AI vendors and your data

Vendors146Answers427

146 vendors · 427 answers

API and data retention changed Anthropic, Nov 2, 2026

Anthropic · Nov 2, 2026 · 20 added, 16 removed · seen by the weekly check

The pageAll Anthropic terms
  1. Added: Claude consumer products: Claude Free, Pro, Max, and Ultra plans, including when customers on those plans use Claude's web, desktop, or mobile apps or Claude Code.
  2. Removed: Claude consumer products: Claude Free, Pro, and Max plans, including when customers on those plans use Claude's web, desktop, or mobile apps or Claude Code.
  3. Added: Claude in Microsoft Foundry: Claude in Microsoft Foundry (Hosted on Anthropic or Hosted on Azure) is an eligible service for customers with a BAA with Anthropic plus the HIPAA configuration enabled on the Azure subscription. Request the HIPAA configuration through your Anthropic account team. For requirements and covered features, see the HIPAA Implementation Guide .
  4. Added: Claude consumer products: Claude Free, Pro, Max, and Ultra plans.
  5. Removed: Claude consumer products: Claude Free, Pro, and Max plans.
  6. Added: Claude Platform on AWS: HIPAA readiness is not available on Claude Platform on AWS.
  7. Removed: Claude Platform on AWS and Microsoft Foundry: HIPAA readiness is not available on these platforms.
  8. Added: The following tables list which Claude API features are eligible for ZDR and HIPAA readiness arrangements. They split the features as the Features overview does.
  9. Removed: The following table lists which Claude API features are eligible for ZDR and HIPAA readiness arrangements.
  10. Added: Features that relate to both the Messages API and Claude Managed Agents . Some are available in only one of them. This table gives each feature's eligibility in the Messages API. In Claude Managed Agents, no feature is eligible for ZDR or HIPAA readiness; see the Claude Managed Agents row under Managed Agents features .
  11. Added: Skill data retained according to standard policy. Learn more about Agent Skills (ZDR)
  12. Added: 29-day retention; async storage required. Learn more about Batch processing (ZDR)
  13. Added: Client-side tool. Anthropic does not run browser actions or retain page content beyond standard API handling. Learn more about Browser use tool (ZDR) Not covered under HIPAA readiness; requests that include the browser use tool are not blocked.
  14. Added: Client-side tool where screenshots and files are captured and stored in your environment, not by Anthropic. Learn more about Computer use tool (ZDR)
  15. Added: Files retained until explicitly deleted or they reach their configured expiration. Learn more about Files API (ZDR)
  16. Added: Data retained according to standard policy. Learn more about MCP connector (ZDR)
  17. Added: Research preview. The MCP tunnels security page describes the data-flow boundary and subprocessor details. Learn more about MCP tunnels (ZDR)
  18. Added: Built on code execution containers; data retained up to 30 days. Learn more about Programmatic tool calling (ZDR)
  19. Added: Your prompts and Claude's outputs are not stored. KV cache representations and cryptographic hashes are held in memory for the cache TTL and promptly deleted after expiry. Learn more about Prompt caching (ZDR)
  20. Added:  Part of Prompt caching: Cache diagnostics
  21. Added: Your prompts and Claude's outputs are not stored. A fingerprint of cryptographic hashes and token-count estimates is retained briefly to allow comparison against the next request. Learn more about Cache diagnostics (ZDR)
  22. Added: Your prompts and Claude's outputs are not stored. Only the JSON schema is cached, for up to 24 hours since last use. This also covers strict tool use ( strict: true on tools), which uses the same grammar pipeline. Learn more about Structured outputs (ZDR) PHI must not be included in JSON schema definitions; see PHI handling guidelines. Learn more about Structured outputs (HIPAA)
  23. Added:  Part of Thinking: Adaptive thinking
  24. Removed: Skill data retained according to standard policy. See Agent Skills data retention .
  25. Added: Container data retained up to 30 days. Learn more about Code execution tool (ZDR)
  26. Removed: 29-day retention; async storage required. See Batch processing data retention .
  27. Removed: Client-side tool. Anthropic does not run browser actions or retain page content beyond standard API handling. Not covered under HIPAA readiness; requests that include the browser use tool are not blocked. See Browser use data retention .
  28. Removed: Your prompts and Claude's outputs are not stored. A fingerprint of cryptographic hashes and token-count estimates is retained briefly to allow comparison against the next request. See Cache diagnostics data retention .
  29. Removed: Container data retained up to 30 days. See Code execution data retention .
  30. Removed: Client-side tool where screenshots and files are captured and stored in your environment, not by Anthropic. See Computer use data retention .
  31. Removed: Files retained until explicitly deleted or they reach their configured expiration. See Files API file lifecycle .
  32. Removed: Data retained according to standard policy. See MCP connector data retention .
  33. Removed: Research preview. See MCP tunnels security for the data-flow boundary and subprocessor details.
  34. Removed: Built on code execution containers; data retained up to 30 days. See Programmatic tool calling data retention .
  35. Removed: Your prompts and Claude's outputs are not stored. KV cache representations and cryptographic hashes are held in memory for the cache TTL and promptly deleted after expiry. See Prompt caching .
  36. Removed: Your prompts and Claude's outputs are not stored. Only the JSON schema is cached, for up to 24 hours since last use. This also covers strict tool use ( strict: true on tools), which uses the same grammar pipeline. PHI must not be included in JSON schema definitions; see PHI handling guidelines . See Structured outputs data retention .
16 paragraphs left out as page noise
  • Added (spacing or invisible characters only): Same Messages API endpoint with faster inference. ZDR applies regardless of speed setting.
  • Added (spacing or invisible characters only): Request-shape capability of the Messages API; mid-conversation system messages flow through the standard inference path and nothing is stored server-side after the response.
  • Added (spacing or invisible characters only): HIPAA eligibility applies to PDFs sent inline through the Messages API, not through the Files API.
  • Added (spacing or invisible characters only): Server-side compaction results are returned and round-tripped statelessly through the API response.
  • Added (spacing or invisible characters only): Server-side tool run by Anthropic; the tool definitions in the request are searched in memory per call and nothing is stored after the response.
  • Added (spacing or invisible characters only): Fetched web content returned in the API response. Dynamic filtering for web fetch is not eligible for ZDR or HIPAA. Website publishers might retain request data (such as fetched URLs and request metadata) according to their own policies.
  • Added (spacing or invisible characters only): Real-time web search results returned in the API response. Dynamic filtering for web search is not eligible for ZDR or HIPAA.
  • Removed (spacing or invisible characters only): Sessions are stateful resources; transcripts persist until you delete them. Applies to all Managed Agents sub-features, including Self-hosted sandboxes .
  • Removed (spacing or invisible characters only): Server-side compaction results are returned and round-tripped statelessly through the API response.
  • Removed (spacing or invisible characters only): Same Messages API endpoint with faster inference. ZDR applies regardless of speed setting.
  • Added (spacing or invisible characters only): Sessions are stateful resources; transcripts persist until you delete them. Applies to all Managed Agents sub-features, including Self-hosted sandboxes.
  • Removed (spacing or invisible characters only): Request-shape capability of the Messages API; mid-conversation system messages flow through the standard inference path and nothing is stored server-side after the response.
  • Removed (spacing or invisible characters only): HIPAA eligibility applies to PDFs sent inline through the Messages API, not through the Files API.
  • Removed (spacing or invisible characters only): Server-side tool run by Anthropic; the tool definitions in the request are searched in memory per call and nothing is stored after the response.
  • Removed (spacing or invisible characters only): Fetched web content returned in the API response. Dynamic filtering for web fetch is not eligible for ZDR or HIPAA. Website publishers might retain request data (such as fetched URLs and request metadata) according to their own policies.
  • Removed (spacing or invisible characters only): Real-time web search results returned in the API response. Dynamic filtering for web search is not eligible for ZDR or HIPAA.
About this change
Page
platform.claude.com/docs/en/manage-claude/api-and-data-retention
Kind
Documentation
Text hash
3ae15f07b24c to da97cd88789b
Dated by
the weekly check that first read the new text