References — Primary Sources

Every chapter in this hub traces its claims to primary documentation from platform providers, cloud services operators, and regulatory authorities. This page consolidates those sources by category for navigation and verification.

The primary-source documentation underpinning every chapter in the Enterprise Claude Deployment hub is verified and retrieved as of 22 April 2026. Each chapter references one or more of the documents listed below. When evaluating a deployment route, follow the cross-referenced URLs to confirm that vendor capabilities and regulatory frameworks remain current.

Anthropic Cowork 3P documentation

• Anthropic. Cowork on 3P — Overview. Retrieved 22 April 2026.
• Anthropic. Cowork on 3P — Configuration reference. Retrieved 22 April 2026.
• Anthropic. Cowork on 3P — Installation and setup. Retrieved 22 April 2026.
• Anthropic. Cowork on 3P — Telemetry and egress. Retrieved 22 April 2026.
• Anthropic. Cowork on 3P — Extensions. Retrieved 22 April 2026.

Amazon Web Services, Bedrock

• Amazon Web Services. AWS Bedrock — What is Bedrock? Retrieved 22 April 2026.
• Amazon Web Services. AWS Bedrock — Data Protection. Retrieved 22 April 2026.
• Amazon Web Services. AWS Bedrock FAQs. Retrieved 22 April 2026.
• Amazon Web Services. AWS Bedrock Pricing. Retrieved 22 April 2026.
• Amazon Web Services. AWS Bedrock Infrastructure Security. Retrieved 22 April 2026.
• Amazon Web Services. AWS Bedrock Guardrails. Retrieved 22 April 2026.
• Amazon Web Services. AWS Bedrock IAM Documentation. Retrieved 22 April 2026.
• Amazon Web Services. CloudTrail logging for Bedrock. Retrieved 22 April 2026.
• Amazon Web Services. AWS Compliance Certifications. Retrieved 22 April 2026.

Google Cloud, Vertex AI and Agent Platform

• Google Cloud. Vertex AI overview. Retrieved 22 April 2026.
• Google Cloud. Anthropic Claude models on Vertex AI documentation. Retrieved 22 April 2026.
• Google Cloud. Vertex AI regions and locations reference. Retrieved 22 April 2026.
• Google Cloud. Google Cloud compliance certifications. Retrieved 22 April 2026.
• Google Cloud. Google Cloud sovereign cloud offerings. Retrieved 22 April 2026.
• Google Cloud. Introducing Gemini Enterprise Agent Platform. Published and retrieved 22 April 2026.
• Google Cloud. BigQuery Generative AI Overview. Retrieved 22 April 2026.
• Google Cloud. Cloud Audit Logs documentation. Retrieved 22 April 2026.

Microsoft Azure, AI Foundry

• Microsoft. Claude in Azure AI Foundry setup and deployment guide. Retrieved 22 April 2026.
• Microsoft. Azure AI Foundry model regional availability reference. Retrieved 22 April 2026.
• Microsoft. Data privacy and residency for Claude models in Azure AI Foundry. Retrieved 22 April 2026.
• Microsoft. Fabric AI Services Overview. Retrieved 22 April 2026.

Snowflake, Cortex Code and cross-region inference

• Snowflake. Cortex AI Functions. Retrieved 22 April 2026.
• Snowflake. AI_COMPLETE SQL Function Reference. Retrieved 22 April 2026.
• Snowflake. Cross-Region Inference Guide. Retrieved 22 April 2026.

European Union, GDPR and international transfers

• EUR-Lex. GDPR Article 28 — Responsibility of the processor. Retrieved 22 April 2026.
• EUR-Lex. GDPR Article 32 — Security of processing. Retrieved 22 April 2026.
• EUR-Lex. GDPR Article 35 — Data Protection Impact Assessment. Retrieved 22 April 2026.
• EUR-Lex. GDPR Article 44 — General principle for international transfers. Retrieved 22 April 2026.
• EUR-Lex. GDPR Article 45 — Adequacy decisions. Retrieved 22 April 2026.
• EUR-Lex. GDPR Article 46 — Appropriate safeguards. Retrieved 22 April 2026.
• European Commission. EU-US Data Privacy Framework. Retrieved 22 April 2026.

United Kingdom, Data protection and transfers

• UK Information Commissioner's Office. Guide to data protection and GDPR. Retrieved 22 April 2026.
• UK Information Commissioner's Office. Contracts and liabilities between controllers and processors. Retrieved 22 April 2026.
• UK Information Commissioner's Office. International data transfers — A guide. Retrieved 22 April 2026.
• UK Information Commissioner's Office. International Data Transfer Addendum. Retrieved 22 April 2026.

United States, HIPAA and healthcare compliance

• US Department of Health & Human Services. HIPAA Business Associate Agreements. Retrieved 22 April 2026.
• US Department of Health & Human Services. HIPAA and Cloud Computing. Retrieved 22 April 2026.

Singapore, MAS and financial institution outsourcing

• Monetary Authority of Singapore. Guidelines on Outsourcing (Banks) 2023. Retrieved 22 April 2026.
• Monetary Authority of Singapore. Guidelines on Outsourcing (Financial Institutions other than Banks) 2024. Retrieved 22 April 2026.
• Monetary Authority of Singapore. MAS Notice FSM-N06 — Cyber Hygiene. Retrieved 22 April 2026.

Australia, APRA and privacy principles

• Australian Prudential Regulation Authority. CPS 234 — Information Security. Retrieved 22 April 2026.
• Office of the Australian Information Commissioner. Australian Privacy Principles. Retrieved 22 April 2026.

This bibliography is current as of 22 April 2026. Regulatory documents and vendor documentation are updated periodically. Before making a procurement decision, verify that the source URLs remain current and review any updated guidance from Anthropic's Cowork 3P overview page, which is the authoritative reference for deployment capabilities and guarantees. For compliance questions specific to your regulatory context and jurisdiction, consult qualified legal counsel.