Anthropic announced Enterprise Frontier Safeguards (EFS) on 1 September 2026, developed with more than 100 customers across financial services, healthcare, manufacturing, telecom, law, retail and the public sector — including CISOs from Goldman Sachs, Morgan Stanley, Citi and Bank of America, and organisations like Comcast, Mastercard and Visa. EFS combines zero data retention with automated misuse detection, but the structural change is what matters most: activity data now sits in cloud infrastructure the customer controls, not Anthropic’s, with businesses able to run automated safety monitoring without any Anthropic human review of their data. It’s supported on Claude Code, Claude Enterprise and the Claude Platform across AWS, Google Cloud and Microsoft Foundry, rolling out in phases from this autumn, at no additional charge.
The detail worth reading closely is why this happened: it’s a direct response to pushback, not a proactive feature launch. Regulated organisations have spent 2026 raising the same objection to AI coding tools — that they can’t verify what happens to their data, and can’t satisfy an auditor or regulator with “trust us.” Anthropic building customer-controlled infrastructure into its core enterprise offering, at the request of banks and healthcare organisations specifically, is a concrete signal that the compliance gap around AI-assisted development is closing, not just being talked about.
Why this matters beyond Anthropic’s own customers
If data governance has been the reason your organisation held off on AI-assisted development — a common and reasonable position in healthcare, financial services or any NHS-adjacent work — this is evidence the vendor landscape is starting to build for that requirement rather than asking regulated buyers to accept generic terms. It doesn’t remove the need to check EFS’s actual guarantees against your specific compliance obligations once it’s live, but it changes the starting conversation from “can we use this at all” to “how do we configure it correctly.”
So what
If you’re planning a build in a regulated space — healthcare, finance, or anywhere with strict data handling requirements — the AI tooling question and the compliance question are no longer separate conversations, and treating them separately is how projects get stuck late. See our healthcare software development work, or get in touch to talk through how AI-assisted delivery fits a project with real compliance constraints.