TOOLS / POLICY RISK LAB

Put your idea
on the risk map.

Check authentication, sharing, organizational eligibility and history against public policy. Add unlisted circumstances and discover what needs closer review.

Claude Code Policy Risk Simulator: scenario assessment based on public policies and self-reports. Missing information counts as unverified in the simulation. Scores and review thresholds are site-defined and uncalibrated against real ban data, not official scores, violation findings or ban predictions.

Provide context and review risk concerns

Missing information retains simulation concerns. View a blank scenario or open the details to describe your usage through the available choices. Every field remains optional.

More: regions, organizations and new policy (optional)

Effective 2026-11-12; preview only in current mode before then.

0 / UTF-8 bytes · optional

Text stays here for your review; it is not uploaded or automatically scored.

A blank scenario scores 100 because every item is unverified. The policy check remains unknown; missing information is not a verified violation.

Provide details: review each concern (optional)

A no-conflict self-report resolves that simulation concern; skipped or unknown answers retain it. Statements are not verified evidence. We do not verify identity or require documents.

Official guidance restricts third-party collection or intermediation of Claude.ai credentials and routing on users’ behalf through consumer subscriptions. API keys and supported cloud providers are not categorically prohibited. Claude Code legal and compliance ↗

Consumer terms prohibit giving others access to an individual account or credentials. Official organizational seats and authorized commercial credentials are distinct. Consumer Terms of Service ↗

Claude Code guidance restricts paying for, reselling or intermediating end-user usage. Special agreements require review. A proxy server alone does not establish a violation. Claude Code legal and compliance ↗

Consumer terms prohibit bypassing systems or protective measures. Claude Code guidance requires preserving the published binary and authentication methods. Normal configuration, MCP and official automation alone do not trigger this item. Consumer Terms of Service ↗

Consumer terms prohibit illegal activity, unauthorized access, deception and infringement. Context and authorization matter, not keywords or language. Commercial users must also check applicable commercial terms and usage policy. Consumer Terms of Service ↗

Official guidance lists repeated usage-policy violations as a ban reason; counts, scores and decay thresholds are not public. A single refusal, exhausted quota or suspicious activity from compromise does not automatically establish a violation. Safeguards warnings and appeals ↗

The new policy considers physical location. IP does not prove location. Unlisted regions are unsupported. This previews user-verified eligibility; nationality and language are not scored. Supported Regions Policy (new version) ↗

The new policy covers incorporation, headquarters and direct or indirect majority ownership or control. Personal or employee nationality alone cannot establish organizational eligibility. Supported Regions Policy (new version) ↗

The new policy explicitly addresses ban evasion, stolen or fraudulent payment, unauthorized model distillation and malicious multi-account detection evasion. Not all training, batching or multiple accounts are automatically violations; authorization and purpose matter. Usage Policy (new version) ↗

Extra context, payment and IP (all optional)

Context adds no points; supplemental text stays pending manual review.

The website does not directly accept PayPal; payment failure does not automatically mean a ban. Card declines and payment eligibility ↗

IP not queried
Scope and scenario settings (optional)

Calculated locally in the browser; no Claude connection or saved input. Free text is not sent to a model and is not semantically classified. Optional IP lookup contacts ipapi.co, which receives your public IP; GPS is not used. Hosting may generate ordinary access logs. Do not enter passwords, tokens, card numbers or complete warning emails.