Alibaba reportedly bans employees from using Claude Code

2026-07-04 · Source: AI News & Artificial Intelligence | TechCrunch · Field: Technology & Digital — Artificial Intelligence & Machine Learning, Cybersecurity & Data Privacy, Software Development & Engineering · Depth: Fundamental Awareness, quick

Summary

Alibaba will ban its employees from using Anthropic's programming tool, Claude Code, starting July 10, citing alleged backdoor risks and classifying it as high-risk software. This decision follows Anthropic's existing policy prohibiting Chinese companies and their foreign-owned entities from accessing its models, with ongoing efforts to close access loopholes. A recent "Claude Code experiment" in March involved a version that secretly identified Chinese users, which Anthropic's Thariq Shihipar confirmed was an attempt to prevent account abuse from unauthorized resellers and protect against model distillation. Shihipar noted that stronger mitigations have since been implemented, and the experiment was slated for removal. Consequently, Alibaba is directing its staff to utilize its proprietary Qoder tool as an alternative.

Key takeaway

For AI Security Engineers managing corporate tool policies, this incident highlights the critical need to vet third-party AI coding assistants for compliance and data security risks. You should prioritize internal alternatives like Alibaba's Qoder to maintain control over proprietary code and sensitive data. Regularly audit external AI tool usage to prevent unauthorized data exposure and ensure adherence to geopolitical restrictions.

Key insights

Corporate security concerns and geopolitical restrictions are driving bans on third-party AI coding tools.

Principles

• Geopolitical restrictions impact AI tool adoption.
• AI providers track users for policy enforcement.
• Internal AI tools enhance security control.

In practice

• Implement internal AI coding tools.
• Monitor third-party AI tool usage.
• Review vendor compliance with geo-restrictions.

Topics

• AI Security
• Corporate AI Policy
• Claude Code
• Anthropic
• Geopolitical Compliance
• Code Generation Tools

Best for: CTO, VP of Engineering/Data, Executive, Director of AI/ML, AI Security Engineer, IT Professional

Related on AIssential

• Top 6 Claude Security Risks to Watch as AI Becomes Your Employees' Operating System — Claude's pervasive enterprise integration creates significant, often unmonitored, security risks across data, access, autonomous operations, and code generation.
• Anthropic accuses Alibaba of illicitly accessing its AI — AI model access controls are vulnerable to circumvention for competitive training via "distillation attacks".
• Claude’s code: Anthropic leaks source code for AI software engineering tool — Human error led to a significant source code leak for Anthropic's Claude Code, raising security and competitive concerns.
• Claude got attacked — Alibaba conducted a massive distillation attack on Claude, using 28 million exchanges to train its own model, prompting government intervention and potential KYC for AI.
• In the wake of Claude Code's source code leak, 5 actions enterprise security leaders should take now — The Claude Code source leak exposes critical AI agent architecture and highlights systemic operational security gaps in AI development.
• the claude leak made one thing harder to ignore — Agent products are sophisticated control systems, with orchestration and explicit control layers being critical.

Open in AIssential →

Editorial summary, takeaway, and curation by AIssential. Original article published by AI News & Artificial Intelligence | TechCrunch.