Announcements公告

Developing Enterprise Frontier Safeguards with our customers与客户共同开发企业前沿安全防护措施

Sep 1, 20262026年9月1日
Developing Enterprise Frontier Safeguards with our customers

Today we’re announcing Enterprise Frontier Safeguards (EFS), a solution that combines the privacy of zero data retention (ZDR) with state-of-the-art safeguards for detecting misuse. EFS works by storing data in cloud infrastructure controlled by the customer, not Anthropic. EFS will be rolling out to customers in phases, starting later this fall. To make the transition smooth, eligible customers will receive ZDR on Fable 5 and Fable 5.1 until EFS is ready.今天,我们宣布推出企业前沿安全防护(Enterprise Frontier Safeguards,简称 EFS)。该解决方案将零数据留存(ZDR)的隐私性与用于检测滥用的尖端安全防护措施相结合。EFS 的工作原理是将数据存储在由客户而非 Anthropic 控制的云基础设施中。EFS 将从今年秋季晚些时候开始分阶段向客户推出。为确保平稳过渡,符合条件的客户在 EFS 就绪之前,可在 Fable 5 和 Fable 5.1 上使用零数据留存(ZDR)服务。

We developed EFS in close collaboration with more than 100 customers in industries like financial services, healthcare, manufacturing, telecom, law, retail, and the public sector, and with our cloud partners at Amazon Web Services, Google Cloud, and Microsoft Azure.我们在开发 EFS 时,与金融服务、医疗保健、制造业、电信、法律、零售和公共部门等行业的 100 多家客户,以及亚马逊云科技(AWS)、Google Cloud 和微软 Azure 的云合作伙伴进行了密切合作。

EFS will be supported on Claude Code, Claude Enterprise, the Claude Platform, Amazon Bedrock, Claude Platform on AWS, Google’s Agent Platform, and Microsoft Foundry.EFS 将在 Claude Code、Claude Enterprise、Claude Platform、Amazon Bedrock、AWS 上的 Claude Platform、Google Agent Platform 以及 Microsoft Foundry 上提供支持。

Solving the dilemma of frontier security解决前沿安全困境

Mythos-class models, like Claude Fable 5.1, represent a major increase in intelligence and agentic capabilities. However, with that increase comes the potential for both misuse and autonomous misbehavior.像 Claude Fable 5.1 这样的 Mythos 级模型代表了智能和智能体能力的重大提升。然而,随着能力的提升,滥用和自主不当行为的风险也随之增加。

Over the last few months, we’ve seen substantial evidence of attempted misuse of AI models. These range from typical forms of abuse, such as fraud, to sophisticated cyberattacks, which can include agents autonomously engaging in destructive behavior. Some of these instances involve theft or misappropriation of enterprise customers’ credentials, which are difficult to detect without the ability to monitor traffic and detect abnormal behavior.在过去几个月里,我们看到了大量试图滥用 AI 模型的证据。这些滥用行为范围广泛,从欺诈等典型滥用形式,到包括智能体自主进行破坏性行为在内的复杂网络攻击。其中一些案例涉及窃取或挪用企业客户的凭据,若没有监控流量和检测异常行为的能力,这些行为很难被发现。

Furthermore, because the most sophisticated misuse can involve many tasks spread across multiple sessions and accounts, it is not sufficient to run automated analysis on each interaction separately and then instantaneously discard the data. Effective detection requires storing data for a meaningful period of time so that it can be correlated across time and accounts.此外,由于最复杂的滥用行为可能涉及跨多个会话和账户的多个任务,仅对每次交互进行单独的自动化分析并立即丢弃数据是不够的。有效的检测需要将数据存储一段有意义的时间,以便能够跨时间和账户进行关联分析。

For this reason, we introduced 30-day data retention starting with Fable 5. This policy was not motivated by a desire to train on enterprise data: Anthropic has never trained on enterprise data without explicit permission, and never will.因此,我们从 Fable 5 开始引入了 30 天的数据留存政策。此政策并非出于利用企业数据进行训练的目的:Anthropic 从未在未经明确许可的情况下使用企业数据进行训练,未来也绝不会这样做。

The enterprises we worked with generally understood the safety and security value of data retention, but many–especially in regulated industries–found it difficult to use models with data retention. We therefore sat down with customers to design a solution that could provide the best of both worlds: the privacy of ZDR and the safety allowed by monitoring across time and accounts.我们合作的企业普遍理解数据留存对安全和保障的价值,但许多企业(尤其是在受监管行业)发现很难使用带有数据留存的模型。因此,我们与客户共同设计了一套解决方案,旨在兼顾两者的优势:既拥有 ZDR 的隐私性,又能实现跨时间和账户监控所带来的安全性。

Designed with our customers与客户共同设计

We built Enterprise Frontier Safeguards with feedback from the experts who will use it every day: security, product, compliance, and delivery teams. One of the groups we worked with was the Analysis and Resilience Center for Systemic Risk (ARC), whose members include the chief information security officers of the largest US banks, including Goldman Sachs, Morgan Stanley, Citi, Bank of America, and Wells Fargo. 我们在构建企业前沿安全防护(EFS)时,参考了每天都会使用它的专家——安全、产品、合规和交付团队的反馈。我们合作的团队之一是系统性风险分析与弹性中心(ARC),其成员包括美国各大银行的首席信息安全官,包括高盛(Goldman Sachs)、摩根士丹利(Morgan Stanley)、花旗(Citi)、美国银行(Bank of America)和富国银行(Wells Fargo)。

We also worked with leaders at companies such as Comcast, KPMG, Mastercard, Salesforce, and Visa, to make sure the design held up across industries. Our conversations spanned a quarter of the Fortune 100, every US global systemically important bank, and virtually every regulated industry.我们还与康卡斯特(Comcast)、毕马威(KPMG)、万事达卡(Mastercard)、Salesforce 和 Visa 等公司的领导者合作,确保该设计能够适应各行各业。我们的交流对象涵盖了财富 100 强企业中的四分之一、美国所有具有系统重要性的全球银行,以及几乎所有受监管的行业。

Here is what we heard from this wide range of customers, and what we built into EFS to address these common concerns:以下是我们从这些广泛的客户群中听到的反馈,以及我们为解决这些共同关切而内置于 EFS 中的功能:

On monitoring关于监控

Enterprises have long applied monitoring for insider risk, and now want help upleveling monitoring for agents. Their concerns were about Anthropic’s automated monitoring systems meeting their regulatory standards.企业长期以来一直将监控应用于内部风险管理,现在他们希望在提升智能体监控方面获得帮助。他们的担忧在于 Anthropic 的自动化监控系统是否符合他们的监管标准。

With EFS, customers control how data gets reviewed. When monitoring detects a pattern that needs attention, those signals are sent directly to customers so they can review what the automated systems detected.通过 EFS,客户可以控制数据的审查方式。当监控检测到需要关注的模式时,这些信号会直接发送给客户,以便他们审查自动化系统所检测到的内容。

On data storage关于数据存储

It’s a lot of work for enterprises to add another “trusted data vendor” for a number of reasons. They need to notify all of their customers who these vendors are and update contracts. They also have internal requirements for safely storing and auditing data, given its high level of sensitivity. Because of these concerns, we architected EFS so that customers have the ability to store data on their existing cloud infrastructure.由于多种原因,企业增加一个新的“受信任数据供应商”需要投入大量工作。他们需要通知所有客户这些供应商是谁并更新合同。鉴于数据的敏感性极高,他们还有内部关于安全存储和审计数据的要求。考虑到这些顾虑,我们对 EFS 进行了架构设计,使客户能够将数据存储在他们现有的云基础设施中。

In EFS, customers can control their data storage and management. Customers want the ability to have their data live in infrastructure they control, under their own encryption keys, access policies, and audit logging. Activity data used for monitoring can be stored in the customer’s own cloud account (such as Amazon S3, Azure Blob Storage, or Google Cloud Storage).在 EFS 中,客户可以控制其数据存储和管理。客户希望能够将数据存放在他们自己控制的基础设施中,并使用自己的加密密钥、访问策略和审计日志。用于监控的活动数据可以存储在客户自己的云账户中(例如 Amazon S3、Azure Blob Storage 或 Google Cloud Storage)。

On automated and human review关于自动化与人工审查

Even as automated review is becoming more effective, a person looking at a flag still adds value by confirming real misuse and clearing false positives. But what we heard from many customers, especially those in regulated industries, is that the person doing that review needs to be one of their own. Many operate under rules that tightly govern who may see certain information—privileged legal material, non-public information, drug-safety reports. Their teams are already trained and cleared for that work.即使自动化审查正变得越来越有效,人工查看标记内容仍然具有价值,可以确认真实的滥用行为并清除误报。但我们从许多客户(尤其是受监管行业)那里了解到,进行审查的人员必须是他们自己的员工。许多机构在严格的规则下运作,规定了谁可以查看特定信息——例如受法律特权保护的材料、非公开信息、药物安全报告等。他们的团队已经接受过相关培训并获得了相应授权。

EFS has automated safety monitoring, no Anthropic human review required. Customers want protection against cyberattacks, and appreciate that these can be difficult to detect if they unfold across many sessions and accounts. With EFS, automated systems analyze a rolling window of traffic for signals of serious misuse, including attempts to develop offensive cyber or biological capabilities and signs of stolen or leaked credentials. Those flags go directly to the customer and their people take it from there – no human review by Anthropic employees is required.EFS 具有自动化安全监控功能,无需 Anthropic 人工参与审查。客户希望抵御网络攻击,并意识到如果攻击跨越多个会话和账户,往往很难被发现。通过 EFS,自动化系统会分析滚动窗口内的流量,以寻找严重滥用的信号,包括试图开发攻击性网络或生物能力的行为,以及被盗或泄露凭据的迹象。这些标记会直接发送给客户,由他们的人员进行后续处理——无需 Anthropic 员工进行任何人工审查。

How EFS worksEFS 的工作原理

These controls are designed to work the same way whether you access Claude directly from Anthropic or through a cloud partner. Customers on Amazon Web Services, Google Cloud, and Microsoft Azure will get equivalent controls, with their activity data stored in their own cloud account, in the environment they already trust. We’re also working to support third-party offerings that serve customers that are eligible for Enterprise Frontier Safeguards.无论您是直接从 Anthropic 访问 Claude,还是通过云合作伙伴访问,这些控制措施的设计工作方式都是相同的。Amazon Web Services、Google Cloud 和 Microsoft Azure 的客户将获得同等的控制权,其活动数据将存储在他们自己的云账户中,即他们已经信任的环境中。我们也在努力支持那些为符合企业前沿安全防护(EFS)条件的客户提供服务的第三方产品。

Customer-owned storage, Customer-Managed Encryption Keys, and fully automated review are each opt-in, so you enable the ones your organization needs. None of them change model behavior, API pricing, or rate limits.客户拥有的存储、客户管理的加密密钥和完全自动化的审查均可选择加入,因此您可以启用组织所需的那些功能。它们都不会改变模型行为、API 定价或速率限制。

Anthropic doesn’t charge for Enterprise Frontier Safeguards. If customers elect to store their data in their cloud account, their cloud provider bills them for that storage, as well as reads, writes, and data egress fees, the same way it bills any other resource.Anthropic 不会对企业前沿安全防护(EFS)收费。如果客户选择将其数据存储在自己的云账户中,他们的云提供商会像计费任何其他资源一样,向他们收取存储费用以及读取、写入和数据流出费用。

Getting started入门指南

Enterprise Frontier Safeguards will roll out to customers in phases, with the goal of making it broadly available later this fall. To request access to Enterprise Frontier Safeguards, please complete this form.企业前沿安全防护(EFS)将分阶段向客户推出,目标是在今年秋季晚些时候广泛提供。如需申请使用企业前沿安全防护(EFS),请填写此表单。

Related content相关内容

Improving our alignment and security efforts改进我们的对齐和安全工作

On July 30, we reported three incidents in which Claude models gained unauthorized access to real computer systems. We are conducting an in-depth analysis of both incidents, and planning to work with METR for an independent review. In the meantime, we’re sharing some of the changes we’ve made over the past month.7 月 30 日,我们报告了三起 Claude 模型未经授权访问真实计算机系统的事件。我们正在对这两起事件进行深入分析,并计划与 METR 合作进行独立审查。在此期间,我们分享了过去一个月我们所做的一些改进。

Read more阅读更多

Previewing the Model Hardware Standard预览模型硬件标准

We’re opening a research preview of the Model Hardware Standard (MHS), a shared specification for AI agents to safely operate physical devices, to a first group of scientific research labs and advanced manufacturers. 我们正在向第一批科学研究实验室和先进制造商开放模型硬件标准(MHS)的研究预览,这是一项旨在让 AI 智能体安全操作物理设备的共享规范。

Read more

Expanding our support for scientists扩大对科学家的支持

Starting today, 10,000 scientists around the world can get Claude at no cost to start. Verified principal investigators qualify for a Claude Team subscription plan and then add their research team to Standard seats for free, or Premium seats for $15 per month, for up to a year.从今天开始,全球 10,000 名科学家可以免费使用 Claude。经过验证的首席研究员有资格获得 Claude Team 订阅计划,然后可以免费为其研究团队添加标准席位,或以每月 15 美元的价格添加高级席位,有效期最长为一年。

Read more