Claude Enterprise — privacy & data policy

Provider: Anthropic. PromptPrivacy score: 87/100. Last verified November 01, 2026.

What happens to your data?

Prompts, responses, and uploaded content are processed to deliver enterprise services and are not used to train models by default. Organizations retain governance over their data through custom retention policies and customer-managed encryption keys. IT and security teams can monitor activity and retrieve records using audit logs and compliance APIs.

Does it train on your data?

Does not train on your content. Prompts, data, and results are not used to train Anthropic's models by default.

Can you opt out?

Not applicable. Prompts, data, and outputs are not used for model training by default.

Data retention

Anthropic does not specify a fixed default retention timeframe in the text, but offers custom data retention controls allowing enterprise customers to define their own data lifecycles.

Encryption & security

Claude Enterprise supports customer-managed encryption keys (CMEK) and complies with SOC 2, ISO 27001, GDPR, and CCPA standards, in addition to providing network-level access controls.

Is it safe for work?

Yes. Claude Enterprise includes comprehensive corporate security safeguards, including no default model training, customer-managed encryption keys, custom retention controls, SOC 2/ISO 27001 compliance, and HIPAA-ready configurations with a BAA.

Source policy: https://www.anthropic.com/enterprise