A wave of identity and security vendors has integrated with Anthropic’s newly launched Claude Compliance API, an interface that is emerging as a shared control point for governing how organizations use AI. Anthropic introduced the Compliance API this week, describing it as a way for Claude to work with more security and compliance tools so that IT and security teams can govern Claude usage as they would other applications.
The Compliance API exposes activity from Claude Enterprise and Claude Platform, including prompts, responses, files, projects, and activity logs, to approved third-party systems, letting vendors bring Claude activity into the security and governance tools enterprises already run rather than each building a separate connection.
In the identity field, the most direct integration comes from SailPoint, which released a connector that brings Claude into its Identity Security Cloud platform. The connector lets administrators centrally manage Claude Enterprise users, groups, group members, and roles, and it discovers and governs Claude AI agents, adding them to SailPoint’s agent registry so autonomous agents are inventoried alongside human accounts. SailPoint frames the work as a response to Shadow AI, the ungoverned use of AI tools inside an organization. “While the industry discusses the future of AI security, SailPoint is delivering it,” said Chandra Gnanasambandam, Executive Vice President of Product and Chief Technology Officer at SailPoint, who said the connector lets organizations govern their AI workforce from day one.
Proofpoint integrated the API to extend data loss prevention, insider risk detection, and compliance functions to Claude. “Humans and AI agents operate in the same workflows, access the same sensitive data, and shape the same business decisions,” said Mayank Choudhary, Executive Vice President and General Manager of Proofpoint’s Information Protection, Cloud Security, and Compliance Products Group, arguing that organizations need one control layer rather than separate governance models for people and AI.
CrowdStrike connected the API to its Falcon platform, ingesting Claude activity logs and conversation content into its Next-Gen SIEM and correlating that activity with endpoint, identity, and cloud telemetry. “Every enterprise application requires monitoring and protection. AI shouldn’t be the exception,” said Daniel Bernard, Chief Business Officer at CrowdStrike. Netskope integrated the API to strengthen data security and governance over Claude usage, and log analytics provider Sumo Logic is among the other firms adding visibility into Claude activity.
The pattern treats AI platform activity as another enterprise data source to be governed, and AI agents as identities to be managed. How that agent activity is identified, authorized, and audited has also moved into standards work, including a NIST concept paper on AI agent identity and authorization, and into vendor products such as SailPoint’s Navigator Digital Identity Flex.
Sources: GlobeNewswire, Proofpoint, CrowdStrike
–
By the ID Tech Editorial Team
Follow Us