practices—and explicit acknowledgment of the biometric data being collected.
Anthropic says it is permitted to require ID uploads for reasons that include preventing and investigating fraud, abuse, and terms of service violations, as well as resolving security issues and administering user accounts.
Whether this represents an actual expansion of Anthropic's surveillance of its users—the company reportedly has tens of millions of monthly users—or simply more transparent language about existing processes depends on who you ask. What's changed on paper is now, at least, written down.