Anthropic extends the Compliance API to Cowork and Claude Code

Anthropic added beta Compliance API coverage for Cowork on desktop, web, and mobile and for Claude Code in the CLI and desktop app. New session endpoints return server-hosted transcripts containing prompts, responses, web and MCP tool calls, skills and artifacts, plus verified user, organization, session, message, and timestamp metadata.

What changed

Why it matters

The update closes an audit and eDiscovery gap by putting agent-session content and tool activity beside existing Claude chat records instead of requiring a separate logging stack for each surface.

What to do

Using a dedicated Compliance Access Key, query the new local and remote session endpoints, reconcile returned users and messages with a controlled test session, and validate export, retention, access control, and deletion procedures before relying on the feed.

Caveat

The beta excludes Claude Code on the web, Claude Code through the Claude Platform, Amazon Bedrock, Google Vertex AI, and Microsoft Foundry. Anthropic's retention documentation also says local ZDR sessions and local sessions from HIPAA-ready organizations are not captured.