Developing Enterprise Frontier Safeguards with our customers

What changed

Source summary

Anthropic is rolling out Enterprise Frontier Safeguards (EFS), letting eligible enterprise customers store Claude usage data in cloud infrastructure they control (AWS, Google Cloud, or Azure) instead of Anthropic's own systems, combined with automated misuse-detection alerts sent directly to the customer's security team with no Anthropic human review. It is opt-in, does not change model behaviour, pricing, or rate limits, and begins a phased rollout starting this northern-hemisphere autumn (roughly Sep-Nov 2026).

Why it matters to your work

Practical interpretation

If your organisation has strict data-residency or compliance requirements around AI tools, this matters: it lets your own security team control where Claude usage data lives and get direct misuse alerts, rather than relying on Anthropic to hold and review that data. It is aimed at large enterprises in regulated sectors (finance, healthcare, government) rather than everyday users, and it is opt-in with a staged rollout, so most SCALA clients will not see anything change for now.

When this could help

Relevant if your organisation uses Claude in a regulated environment and has been blocked by the 30-day data retention requirement introduced with Fable 5. EFS is rolling out in phases starting later in fall 2026.

Enterprise Frontier Safeguards (EFS) stores monitoring data in infrastructure the customer controls (S3, Azure Blob, GCS) under customer encryption keys, while still running automated misuse detection. Flags go to the customer's team — Anthropic employees do not review them. No effect on model behaviour, API pricing, or rate limits. Anthropic does not charge for EFS.

Build it into your routine

SCALA suggested workflow

1. Evaluate EFS eligibility

   If your organisation has been blocked from using Claude by data retention requirements, check EFS eligibility via the form on claude.com. In the interim, eligible customers get zero data retention on Fable 5/5.1.

What to check

• Not yet generally available — rolling out in phases from later in fall 2026. Source ↗
• Customer-owned storage, customer-managed encryption keys, and fully automated review are each opt-in controls — not mandatory. Source ↗