Anthropic will tighten enforcement of its regional restrictions on Nov 12, closing accounts that reach its models from places it does not sell to and widening the test from the account itself to the people and companies standing behind it.
The policy looks at three things at once: where the user physically sits, where the subscribing company is registered, and who ultimately controls it. Any one of them can be enough to end access. The company is also closing the routes that have kept unsupported users running, including consumer subscriptions passed to third parties and the resale of access through intermediaries.
That second measure is the one developers will feel. For two years the practical answer to a regional block has been an account held elsewhere, a payment method that clears and a proxy in a supported country. Anthropic is now treating that arrangement as a violation rather than a grey area, and it is applying the rule to the reseller as well as to the user.
Enforcement is not limited to what a customer declares. The systems keep 30 days of behavioural records and read them for signals: the time zone a session reports against the time zone its traffic implies, the language mix in prompts, and the pattern of concurrent requests. A single mismatch is not decisive. A pattern is.
Penalties scale. The lightest is a rate limit that quietly removes capacity from an account. The heaviest is a permanent ban. Developers who have built products on top of the models are being advised to export their prompt libraries and conversation histories before the date, because an account closed for cause does not come with a data-export window.
Why now is not a mystery. Anthropic is preparing a listing, and a company that files to sell shares has to describe its revenue by quality as well as by size. The filing disclosed that 5% to 7% of revenue over the past nine months came from customers later judged to have been in violation. That is revenue an issuer would rather forgo than defend in a prospectus, and the cheapest way to stop it is to stop serving the customers who generate it.
The arithmetic is uncomfortable in both directions. Seven percent of a fast-growing top line is a real number, and cutting it will show up in a quarter that investors are watching closely. Leaving it in place invites a different question, about whether the company can tell a compliant customer from a non-compliant one, which is the question a regulator asks first.
For customers the change lands unevenly. A company with a subsidiary in a supported country can usually restructure. A developer working alone in an unsupported one cannot, and the tools he built — an application, a workflow, a business — run on an interface he is about to lose. Migration to a competitor is possible. The cost is a rewrite of prompts, evaluation sets and guardrails that took months to tune.
The vendors that resell access are the most exposed. Their model assumes that a subscription bought in one jurisdiction can be delivered in another, and that assumption is now out of bounds. Some will re-paper themselves as regional distributors. Most will not have the standing to.
There is a broader signal in the timing. Model providers spent two years competing on capability and price, and treated geography as a compliance formality handled by terms of service that few customers read. A listing turns that formality into a diligence item, and diligence items get enforcement budgets. What Anthropic does this week, its competitors will be asked about by their own bankers.
The three-part test is the part worth watching. Location is easy to fake and easy to check. Registration is a matter of public record. Ultimate control is neither, and it requires the company to build a view of ownership that reaches through layers of holding companies. That is work normally done by banks and export-control officers rather than by the trust and safety team of a software company.
Whether the policy holds will be tested by the cases at the margin: the contractor billing through a supported entity, the research group sharing one account across borders, the startup whose founder moved but whose company did not. Each is a judgement call, and each will be appealed. A rule that cannot be applied consistently is worse than no rule, because it teaches customers that the constraint is negotiable.
Anthropic has said the controls begin on Nov 12. It has not said how many accounts it expects to close, or how it will treat customers who argue they were caught by a time zone rather than by intent. For an industry that has spent two years arguing that access to models should be wide, the answer will be read as a statement about who the company thinks its customers are.
