For professionals bound by secrecy under § 203 StGB

Claude Desktop App for your firm, through the Gosign privacyRouter

Claude Opus, Sonnet and Haiku by Anthropic on Google Cloud at the EU endpoint. Zero retention and no abuse monitoring. You conclude the § 203 agreement and the DPA with Gosign.

€99 net per workstation per month, plus tokens at the provider's list price with no markup.

Discuss the connection Book a call
€99
net per workstation per month
List price
for tokens, with no markup
Text form
§ 203 agreement before any client data
24 hours
until we reply

How the route works

Where do requests from the Claude Desktop App go?

The app sends its calls to the model to the Gosign privacyRouter instead of directly to Anthropic. The router forwards them, under the signed chain, to Claude Opus, Sonnet and Haiku by Anthropic on Google Cloud at the EU endpoint. Usage statistics and error reports to Anthropic are switched off through the app's managed configuration, and so is web search.

Route of the Claude Desktop App through the Gosign privacyRouterThe app's calls to the model go through the Gosign privacyRouter to Claude Opus, Sonnet and Haiku by Anthropic on Google Cloud at the EU endpoint, with zero retention (except in the variant with caching). Abuse monitoring is switched off: nothing is stored for it either, and none of the provider's staff review content. Usage statistics and error reports to Anthropic are switched off through the app's managed configuration, and so is web search.Claude Desktop AppYour workstationThird-party modeCallsGosign privacyRouterYour keyYour usage limitsContract chain with Gosignwith Gosign§ 203 agreementDPAClaude by AnthropicOpus, Sonnet and HaikuGoogle Cloud, EU endpointwithout Fable and MythosZero retentionAbuse monitoringswitched offnothing stored, no reviewSwitched offusage statistics and error reportsto Anthropic, plus web searchin progressEnterprise search by Gosignwith § 203 and zero retentionswitched on once available
  1. Through the router: the app's calls to Claude Opus, Sonnet and Haiku by Anthropic, with your key, your usage limits and the contract chain with the § 203 agreement and the DPA.
  2. At Google Cloud on the EU endpoint: Zero retention. Abuse monitoring is switched off: nothing is stored for it either, and none of the provider's staff review content. Only the variant with caching, which you switch on yourself, keeps requests for up to one hour after the last use.
  3. Switched off: usage statistics and error reports to Anthropic, through the app's managed configuration, and web search, which is blocked on this route.
  4. Not offered: Claude Fable and Mythos. Google Cloud runs them as a separate model class that keeps inputs for up to 30 days and passes them to Anthropic; zero retention is ruled out there, so § 203 coverage does not hold on this route.
  5. In progress: Enterprise search by Gosign with § 203 and zero retention, switched on as soon as it is available.
Discuss the connection

€99 net per workstation per month, plus tokens at the provider's list price with no markup.

Why not simply use the Claude Desktop App as it is?

By default

the Claude Desktop App talks directly to Anthropic. As of 30 October 2026, Claude under § 203 StGB is available through the cloud platforms, not through the vendors' own apps. A private Anthropic account has neither a data processing agreement nor a secrecy obligation under § 203 StGB; for client data, that is not a workable route.

Through the Gosign privacyRouter

the app's calls to the model go to Claude on Google Cloud at the EU endpoint, with a signed § 203 contract chain and zero retention. You conclude your § 203 contract with us, without a cloud contract of your own.

Read in advance, without a form: the § 203 secrecy addendum as you sign it with us (Annex 3 of the framework agreement, as at 8 November 2026, PDF, in German) and, from the § 203 contract kit, the sample client consent (PDF, in German).

Setting up Claude Desktop in three steps

  1. Step 1: sign the contracts

    After our conversation, you sign the § 203 agreement and the DPA in text form. We then set up access with a key and usage limits for your team.

  2. Step 2: switch the app over

    In the Claude Desktop App, your IT selects third-party mode and enters the address, key and model names. If you have no IT department of your own, your IT service provider can do this; you still conclude the contracts with us.

  3. Step 3: switch off usage statistics and error reports

    Through the app's managed configuration, via an MDM profile or bootstrap server, usage statistics and error reports to Anthropic are switched off. Web search is blocked on this route.

Discuss the connection Book a call

Who it is for: lawyers, tax advisers, auditors and their IT

Professionals bound by secrecy under § 203 StGB

Law firms, tax advisory firms and auditors in Germany, including the German offices of international firms, that want to work with Claude and pass on client data only under a secrecy obligation.

AI under German professional secrecy

Companies with confidential data

HR, finance, contracts: we connect companies without professional secrecy duties after a case-by-case review.

Not sure whether it fits your team? Write to us about what you need.

Which combination of model and supply route is covered under § 203 is shown in the model catalogue.

What it costs

€99 net per workstation per month

Plus tokens at the provider's list price with no markup; the model catalogue shows what tokens cost for each model. Your usage limits cap your team's consumption.

The contract runs for twelve months and renews for twelve months at a time unless you give notice three months before the end; you can cancel additional workstations at the end of the month.

Discuss the connection Book a call

Claude, Claude Desktop, Gemini, Google Cloud and OpenAI are trademarks of their respective owners.

Questions about Claude Desktop under § 203

Can our German office use Claude Desktop with client data?

Through the Gosign privacyRouter, this is a supply route with a § 203 contract chain under the DAV position (SN 32/2025). The courts have not conclusively settled the question; we also name the stricter BRAK position (guidance 12/2024: transferring client secrets to language models is not necessary). The same chain applies to tax advisers and auditors (§ 62a StBerG, § 50a WPO). Client data only passes through the router once you have signed the § 203 agreement and the DPA in text form. This page is not legal advice.

What does Claude Desktop through the router cost?

€99 net per workstation per month, plus tokens at the provider's list price with no markup. Your usage limits cap consumption. The model catalogue lists the list price of each model.

Do our people keep working in the Claude Desktop app?

Yes, in third-party mode. Your IT changes the address, key and model names in the app, and from then on the app's calls to the model go through the Gosign privacyRouter. Usage statistics and error reports to Anthropic are switched off through the app's managed configuration, and so is web search. Which other features the app offers in third-party mode is up to Anthropic.

Which Claude models does the app use through the router?

Claude Opus, Claude Sonnet and Claude Haiku by Anthropic on Google Cloud at the EU endpoint; the model catalogue lists all three as covered on this route. Your IT enters the model names in the app. Your own software can also reach Gemini through the same access in the OpenAI format. § 203 status is a property of the combination of model and supply route, never of the model alone.

Why not Claude Fable or Claude Mythos?

Because § 203 coverage does not hold for these two on the Google Cloud route, which is the only route through which we offer Claude. Google Cloud runs Claude Fable and Claude Mythos as a separate model class: inputs are kept for up to 30 days and passed to Anthropic, and zero retention is ruled out. That removes exactly the commitment on which coverage for Opus, Sonnet and Haiku rests, so we do not offer them. For everyday work, Opus, Sonnet and Haiku are the more proven tiers anyway. The model catalogue lists the sources with retrieval dates.

Does the Claude Desktop app send data to Anthropic?

Not conversation content: in third-party mode, the app sends it to the endpoint you configure, here the Gosign privacyRouter. Usage statistics and error reports to Anthropic are switched off through the app's managed configuration, via an MDM profile or bootstrap server; according to Anthropic, they contain no prompt or response content anyway (documentation on Claude Desktop in third-party mode, retrieved 9 November 2026). Connectors to other services run neither through the router nor under our contract chain. Your IT decides which connectors your team may use.

Does web search work in the Claude Desktop app?

No, web search is switched off: model search functions that pass content to a web search are blocked on this route, and a search provider of your own, entered in the app by your IT, would run outside our contract chain. Gosign is building an Enterprise search with § 203 and zero retention as a product of its own; we will switch it on as soon as it is available.

What does zero retention mean here, and what about abuse monitoring?

Zero retention means that Google stores neither inputs nor outputs for Claude, and Anthropic receives no content on this route. On top of that, abuse monitoring is switched off: Google has approved this specifically for our Google Cloud account, so nothing is stored for it either. What is not stored cannot be reviewed by any member of staff at Google or Anthropic. An automated check at the moment of the request may continue to run; it stores nothing. Only in the variant with caching, which you switch on yourself, does Google store each request up to the point the app specifies and keep it for up to one hour after its last use, even if it is not repeated.

Does the EU endpoint mean US law does not apply?

No. Calls run on Google Cloud at the EU endpoint. Google is a US group and subject to the CLOUD Act; that exposure remains at the EU endpoint too and is therefore covered in the third-country transfer building block of the § 203 contract kit. Whether it is acceptable for a given matter is for the professional to assess under § 43e Abs. 4 BRAO (§ 62a StBerG, § 50a WPO). The courts have not conclusively settled this: we follow the DAV position (SN 32/2025) and also name the stricter BRAK position (guidance 12/2024: transferring client secrets to language models is not necessary). This page is not legal advice.

Do we need our own contract with Google?

No. You conclude your § 203 contract with us, without a cloud contract of your own. The contract chain includes the § 203 agreement and the DPA; you can read the sample agreement in advance in the § 203 contract kit, without a form. Before you start, you sign the contracts in text form; only then does client data pass through the router.

Do we need our clients' consent?

For engagements tied to a specific mandate, usually yes: § 43e Abs. 5 BRAO, § 62a Abs. 5 StBerG and § 50a Abs. 5 WPO then also require the client's consent. The wording of the law does not require it to be express. For tax advisers, the Federal Chamber of Tax Advisers requires express consent; for everyone else it is strongly recommended, and it should be documented in any case. A sample client consent is openly available in the § 203 contract kit. This page is not legal advice.

What about companies without professional secrecy duties?

The Google route is for professionals bound by secrecy. We connect companies with confidential data, for example from HR or finance, after a case-by-case review. Write to us about what you need.

What would your team use Claude Desktop for?

Tell us in a sentence or two; an email address is enough. We reply within 24 hours. After our conversation, you sign the contracts in text form, and then we set up access. €99 net per workstation per month, plus tokens at the provider's list price with no markup. Gosign GmbH, Hamburg, since 2001.

Would you like to request a call as well? (optional)

30 minutes, video call, no obligation. You will receive the invitation once we have confirmed your preferred time.

Loading available times …

Just send your message and we will suggest times.

We use your details to handle your inquiry. Along with it, we receive which pages you viewed during this visit, including those after you submit. More in our privacy policy (opens in a new tab).

The form is not loading right now. Please reload the page. You can also reach us by email: web26 [at] gosign.de