Anthropic Enterprise Frontier Safeguards Launched

Anthropic Enterprise Frontier Safeguards pairs zero data retention with automated detection of remote misuse and keeps logs in customer-controlled cloud, according to the Sep 1 announcement.

It will roll out in phases this fall across Claude Code, Claude Enterprise, Claude Platform, Amazon Bedrock, Claude Platform on AWS, Google Agent Platform and Microsoft Foundry, with ZDR on Fable 5 and Fable 5.1 as interim cover.

How the attack actually works

The hardest misuse doesn't happen in one prompt. It's spread across many sessions and accounts, so single-turn checks that discard data instantly miss the pattern.

Anthropic points to Mythos-class models like Fable 5.1, where agents can autonomously pursue destructive actions, and to cases of stolen enterprise credentials that only stand out when traffic is correlated.

Think of it like card fraud detection that ignores one swipe but flags a ring of small charges across stolen cards over weeks. That's why Anthropic moved to 30-day retention with Fable 5 before building EFS.

What it changes, and what it doesn't

Regulated enterprises wanted monitoring but couldn't name Anthropic as a trusted data vendor or let outside reviewers see privileged legal, non-public or safety data.

EFS stores activity in the customer's own S3, Azure Blob or Google Cloud Storage under customer-managed keys and sends automated flags for cyber or biological misuse and credential theft directly to the customer. No human review by Anthropic is required, and there's no change to model behavior, pricing or rate limits.

All three controls are opt-in. Anthropic charges nothing extra, and the cloud provider bills for storage and egress. Support for third-party offerings is still pending, and the phased fall rollout leaves timing for broad access unclear.

Built with more than 100 customers including ARC banks such as Wells Fargo plus Comcast, Mastercard and Salesforce, EFS trades policy promises for architectural custody and lets security teams use frontier models where data residency previously blocked them.