Claude Privacy, Security, And Data Controls
Claude privacy depends on plan, surface, feature, and agreement. Consumer chats, Team workspaces, Enterprise controls, API features, incognito chats, and optional data-sharing programs have different retention and training rules.
The Enterprise retention article lists a 30-day minimum custom retention period.
Source: Configure custom data retention controls Citable fact 30 days defaultThe incognito chat support page says incognito chats are retained for 30 days by default or longer under organizational retention settings.
Source: Use incognito chatsThe Plan Matters
Privacy answers change by plan. The Team data ownership article says an organization’s Primary Owner manages the Work account and associated data, including possible exports with conversations, files, and usage patterns. It also says the organization’s agreement governs the Work account.
Enterprise adds administration and compliance controls. The Enterprise article lists audit logs, SCIM, custom data retention, Compliance API, Analytics API, and customer-managed encryption keys. Those are not cosmetic features; they are the reason to choose Enterprise for regulated or high-control environments.
Retention Controls
The Enterprise retention support article says custom retention controls are available to Enterprise customers with owner roles, with a minimum 30-day retention period. It also says deletion occurs at midnight UTC on the scheduled day and that data past retention is permanently deleted.
Incognito chats are different from normal chats but not zero-retention. The incognito support article says they are not saved to chat history or memory, are not used for training, and are retained for 30 days by default or longer under an organization’s custom retention setting.
Model Training Defaults
The Development Partner Program article states that, by default, Anthropic does not train models on data generated when using commercial products such as Claude Enterprise and the Claude API. It describes the program as optional and transparent for organizations that choose to share Claude Code input and output tokens from the first-party API.
Do not generalize that sentence to every consumer setting, every feature, or every partner route. Always check the Privacy Center, product terms, and feature-specific support article for the exact surface you use.
API Feature Caveats
The API docs mark Zero Data Retention eligibility at the feature level. The Messages API and prompt caching pages describe ZDR eligibility when an organization has an applicable arrangement. The Files API and MCP connector pages explicitly state those features are not ZDR eligible and retain data under their standard policy.
That means security review should happen at architecture time, not after integration. A system that is ZDR-eligible for plain Messages calls may lose that property when it adds files, MCP, batches, or other features.
Trust Center And Compliance Evidence
The Anthropic Trust Center is the primary public hub for compliance artifacts, control documentation, and security resources. For procurement, treat blog posts as context and Trust Center artifacts plus signed agreements as the evidence layer.
A good rollout checklist includes: plan type, data classification, connector permissions, retention period, export rights, admin roles, SSO/SCIM, audit logs, model-training setting, ZDR eligibility, incident process, and user training.
By default, Anthropic doesn’t train our models on the data you generate.
Cite This Page
Claude Central. "Claude Privacy, Security, And Data Controls." Last checked July 6, 2026. https://claudecentral.com/privacy-security
FAQ
Are incognito chats saved?
They are not saved to chat history or memory, but the support page says they are retained for 30 days by default or longer under applicable organizational retention settings.
Does Anthropic train on commercial data by default?
The Development Partner Program support article says Anthropic does not train by default on data generated using commercial products such as Claude Enterprise and the Claude API.
Is every Claude API feature ZDR eligible?
No. Feature docs mark eligibility separately; Files API and MCP connector are examples documented as not ZDR eligible.