Can Federal Agencies Use Anthropic Claude Again? What the Blacklist Ruling Changes
Quick answer: Can federal agencies use Claude now?
Partly — it depends on whose contract you are under. On August 27, 2026, U.S. District Judge Rita F. Lin (Northern District of California) granted Anthropic summary judgment on its First Amendment, due-process and APA claims in a 59-page opinion (Dkt. 250), declared the Pentagon's "supply chain risk" designation unlawful, vacated and set aside the 10 U.S.C. § 3252 designation, and permanently enjoined enforcement of it — ordering the agencies to rescind the guidance implementing it. The all-agency Claude directive and the Hegseth directive's clause barring contractors from any commercial activity with Anthropic are vacated too. Civilian agencies can procure and use Claude again. The ruling did not reach the Pentagon's second designation under 41 U.S.C. § 4713 (FASCSA), which went straight to the D.C. Circuit and remains in effect — so Department of War contractors under FAR 52.204-30 obligations should still treat Claude as a restricted vendor (§4).
The 30-second answer: can federal agencies use Claude now?
If you were holding off on Claude for government-adjacent work because of the ban, this is the "Anthropic government ban lifted 2026" answer that had been missing from search: a court struck the ban down — the government did not lift it voluntarily.
Why Anthropic was blacklisted — and the retaliation finding
The blacklist began in late February 2026, when Hegseth declared Anthropic a supply-chain risk and President Trump directed all federal agencies to "immediately cease" use of Anthropic technology within a six-month phase-out. The stated trigger: Anthropic refused to let Claude be used for fully autonomous lethal weapons or domestic mass surveillance — the company's "red lines" — and Hegseth accused the company of "arrogance and betrayal." It was the first time a U.S. company was publicly designated a supply-chain risk under the procurement statute meant to protect military systems from foreign sabotage.
Judge Lin found the government acted "based on a desire to make a public example" out of Anthropic, not on "any articulable basis" to believe the company would sabotage its models — holding the designation violated the First Amendment (unlawful retaliation), denied Anthropic Fifth Amendment due process, and was arbitrary and capricious under the Administrative Procedure Act. As the order put it: "The empty invocation of national security is not a blank check to punish and retaliate against government critics." Anthropic said the blacklist could cost it "billions of dollars in lost business and reputational harm."
What the ruling actually rescinds
- Hegseth's February 27 supply-chain-risk determination — vacated.
- The all-agency Claude ban — the Trump directive ordering federal agencies to stop using Anthropic — vacated.
- The contractor ban — Hegseth's directive barring military contractors and suppliers from doing business with Anthropic — vacated.
- Nine agencies' sanctions — including the Pentagon, Treasury, State, and DHS — removed.
What the ruling does not rescind: the Pentagon designated Anthropic under two separate statutes, and only the 10 U.S.C. § 3252 designation was before Judge Lin. The parallel designation under 41 U.S.C. § 4713, the Federal Acquisition Supply Chain Security Act (FASCSA) provision that reaches the whole federal procurement system, was challenged by petition for review filed directly in the U.S. Court of Appeals for the D.C. Circuit — Anthropic PBC v. U.S. Department of War, No. 26-1049 — where the court denied Anthropic's emergency stay in April 2026 and heard argument on May 19, 2026. That designation remains in effect, and the Aug 27 judgment does not reach it.
Anthropic's statement: "We welcome the court's ruling that this supply chain risk designation was unlawful. We remain focused on working productively with the government."
What's still open (read this before you re-engage)
Four limits keep this from being a clean "ban fully lifted" story, and agencies should write them into their vendor risk reviews:
- A second Pentagon designation is still in force. The 41 U.S.C. § 4713 (FASCSA) designation was not before Judge Lin and remains operative while the D.C. Circuit decides No. 26-1049 (argued May 19, 2026; emergency stay denied April 8, 2026; no merits ruling as of Sept 11, 2026). Defense contractors whose contracts carry FAR 52.204-30 or DFARS 252.239-7018 obligations must keep monitoring SAM.gov and refraining from covered Anthropic use. On Sept 3, 2026 the Under Secretary of War reaffirmed publicly that Anthropic is "still a designated Supply Chain Risk" for the Defense Industrial Base.
- No appeal of the Aug 27 judgment had been docketed. As of the docket's last update (Sept 3, 2026) the district court record shows no notice of appeal. The government's earlier appeal of the March injunction (9th Cir. No. 26-2011) is held in abeyance: the court directed the parties to seek appropriate relief within 21 days after the D.C. Circuit resolves No. 26-1049. The window to appeal the final judgment on the § 3252 designation stays open, so the vacatur is not yet final on appeal.
- The ruling does not require the Pentagon to resume working with Anthropic — it remains free to pick other vendors, and it told its workforce on Aug 29 that removal of Anthropic products from DoD systems would be complete by the end of September 2026.
- The administration is sending mixed signals. Commerce Secretary Lutnick said on Sept 2 that the administration trusts Anthropic ("they've done what we asked... back on the right side"), while the Pentagon reaffirmed the designation on Sept 3. A political thaw has not changed the surviving statutory restriction.
For an agency's practical posture: for civilian procurement the Aug 27 vacatur removes the blacklist as a legal barrier, but nothing has changed for Department of War covered procurements, and the D.C. Circuit ruling plus a possible appeal are live risk flags worth monitoring before you commit a government-adjacent pipeline to Claude.
What this means for agencies evaluating Claude vs OpenAI
The ruling is a vendor-availability datapoint, not a security certification. "Is Anthropic safe for government work?" — the court found no articulable basis to believe Anthropic would sabotage its models, which removes the blacklist rationale; it does not change how you'd evaluate either vendor's FedRAMP posture, data retention, or contracting terms. Agencies that paused or switched vendors during the ban can now re-engage Claude, but the D.C. case and any appeal remain open risk flags.
If you're building an agency stack and weighing vendors, see our OpenAI-vs-Anthropic business comparison for the market-share and capability picture beyond the legal story — and keep your stack portable enough that either vendor can be swapped if a future ruling moves the other way.
Frequently asked questions
Is Anthropic banned by the US government?
No — a federal court ruled the ban illegal and vacated the § 3252 designation on Aug 27, 2026, and permanently enjoined its enforcement. But a separate designation under 41 U.S.C. § 4713 (FASCSA), which was not before that court, remains in effect in the D.C. Circuit — and the Pentagon said on Sept 3, 2026 that Anthropic is still a designated supply chain risk for the Defense Industrial Base.
Can federal agencies use Claude?
Civilian federal agencies can — the Aug 27, 2026 ruling vacated the Pentagon's § 3252 ban and the directives barring agencies from using Claude, and ordered the implementing guidance rescinded. Department of War contractors cannot yet: the separate FASCSA designation under 41 U.S.C. § 4713 still bars Claude from covered DoW procurements, so contractors under FAR 52.204-30 obligations should keep refraining.
Was the Anthropic government ban lifted in 2026?
Yes — U.S. District Judge Rita Lin lifted the 2026 government ban on Anthropic on Aug 27, ruling the Pentagon's supply-chain-risk blacklist was unlawful retaliation and ordering the designation and agency directives rescinded. The separate 41 U.S.C. § 4713 (FASCSA) designation was not part of that ruling and remains in effect.
Is Anthropic safe for government work?
The court found the blacklist was "not based on any articulable basis" to believe Anthropic would sabotage its models — though a separate D.C. Circuit case over a second designation is still pending.
Can I use Claude for federal agencies now?
Civilian agencies can procure and use Claude again now that the Aug 27 ruling vacated the § 3252 designation, but the surviving 41 U.S.C. § 4713 (FASCSA) designation still governs Department of War covered procurements, and the D.C. Circuit has not yet ruled on it.
Weighing Claude vs OpenAI for a government-adjacent stack? Read the full market-share and capability comparison before you pick a vendor.
OpenAI vs Anthropic for Business 2026 →Or check the AI vendor-risk tracker for the latest Anthropic risk flags.
Sources
- Reuters (Aug 28, 2026) — "US judge blocks Pentagon's Anthropic blacklisting": reuters.com
- CNBC (Aug 28, 2026) — "Judge blocks Pentagon blacklist of Anthropic as supply chain risk": cnbc.com
- The Guardian (Aug 28, 2026) — "Pentagon's blacklisting of Anthropic was unlawful, US judge rules": theguardian.com
- AP (Aug 28, 2026) — "Judge says Pentagon's measures against Anthropic were 'illegal and baseless'": apnews.com
- TechCrunch (Aug 28, 2026) — "Anthropic gets its first court win over the Pentagon's supply-chain-risk label": techcrunch.com
- The Verge (Aug 28, 2026) — "Anthropic was illegally blacklisted by the Trump administration, court rules": theverge.com
- WIRED — "A Judge Has Blocked the Pentagon's Attempt to Blacklist Anthropic": wired.com
- NBC News (Aug 28, 2026) — "Federal judge blocks 'illegal' Pentagon blacklisting of Anthropic": nbcnews.com
- CNBC (Apr 8, 2026) — "Anthropic loses appeals court bid to temporarily block Pentagon blacklisting": cnbc.com
- Court records (primary source) — Anthropic PBC v. U.S. Department of War, No. 3:26-cv-01996-RFL (N.D. Cal.): Opinion, Dkt. 250 (59 pp.); Order of Final Relief, Dkt. 251; Judgment, Dkt. 252 — all filed Aug 27, 2026: courtlistener.com
- WIRED (Apr 8, 2026) — "Anthropic Supply-Chain Risk Label Should Stay In Place, Appeals Court Says" (D.C. Circuit denies stay of the separate 41 U.S.C. § 4713 designation): wired.com
- National Law Review (Sept 2026) — "National Security Is 'Not a Blank Check' — An AI Model Retaliation Ruling and the Designation It Leaves Standing": natlawreview.com
- Axios (Sept 3, 2026) — "Top Pentagon official reaffirms Anthropic blacklist despite Lutnick comments": axios.com
- Forbes (Sept 2, 2026) — "Anthropic Has Repaired Its Relationship With Trump, Lutnick Says": forbes.com
- Reuters (Sept 3, 2026) — "Anthropic still flagged as risk to defense industrial base, US official says": reuters.com
- TechTimes (Sept 4, 2026) — "Pentagon's Anthropic Ban Holds as Lutnick Declares Trust: Contractors Must Still Comply": techtimes.com
Accuracy note: This is a report on an Aug 27, 2026 summary-judgment ruling (Judge Rita F. Lin, N.D. Cal.) as covered by Reuters, CNBC, the Guardian, AP, TechCrunch, The Verge, WIRED, and NBC News between Aug 28-29, 2026. Re-checked and updated Sept 11, 2026 against the primary court record (docket and the Aug 27 opinion/order/judgment), the D.C. Circuit proceeding on the separate 41 U.S.C. § 4713 designation, and reporting from Reuters, Axios, Forbes, WIRED, the National Law Review and TechTimes. Two things changed the framing in that re-check: the vacatur covers only the § 3252 designation, while the § 4713 (FASCSA) designation remains in effect and the Pentagon publicly reaffirmed it on Sept 3, 2026; and no appeal of the Aug 27 judgment had been docketed as of the docket's Sept 3, 2026 update. The agency risk analysis is ours; it is not legal advice — consult counsel before making vendor or contract changes.