API and data retention changed Anthropic, Oct 5, 2026
Anthropic · Oct 5, 2026 · 9 added, 9 removed · seen by the weekly check
- Added: Several retention models sit outside the ZDR and HIPAA arrangements described on this page. Data accessible through the Compliance API follows its own retention model. The Activity Feed retains data for 6 years. Chat, file, and project content from claude.ai follows your organization's retention policy set in claude.ai > Organization settings > Data and privacy , unless a user deletes it sooner. Local session transcripts (from sessions on users' machines, in apps such as Cowork and Claude Code) are stored for 6 years by default, or for your organization's custom conversation retention period when a finite one is set (the same claude.ai setting). Remote session transcripts (Cowork in the cloud) are retained for 6 years, unless a user deletes the session sooner. The Compliance API does not capture local sessions for which ZDR is in effect. For organizations with HIPAA readiness enabled, it captures Cowork and Claude Code local sessions only and stores their transcripts for 30 days.
- Removed: Several retention models sit outside the ZDR and HIPAA arrangements described on this page. Data accessible through the Compliance API follows its own retention model. The Activity Feed retains data for 6 years. Chat, file, and project content from claude.ai follows your organization's retention policy set in claude.ai > Organization settings > Data and privacy , unless a user deletes it sooner. Local session transcripts (from sessions on users' machines, in apps such as Cowork and Claude Code) are stored for 6 years by default, or for your organization's custom conversation retention period when a finite one is set (the same claude.ai setting). Remote session transcripts (Cowork in the cloud) are retained for 6 years, unless a user deletes the session sooner. The Compliance API does not capture local sessions for which ZDR is in effect, or any local sessions from organizations with HIPAA readiness enabled.
- Added: Claude Code with API keys: ZDR applies when Claude Code is used with API keys from a Commercial organization (an organization under Anthropic's Commercial Terms of Service, as distinct from a consumer Claude account). If metrics logging is enabled in Claude Code, productivity data such as usage statistics is exempted from ZDR and may be retained. Claude Code on Claude Enterprise is not covered by this arrangement and has a separate ZDR offering; see What ZDR does not cover .
- Removed: Claude Code: ZDR applies when Claude Code is used with API keys from a Commercial organization (an organization under Anthropic's Commercial Terms of Service, as distinct from a consumer Claude account) or through Claude Enterprise with ZDR enabled. If metrics logging is enabled in Claude Code, productivity data such as usage statistics is exempted from ZDR and may be retained. See the Claude Code ZDR documentation for full details.
- Added: Claude Teams and Claude Enterprise product interfaces: These interfaces are not ZDR-eligible. The one exception is Claude Code on Claude Enterprise, which has its own ZDR offering, separate from the ZDR arrangement described on this page. That offering is available only to qualified accounts on Claude Enterprise and requires separate enablement by Anthropic. See the Claude Code ZDR documentation , which applies to Claude Enterprise organizations only.
- Removed: Claude Teams and Claude Enterprise product interfaces: These interfaces are not ZDR-eligible. The exception is Claude Code used through Claude Enterprise with ZDR enabled; see What ZDR covers .
- Added: In Claude Console > Settings > Data retention , organization admins with the HIPAA management permission see a HIPAA compliance card. If your organization is eligible but you don't see the option to enable, ask an organization admin to complete these steps.
- Removed: In Claude Console > Settings > Privacy , organization admins with the HIPAA management permission see a HIPAA compliance card. If your organization is eligible but you don't see the option to enable, ask an organization admin to complete these steps.
- Added: Eligible organizations can enable HIPAA readiness directly in Claude Console > Settings > Data retention by reviewing and executing Anthropic's standard BAA; see Getting started with HIPAA readiness . If your organization requires a negotiated BAA, or self-serve enablement isn't available for your organization, contact the Anthropic sales team .
- Removed: Eligible organizations can enable HIPAA readiness directly in Claude Console > Settings > Privacy by reviewing and executing Anthropic's standard BAA; see Getting started with HIPAA readiness . If your organization requires a negotiated BAA, or self-serve enablement isn't available for your organization, contact the Anthropic sales team .
- Added: Claude Code is eligible for ZDR under two separate offerings:
- Added: API keys: Claude Code used with pay-as-you-go API keys from a Commercial organization is covered when that organization has a ZDR arrangement for the Claude API, which this page describes.
- Added: Claude Enterprise: Claude Code used through Claude Enterprise is covered by a separate offering, ZDR for Claude Code on Claude Enterprise, when Anthropic has enabled it for the organization.
- Removed: Claude Code is eligible for ZDR through two paths:
- Removed: API keys: Claude Code used with pay-as-you-go API keys from a Commercial organization
- Removed: Claude Enterprise: Claude Code used through Claude Enterprise with ZDR enabled for the organization
- Added: For full details on ZDR for Claude Code on Claude Enterprise, including disabled features and how to request enablement, see the Claude Code ZDR documentation . That documentation applies to Claude Enterprise organizations only and does not describe the ZDR arrangement for the Claude API.
- Removed: For full details on ZDR for Claude Code on Claude Enterprise, including disabled features and how to request enablement, see the Claude Code ZDR documentation .
About this change
- Page
- platform.claude.com/docs/en/manage-claude/api-and-data-retention
- Kind
- Documentation
- Text hash
- ae0c7912a81e to c7cca3856702
- Dated by
- the weekly check that first read the new text