What's this about?
Anthropic's answer to two months of enterprise complaints about data retention. EFS gives customers complete privacy — equivalent to a zero-data-retention policy — while still being state of the art at preventing adversarial use, by storing data in cloud infrastructure controlled entirely by the customer, not Anthropic. It rolls out to enterprise customers in phases from later this autumn; until then, eligible customers can use Fable 5.1 with zero data retention.
Why were those two requirements in conflict?
Because preventing misuse means inspecting what people send. A provider that retains nothing cannot run trend analysis, cannot correlate a suspicious request with the same customer's earlier ones, and cannot investigate an incident after the fact. Enterprises want zero retention for confidentiality; the provider wants retention for safety. EFS resolves it by moving the storage rather than eliminating it — the data persists, in the customer's own infrastructure, where the safety systems can still reach it but the vendor does not hold it.
Why does this matter to you?
- It is a genuinely clever architectural answer to a conflict most vendors resolve by picking a side.
- The security question it raises is the obvious one: what reaches into that customer-controlled storage, with what access, and who audits it.
- "In phases, beginning later this fall" means this is an announcement of intent — the interim offer is plain zero data retention.