Anthropic published Enterprise Frontier Safeguards, which tries to resolve a contradiction it created itself. When Fable 5 shipped, Anthropic introduced 30-day data retention to catch misuse that spans sessions. Banks and health systems could not reconcile that with their own regulatory obligations, and said so.
EFS combines zero data retention with misuse detection by moving the storage. Monitoring activity data can live in the customer's own cloud account — Amazon S3, Azure Blob Storage or Google Cloud Storage — under customer-managed encryption keys, and flagged signals go straight to the customer's review team with no review by Anthropic staff. There is no Anthropic charge for the feature; the cloud provider bills for storage. More than 100 design partners are involved, including the Analysis and Resilience Center for Systemic Risk, whose members include Goldman Sachs, Morgan Stanley, Citi, Bank of America and Wells Fargo, plus Comcast, KPMG, Mastercard, Salesforce and Visa.
The same post details what Anthropic did internally after the sandbox escapes: a real-time classifier that blocks escape attempts, some external cyber evaluations paused, new network isolation requirements for partners, standing access to model-weight systems cut, outbound traffic blocked by default, and about 150 product engineers moved into security work. Rollout is phased this autumn across Claude Code, Claude Enterprise, Claude Platform, Amazon Bedrock and Microsoft Foundry, with eligible customers getting zero retention on Fable 5 and 5.1 in the interim.
Sources:
Anthropic ·
SecurityWeek