{"slug": "anthropic-quietly-rewrites-its-enterprise-data-retention-rules", "title": "Anthropic quietly rewrites its enterprise data retention rules", "summary": "Anthropic has quietly changed its enterprise data retention policy for Claude API users, tripling the default retention period to 90 days, a shift that compliance teams for regulated industries such as healthcare, finance, and legal must address. The opt-out requires emailing Anthropic with an organization ID and written request, as no self-serve toggle or API endpoint exists, contrasting with OpenAI's enterprise tier which allows zero-day retention via dashboard. This policy change is becoming a deciding factor for procurement teams evaluating AI vendors.", "body_md": "# Anthropic quietly rewrites its enterprise data retention rules\n\nFor teams running regulated workloads — healthcare, finance, legal — this isn't administrative noise. It's a compliance event. SOC 2 auditors will ask why retention tripled without a corresponding risk assessment. GDPR teams will need to update their data processing addendums. And if you're feeding proprietary codebases or PII into [Claude](/en/tags/claude/) via the API, that data now lingers three times longer in a jurisdiction you may not control.\n\nThe kicker: the opt-out mechanism isn't in the console. You have to email [[email protected]](/cdn-cgi/l/email-protection) with your organization ID and a written request. No self-serve toggle. No API endpoint. That alone tells you where this sits on their priority ladder.\n\nI've been running a side-by-side comparison between Anthropic's API and OpenAI's enterprise tier for a client migration. OpenAI lets you set retention to zero days via the dashboard today. Anthropic's new default makes that look generous by comparison. The model quality gap has narrowed enough that policy details like this are becoming the deciding factor for procurement teams.\n\nWhat's frustrating is the lack of granularity. You can't say \"retain coding prompts for 7 days but keep legal contract reviews for 90.\" It's a blunt instrument. For a practical tutorial on how to strip metadata before sending requests, I've been using a lightweight proxy layer that scrubs timestamps, user IDs, and file hashes — reduces the blast radius if retention policies shift again.\n\n``` python\n# Minimal scrubbing proxy example\nimport re\nfrom typing import Dict, Any\n\ndef sanitize_payload(payload: Dict[str, Any]) -> Dict[str, Any]:\n    \"\"\"Remove identifiable metadata before forwarding to Anthropic API.\"\"\"\n    cleaned = payload.copy()\n    # Strip user/session identifiers\n    cleaned.pop(\"user_id\", None)\n    cleaned.pop(\"session_id\", None)\n    cleaned.pop(\"metadata\", None)\n    # Redact potential PII in message content\n    if \"messages\" in cleaned:\n        for msg in cleaned[\"messages\"]:\n            if isinstance(msg.get(\"content\"), str):\n                msg[\"content\"] = re.sub(r'\\b[A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\\.[A-Z|a-z]{2,}\\b', '[EMAIL]', msg[\"content\"])\n                msg[\"content\"] = re.sub(r'\\b\\d{3}-\\d{2}-\\d{4}\\b', '[SSN]', msg[\"content\"])\n    return cleaned\n```\n\nThis isn't about Anthropic being malicious. It's about enterprise AI infrastructure maturing past the \"trust us\" phase. If you're building a real-world deployment, treat retention policy as a configuration parameter you control, not a vendor default you accept.\n\n[Linus Torvalds says AI 'enormously helped' a debug session from 1h ago](/en/news/7197/)\n\n[The consciousness debate feels like a distraction tactic 3h ago](/en/news/7184/)\n\n[Stripe buying OpenRouter puts payments under every model call 17h ago](/en/news/7128/)\n\n[Why I still lose sleep over alignment even though I build with 19h ago](/en/news/7118/)\n\n[Team messaging that actually remembers why you built that feature 20h ago](/en/news/7106/)\n\n[Slack Code drops native vibe-coding channels with Claude and 21h ago](/en/news/7100/)\n\n[Next Linus Torvalds says AI 'enormously helped' a debug session from →](/en/news/7197/)", "url": "https://wpnews.pro/news/anthropic-quietly-rewrites-its-enterprise-data-retention-rules", "canonical_source": "https://promptcube3.com/en/news/7199/", "published_at": "2026-08-21 19:11:48+00:00", "updated_at": "2026-08-21 19:42:47.836851+00:00", "lang": "en", "topics": ["ai-policy", "ai-products", "ai-infrastructure"], "entities": ["Anthropic", "Claude", "OpenAI"], "alternates": {"html": "https://wpnews.pro/news/anthropic-quietly-rewrites-its-enterprise-data-retention-rules", "markdown": "https://wpnews.pro/news/anthropic-quietly-rewrites-its-enterprise-data-retention-rules.md", "text": "https://wpnews.pro/news/anthropic-quietly-rewrites-its-enterprise-data-retention-rules.txt", "jsonld": "https://wpnews.pro/news/anthropic-quietly-rewrites-its-enterprise-data-retention-rules.jsonld"}}