Drop #32: Unified Claude Reaches Enterprise, Duet Safety Details, and a Nonprofits Plugin

Last week was the Claude Duet launch. This week Anthropic filled in the details around it: Chat and Cowork are now one experience for Claude Enterprise, a new safety article explains how Duet handles approvals, privacy, and credentials, and a free Claude for Nonprofits plugin is rolling out to nonprofits on Team and Enterprise plans.

Unified Claude Is Generally Available for Enterprise

On October 23, Anthropic announced that Chat and Cowork are now one Claude on web, desktop, and mobile for Claude Enterprise plans. Pro and Max plans got the merged experience in September. Conversations start as chats; when a task needs code or files, Claude continues in a cloud environment that Anthropic manages and returns the finished output. Cloud work keeps going after you close your laptop, and chats, projects, connectors, skills, and plugins carry over.

Admins get four controls: role-based access, a new Efficient mode that keeps the unified experience on Sonnet and Haiku models, model entitlements that set which models each role can use, and spend limits at the organization, group, and member levels, with pooled group budgets that give a group one shared monthly amount. Rollout is managed in Organization settings.

Organizations that use zero data retention for Claude Code, a HIPAA-ready configuration, or customer-managed encryption keys stay on their current configuration. Existing Enterprise customers will receive an email about the rollout for their organization. Drop #30 covered the earlier November 10 default date from the desktop release notes; if you manage a team, check Organization settings against the new announcement.

How Claude Duet Handles Approvals, Privacy, and Credentials

Also on October 23, Anthropic published an article on Claude Duet's safety, privacy, and security. On approvals: before sending a potentially sensitive message, paying, or deleting something, Duet shows the action, the destination, and the full content, including every recipient, and waits for your approval. A separate automated check runs outside the model to confirm each action matches your intent, so instructions hidden in a web page cannot affect it. Some actions are off-limits even with approval: trading securities, moving money between accounts, and accessing someone else's account.

Payments use a one-time card from Link (by Stripe), limited to a specific merchant and amount, which you approve in your Link app; your real card number is not shared with Duet or the merchant. A separate classifier checks outgoing messages for sensitive information. Sign-in credentials, full card and bank account numbers, and government ID numbers are never shared, while other private details such as health or financial information need consent, and your own request counts as consent.

On credentials, Anthropic says Duet never sees your passwords, browser cookies, or sign-in tokens, and cannot save them to memory. Passwords are typed into a form in the Claude app, encrypted with a single-use key, and handled only on the secure cloud browser machine; 1Password sign-in is planned. Sign-in tokens stay off the agent's machine, where a placeholder sits and an outside proxy inserts the real value when a request is made. The browser runs in its own cloud virtual machine, separate from the model. For the launch itself, see Drop #31.

A Free Claude for Nonprofits Plugin

On October 26, Anthropic expanded Claude for Nonprofits. The Claude for Nonprofits plugin is a set of skills and connectors built with about 30 nonprofits, installed automatically for nonprofits on Team and Enterprise plans at no additional cost. It covers three areas: extending a small team (marketing, hiring and people, and board and leadership support), setting up Claude responsibly (mapping where the organization keeps its records and checking whether staff uses fit its AI policy), and funding the mission (finding funders and grants, judging whether to pursue an RFP, drafting proposals and reports, and maintaining donor relationships).

Anthropic also said Claude Corps is placing 1,000 early-career fellows in at least 400 U.S. nonprofits, with a planned partnership with Taproot to match nonprofits with pro bono consultants for shorter, project-based work. It noted that a discount of about 90% for verified nonprofits in low- and middle-income countries, launched during the September UN General Assembly, brings standard Team seats to $3 per user per month.

Why This Matters for Cowork Users

Cowork's capabilities now reach every major plan tier as part of a single Claude, and the Duet article shows the pattern Anthropic is using for agents that act on your behalf: show the action, wait for approval, and keep credentials away from the model. If you manage a team, the Enterprise controls are the thing to review this week.

Tip of the Week: Read the Approval Before You Click

Agents that can send messages, pay, or delete ask for your approval first. According to Anthropic, Duet's approval screen shows the action, destination, and full content, including every recipient. That screen is only useful if you read it.

❌ Weak

Handle my follow-ups from this week.

✅ Strong

Draft follow-up emails to the three people I met with this week. Do not send anything; show me each draft with its recipient so I can approve them one at a time.

Name the recipients and the scope in your request, then check the recipient list and content on each approval before you confirm.

Worth Reading This Week

Until next time.

— The ClaudeCowork.com team