Indexable issue pageLast reviewed 2026-05-21High priority

Anthropic data retention review for SaaS customer commitments

Anthropic retention answers should separate standard commercial use, Claude Enterprise retention controls, and approved zero data retention agreements. The official sources are not interchangeable. A SaaS team should cite the source that matches the product and agreement actually used.

Vendor

Anthropic

Issue

data retention

Sources reviewed

3 official sources

Product and plan applicability

Scope
Claude Enterprise
Applies to
Managed workspaces with enterprise retention controls.
Watch for
Workspace retention settings, transcript behavior, file storage, and admin control evidence.
Scope
Enterprise API with zero data retention
Applies to
Approved API organizations and Claude Code usage through the organization API key.
Watch for
Agreement status, product coverage, and exceptions listed by Anthropic.
Scope
Standard API or unmanaged use
Applies to
Commercial API use without a ZDR agreement or employee-owned accounts.
Watch for
Use the standard Anthropic source for that product path and avoid zero retention language unless it is actually approved.

What official sources say

Enterprise retention controls are a specific source

Anthropic publishes a Privacy Center article for Claude Enterprise custom retention controls. Use it only where that workspace and control set applies.

Zero data retention is agreement-bound

Anthropic also publishes a source explaining zero data retention agreement applicability. Keep any ZDR statement tied to the approved agreement and supported product scope.

Why a SaaS team should review it

  • Retention promises are often written as a single sentence, but Anthropic product paths differ.
  • ZDR language can create customer risk if sales or product teams use it before an agreement is approved.
  • Internal logs, prompt archives, and support tickets may store Claude content outside Anthropic.

Potential customer commitment drift

  • A customer answer says Claude data is not retained, but the product uses a standard organization without a ZDR agreement.
  • The team changes from API use to Claude Enterprise workspace use and does not update retention evidence.
  • Support teams copy prompts into tickets that have longer retention than the AI provider path.

Review checklist

  • Confirm the Anthropic product, workspace, and organization used by the workflow.
  • Check whether a zero data retention agreement exists and which products it covers.
  • Record Claude Enterprise retention settings if workspace data is involved.
  • Inventory your own prompt and output logs outside Anthropic.
  • Attach source links and review date to the customer commitment record.

Source links

Sources were reviewed on 2026-05-21. This page supports a review packet or monitoring evidence packet; it is not legal advice.

Related pages

Scan Anthropic against your own commitments.

Use this page as a starting point, then compare the vendor source to the exact promise in your Trust Center, DPA, security questionnaire, or sales answer. The $199 packet turns that review into cited evidence your team can route internally.