Enterprise AI buyers have spent months stuck between two non-negotiables. Regulated teams want zero data retention — no prompts, no agent transcripts, nothing sitting on a vendor’s servers. Security teams want misuse detection that requires holding data long enough to spot coordinated attacks. Anthropic’s answer, announced this week, is Enterprise Frontier Safeguards, or EFS.
The architecture is actually clever. Monitoring data lives in infrastructure the customer controls — their own S3, Azure Blob, or Google Cloud Storage bucket, under their encryption keys and audit logging. Anthropic’s detection systems still scan a rolling window of traffic for patterns like offensive cyber capability development or stolen credentials. But when something flags, the alert goes straight to the customer. No Anthropic human ever reviews it unless you opt in. That’s the part regulated industries needed to hear. Anthropic built this with more than 100 customers, including CISOs from Goldman Sachs, Morgan Stanley, Citi, and Bank of America through the Analysis and Resilience Center for Systemic Risk, plus Comcast, KPMG, Mastercard, Salesforce, and Visa.
Don’t rush to your procurement team yet. EFS isn’t shipping broadly until later this fall, and access is request-based. Until then, eligible customers run Claude Fable 5 and 5.1 under zero data retention. The rollout arrives alongside Fable 5.1, which cut cache read costs 75% to $0.25 per million tokens — roughly 25% cheaper on typical workloads, up to 45% on heavily agentic ones. Anthropic also claims about 60% fewer cybersecurity safeguard interventions per Claude Code session than Fable 5.
The honest question is whether customer-side storage creates new friction. Enterprises told Anthropic they didn’t want another data vendor to onboard, and EFS avoids that by using infrastructure they already manage. But someone still has to configure buckets, keys, and access policies correctly. A misconfigured S3 bucket defeats the entire privacy guarantee. Anthropic charges nothing for EFS itself — your cloud provider bills storage and egress — but the operational burden lands on your team, not theirs. That trade-off may be exactly what regulated buyers asked for. Whether it scales beyond the Fortune 100 design partners is the real test this fall.
