Claude for Work
Anthropic
Safe
Anthropic's commercial terms say it may not train models on customer content, and the privacy center says commercial inputs and outputs are not used for training by default. The customer is the controller and can export conversation history. That is a sound default for ordinary business data. A BAA is not automatic: a Claude Enterprise primary owner has to turn on HIPAA compliance and accept the BAA, and standard Enterprise without that step is not covered.
Last checked 2026-11-10
Data-safety checklist
Trains on your data by default
No
The commercial terms say Anthropic may not train models on customer content. The commercial privacy-center article says that, by default, inputs and outputs from commercial products such as Claude for Work and the API are not used to train models unless you report feedback or otherwise opt in.How to opt out
Steps
Training is off by default. Feedback sent with the thumbs control can be stored for up to 5 years and used for training. An organization can opt in to programs such as the Development Partner Program.Data retention
What they keep
Anthropic's Claude Code data-usage page says commercial Team, Enterprise, and API data for Claude Code is kept 30 days by default, with zero data retention available only to qualified Enterprise accounts. A separate retention number for ordinary Team chat was not on that page, so treat chat retention beyond the contract as Unknown.BAA / HIPAA
Enterprise only
A BAA is available for HIPAA-ready services, including the first-party API and Enterprise, after the primary owner activates HIPAA compliance and accepts the BAA. Standard Enterprise is not covered until that happens. The BAA excludes some features, including Claude Console and named beta features.Certifications
4 listed
- SOC 2 Type I
- SOC 2 Type II
- ISO 27001:2022
- ISO/IEC 42001:2023
Enterprise and admin controls
Controls
On Team and Enterprise the customer controls membership and can access and export user conversation history. Anthropic acts as processor. HIPAA settings, including local Claude Code and Cowork, are switched on by the Enterprise primary owner.Sources
6 pages