Enterprise AI buyers have been stuck between two things they both need. Regulated teams need a zero data retention (ZDR) guarantee, so no prompt or agent transcript sits on a vendor’s servers. Security teams need misuse detection, which historically required the vendor to hold that same data long enough to correlate it.
This week, Anthropic announced Enterprise Frontier Safeguards：https://www.anthropic.com/news/enterprise-frontier-safeguards (EFS), an architecture that tries to give both. EFS stores monitoring data in cloud infrastructure the customer controls, not Anthropic’s. Detection stays with Anthropic. Custody, keys, and human review stay with the customer.
Is it deployable today? Not yet. EFS rolls out in phases with the goal of broad availability later this fall, and access is request-based：https://claude.com/form/enterprise-frontier-safeguards. Until it ships, eligible customers can run Claude Fable 5 and Fable 5.1 under ZDR.
Anthropic’s stated reason for retention is detection quality, not training data. The company introduced 30-day data retention starting with Fable 5, and says plainly that it has never trained on enterprise data without explicit permission.
The argument for holding data is narrow and worth restating. The most sophisticated misuse Anthropic has observed spreads across many tasks, sessions, and accounts, including cases involving stolen or misappropriated enterprise credentials. Running an automated classifier on each interaction and instantly discarding it cannot catch that shape of attack. Correlation needs a window. Anthropic has documented：https://www.anthropic.com/news/disrupting-AI-espionage this pattern in its own espionage disruption work.
Regulated customers understood the security logic and still could not adopt it. So Anthropic moved the window rather than removing it.
Anthropic built EFS with more than 100 customers across financial services, healthcare, manufacturing, telecom, law, retail, and the public sector, together with AWS, Google Cloud, and Microsoft Azure. Contributors included the Analysis and Resilience Center for Systemic Risk, whose membership includes CISOs at Goldman Sachs, Morgan Stanley, Citi, Bank of America, and Wells Fargo, plus teams at Comcast, KPMG, Mastercard, Salesforce, and Visa. Anthropic says the design conversations covered a quarter of the Fortune 100 and every US global systemically important bank.
Three design decisions came out of that process :
EFS is one of three enterprise concessions shipped alongside Claude Fable 5.1 and Mythos 5.1：https://www.anthropic.com/claude-fable-and-mythos-5-1. The other two are pricing and precision. Fable 5.1 cut cache reads by 75% to $0.25 per million tokens, which works out to roughly 25% lower cost on typical workloads and up to about 45% on highly agentic ones. Its cybersecurity safeguards now produce around 60% fewer interventions per Claude Code session than Fable 5’s, partly because Fable 5.1 is permitted to identify software vulnerabilities without developing exploits for them.
Need to partner with us for promoting your GitHub Repo OR Hugging Face Page OR Product Release OR Webinar etc.? Connect with us ：https://forms.gle/wbash1wF6efRj8G58
Michal Sutter is a data science professional with a Master of Science in Data Science from the University of Padova. With a solid foundation in statistical analysis, machine learning, and data engineering, Michal excels at transforming complex datasets into actionable insights.
Scan to open this article