Is Claude safe for a firm like ours?
Is it safe to put Claude to work inside a professional firm?
It can be, when it is set up so your firm stays in control. Here is how I set it up, in plain terms, and what I don't claim.
Book a 15-minute fit call →It runs on your accounts.
Everything runs on your firm's own Claude accounts, with files on your own computers. When Claude works on a file, Anthropic processes its contents under the business terms of your plan. I never log into your systems. If you stop working with me, you keep the accounts, the files, and the workflows, and your team can keep running them.
A person says yes before anything goes out.
Claude can prepare, check, and assemble. Anything that sends, posts, pays, files, or speaks for your firm waits for a person to say yes.
Every workflow has a one-page record.
Before a workflow goes live, it gets a written record of how it is meant to run:
- Owner: a named person at your firm
- Can read: only the folders the workflow needs
- Can change: nothing until a person approves it
- Reviewed by: the reviewer you name
- Stops when: an error rate you set, a prohibited output, or one named person pausing it
The record says what the system does and who checks it. See an example record.
I sign your NDA first.
I sign a nondisclosure agreement before I see anything about your firm. Legal questions about client data stay with your counsel.
Does Anthropic train on our data?
As of October 2026, Anthropic's privacy page says that by default it does not use inputs or outputs from its commercial products, such as its Team and Enterprise business plans, to train its models. The exceptions it names are feedback you send it, like a thumbs up or down, and data you choose to share. An owner can turn feedback off for the whole firm. Read Anthropic's page.
Pro and Max are consumer plans under separate terms. Firm work belongs on a business plan.
What I don't claim.
I don't claim the system meets any outside standard, and I don't give legal advice. I tell you what it records and who reviews it, and your counsel decides what that means for your obligations.
How this plays out day to day: for engineering firms, for CPA firms, and in the 30-Day Deployment.