Anthropic is revising data-retention rules for some Claude enterprise customers.
Why it matters: Data-retention settings are a key selling point for enterprise AI buyers worried about confidentiality, privilege and compliance. Any change could affect adoption in regulated industries and how Anthropic competes with rivals such as OpenAI.
- Reuters reported Aug. 20, 2026 that Anthropic planned to change its enterprise data-retention policy.
- CNBC reported Sept. 1, 2026 that Anthropic is revising its Enterprise Frontier Safeguards.
- Anthropic's roadmap updates show it removed an earlier May 5, 2026 goal after saying it would not set a new one on that front.
- Anthropic's commercial retention page says standard API data is deleted within 30 days unless a zero-data-retention arrangement or another exception applies.
Anthropic is moving to revise data-retention rules for some enterprise Claude customers, according to reporting from Reuters and CNBC. Reuters reported on Aug. 20, 2026 that the company planned to change its enterprise data-retention policy, and CNBC reported on Sept. 1, 2026 that Anthropic is revising its Enterprise Frontier Safeguards.
The company had already telegraphed some policy review in public roadmap updates. Anthropic said it would examine updating data-retention policies, then removed an earlier goal tied to May 5, 2026, according to its roadmap updates.
The impact varies by product. Anthropic's covered-models policy says some organizations using zero data retention in Claude Console, Claude Code with ZDR in Claude Enterprise, or certain partner platforms may be moved to 30-day retention so Anthropic can look for patterns of misuse across multiple requests. The policy also says some higher-capability models are not ZDR-eligible and may require 30-day retention unless expressly authorized.
For Claude API customers, Anthropic's platform docs say the company offers ZDR and HIPAA-ready arrangements. Its commercial retention page says standard API data is deleted within 30 days unless a ZDR arrangement, legal obligation, policy-enforcement retention or another exception applies.
Anthropic has said, "We offer many customers zero data retention policies so they can be confident that sensitive information is safe." It also said, "Doing this for all customers, however, would greatly hamper our efforts to detect misuse attempts and continually learn from real-world usage of our systems."
By the numbers
- Aug. 20, 2026 - Reuters reported Anthropic planned to change its enterprise data-retention policy.
- Sept. 1, 2026 - CNBC reported Anthropic is revising its Enterprise Frontier Safeguards.
- 30 days - Anthropic says standard API data is deleted after this period unless an exception applies.
Yes, but: Anthropic has not directly confirmed the exact revised wording in the materials provided, so the precise scope of the policy change remains unclear.