# Anthropic's Enterprise Frontier Safeguards: Misuse Monitoring Without the Data Hoard

Enterprise Frontier Safeguards pairs zero data retention with misuse detection: monitoring data lives in the customer's own cloud under their KMS keys, with no Anthropic human review. Eligible customers get ZDR on Fable 5/5.1 until rollout.

By Neomanex. Updated 2026-10-07.

Anthropic is answering the dilemma its own covered models created: the 30-day data retention introduced with Claude Fable 5 buys cross-session misuse detection but spooks regulated enterprises. **Enterprise Frontier Safeguards (EFS)** is the compromise — zero data retention combined with state-of-the-art misuse detection, where the monitoring data never lives on Anthropic's infrastructure (Anthropic, 2026). It changes how enterprises deploy **Claude Fable 5** and **Claude Code** — but not how we rate them: no directory verdicts change, because this is an enterprise feature, not a model or tool rating event.

## What happened

EFS was announced Sep 1 after design work with more than 100 customers, including ARC — whose members include the CISOs of the largest US banks — plus Comcast, KPMG, Mastercard, Salesforce, Visa, Snowflake, Stripe, FIS, Cognition, and Factory, along with cloud partners AWS, Google Cloud, and Microsoft Azure (Anthropic, 2026). The mechanics:

- **Customer-owned storage.** Activity and monitoring data is stored in the customer's own cloud account — Amazon S3, Azure Blob Storage, or Google Cloud Storage — under customer-managed KMS encryption keys, access policies, and audit logging.
- **No Anthropic human review.** Automated systems analyze a rolling window of traffic for signals of serious misuse — attempts to develop offensive cyber or biological capabilities, or signs of stolen or leaked credentials. Flags go directly to the customer's team; no Anthropic employee sees the data.
- **Free and opt-in.** EFS does not change model behavior, API pricing, or rate limits; customers pay only their cloud provider for storage, reads, writes, and egress.
- **Surfaces.** Supported on Claude Code, Claude Enterprise, the Claude Platform, Amazon Bedrock, Claude Platform on AWS, Google's Agent Platform, and Microsoft Foundry.
- **Timeline.** Phased rollout starting later this fall. Eligible customers receive ZDR on Fable 5 and 5.1 until EFS is ready.

Anthropic's framing is direct: the 30-day retention policy was never about training on enterprise data — "Anthropic has never trained on enterprise data without explicit permission, and never will" — but effective misuse detection requires correlating activity across time and accounts, which instantaneous discard cannot do (Anthropic, 2026).

## Why it matters

EFS is Anthropic's counter-position to OpenAI's "Private Safety Processing" preview we covered in August: both labs are now selling the same proposition — frontier-model safety monitoring that never exposes customer content to the vendor's staff. Anthropic's version is the more concrete one: customer-held storage under customer keys, with flags routed to the customer's own security team. For banks, law firms, and healthcare organizations that wanted Mythos-class capability but couldn't accept vendor data retention, this is the unlock — and it explains why Anthropic built it with the customers who had the hardest requirements.

## What changes for you

- **Enterprises running Claude Code or covered models on Amazon Bedrock, Google's Agent Platform, or Microsoft Foundry:** request EFS access — the interim ZDR on Fable 5/5.1 applies to eligible customers before the fall rollout.
- **Security teams:** EFS gives you the monitoring signal without giving Anthropic the data — but the flags are yours to triage, so plan staffing for that review load.
- **No change for individual or API users** who never had the 30-day retention exposure.

Canonical: https://neomanex.com/news/anthropic-enterprise-frontier-safeguards