CapitalGuard Observatory · Tool record

Claude

Anthropic · connected assistant

Claude can work with conversations, files, projects, and optional connectors that retrieve from or act within services according to the user’s source-system permissions.

Public-Control Score

Substantial public control coverage

Measures publicly documented control coverage as of the review date. It is not a breach rate, penetration test, endorsement, or guarantee of safety.

Scored dimensions

The documented control surface.

This record is reviewed against the same five-dimension rubric used across every scored product.

Read Methodology

Access and scope transparency

16/20

Official material names concrete controls and meaningful boundaries for access and scope transparency.

Data and retention controls

16/20

Official material names concrete controls and meaningful boundaries for data and retention controls.

Connector and permission controls

16/20

Official material names concrete controls and meaningful boundaries for connector and permission controls.

Action, approval, and isolation controls

14/20

Official material names concrete controls and meaningful boundaries for action, approval, and isolation controls.

Audit and administrative evidence

12/20

Official material documents user-facing controls, with some enforcement or audit detail still limited.

Documented access points

chat messages, files, and project knowledge

shared chat snapshots

connectors with read or write tools

Settings to verify now

Privacy and model-improvement choice

Shared chats and project visibility

Connector tool permissions and source-account scope

Primary sources

Inspect the evidence directly.

Anthropic: Use connectors to extend Claude Official connector access, inherited permissions, and action-restriction guidance.Anthropic: Is my data used for model training? Official consumer privacy and model-improvement conditions.

Linked evidence

Ten practical Claude checks.

All 100 Guides

Private file access

Claude Private File Access: What to Check

Credential exposure

Claude API Key Exposure: Check Before You Share

Client confidentiality

Claude Client Data Safety for Freelancers

Prompt injection

Claude Prompt Injection: A Practical Defense

Connector permissions

Claude Connector Permissions: Review the Real Scope

Command execution

Claude Command Execution: Keep Control

Unsafe generated code

Claude Generated Code Risks: Review Before You Run

History and sharing

Claude Chat History and Shared Links: Privacy Check

Accidental oversharing

Claude Sensitive Data: What Not to Paste

Autonomous actions

Claude Autonomous Actions: Approval Safety Guide