Claude Enterprise: the admin sees everything, deleted chats included

A Reddit thread (r/ClaudeAI, 200+ comments in a day) confirmed something most Claude Enterprise users don't realize: an org admin can export any employee's full chat history — including chats they deleted, and chats run in incognito mode. Not a leak, not a bug. A documented feature: Organization Settings → Data and Privacy → Export Data, link by email, file is JSON.

The comments carried real stories, no names. An employee used Claude to write a script exfiltrating company PII to her own machine — lost her license, kept her job. An executive ran his entire personal life through his work account: messages from family, questions to HR, expense stuff. Expensive "expert" contractors asked "explain Linux basics for dummies" — in full view of the client paying for that expertise.

(Worth remembering on the other side too: the client reads.) None of this is illegal. A corporate plan is a corporate perimeter — the org owns the data, the admin has the right to see it. The problem isn't that Anthropic made this possible. The problem is almost nobody thinks about it when they open an incognito chat on a work laptop.

Same rules apply without an org, too. A regular paid Claude account retains conversations for up to five years by default and uses them for model training, unless you explicitly turn that off. The toggle exists. Most people never find it.

Same question as the watermark post back in August: this isn't about one specific feature, it's architecture. Every request to a cloud model is your document on someone else's server, under someone else's access policy. The answer is a model inside your own perimeter — documents never leave, access logs belong to the client, not the cloud provider, and you verify that with an infrastructure audit, not trust in someone else's privacy policy.

The question "who reads my chats" existed before this thread. The thread just made it visible — with quotes attached.