Work with us
AI tools / General-purpose AI assistants / Claude.ai

How to govern Claude.ai

Anthropic's assistant for drafting, analysis and long documents, and what to watch as its capabilities grow.

Anthropic · Reviewed monthly, and when Anthropic announces a capability change · Last reviewed 16 Oct 2026

Governance change Reviewed the app release notes from 3 September to 7 October. Anthropic has merged Cowork into every conversation: what was only possible in Cowork, including working in local files, browsing, computer use through the desktop app and scheduled tasks, is now available from any chat, with an Auto or Manual permission setting per conversation. Pro and Max first; Enterprise administrators get 30 days notice. Claude Cowork no longer has its own page here. Full changelog ↓

How Claude.ai is used

We see seven common ways businesses use Claude.ai, and we govern each one on its own terms. If your team uses it differently, that is fine: you describe the use in your own words and Certrak works out the governance from what it actually does.

General productivity assistance

Consequence to people: Medium

Drafting, summarising, brainstorming, internal Q&A - day-to-day help with internal work

Internal informationEvery output reviewedInternal use onlyChanges records in other systemsActs on its own
  • Review rhythm: Monthly check-in
  • Governance is mostly about: Safe everyday use; A person stays accountable; Checking what it produces

Document analysis and review

Consequence to people: Medium

Reviewing contracts, reports, or technical documents

Internal informationEvery output reviewedInternal use onlyChanges records in other systemsActs on its own
  • Review rhythm: Monthly check-in
  • Governance is mostly about: A person stays accountable; Safe everyday use; Checking what it produces

Marketing content creation

Consequence to people: Low

Drafting marketing copy, social posts, ads, blog content

Internal informationEvery output reviewedCustomers, no decisions about them
  • Review rhythm: Twice-yearly review
  • Governance is mostly about: Safe everyday use; Checking what it produces; A person stays accountable

Customer communications drafting

Consequence to people: Medium

Drafting customer emails, support replies, or other outbound communications - reviewed before sending

Personal informationEvery output reviewedCustomers, no decisions about them
  • Review rhythm: Quarterly review
  • Governance is mostly about: Safe everyday use; Checking what it produces; What it may be given

Code generation and review

Consequence to people: Low

Writing or reviewing code, with a developer in the loop

Internal informationEvery output reviewedInternal use only
  • Review rhythm: Annual review
  • Governance is mostly about: Safe everyday use; What it may be given; Checking what it produces

Internal data analysis and insights

Consequence to people: Medium

Analysing business data, surfacing insights, building dashboards

Internal informationEvery output reviewedInternal use onlyChanges records in other systemsActs on its own
  • Review rhythm: Monthly check-in
  • Governance is mostly about: A person stays accountable; Safe everyday use; Checking what it produces

Workflow automation across systems

Consequence to people: Medium

Automating tasks across business systems - triggers, data movement, decisions in workflows

Internal informationNo human reviewInternal use onlyChanges records in other systemsActs on its own
  • Review rhythm: Monthly check-in
  • Governance is mostly about: Safe everyday use; A person stays accountable; Checking what it produces

Governing Claude.ai in practice

  1. Name one person who owns Claude.ai in your business. Governance starts with a name.
  2. Write down what Claude.ai is used for. Certrak recognises 7 common uses: General productivity assistance, Document analysis and review, Marketing content creation, Customer communications drafting, Code generation and review, Internal data analysis and insights and Workflow automation across systems. Yours may differ; write down yours.
  3. Decide what Claude.ai may and may not be given. Personal information is in scope for some uses; write the boundary down before it is needed.
  4. There is no human review of outputs. Decide whether that is acceptable for each use, and what would make you change it.
  5. Claude.ai can create, change, or delete records in another system without a person approving. Record which of these you allow, and who can change that.
  6. Look at this again every month, and sooner on any of these: industry incidents, vendor model updates, autonomy level changes and data classification changes.

What changed, and how Certrak responded

We record every check here, including the ones that changed nothing. A check that found no governance change proves we looked.

  1. Governance change Vendor change

    Claude Cowork and chat are one Claude

    Anthropic shipped it 16 Sep 2026.

    Reviewed the app release notes from 3 September to 7 October. Anthropic has merged Cowork into every conversation: what was only possible in Cowork, including working in local files, browsing, computer use through the desktop app and scheduled tasks, is now available from any chat, with an Auto or Manual permission setting per conversation. Pro and Max first; Enterprise administrators get 30 days notice. Claude Cowork no longer has its own page here.

    How Certrak responded: Where Claude is used for everyday work, documents or internal analysis, it can now change files and act in connected tools from an ordinary conversation. Owners are asked whether their people use Claude this way; if they do, the system is treated as making changes on their behalf and the matching controls apply.

    Vendor release note →
  2. No governance change Scheduled review

    Claude release notes

    Anthropic shipped it 28 Aug 2026.

    Reviewed the recent release notes against Claude.ai's use patterns. No change to what it can do without approval, the data it is expected to touch, or who reviews its output.

    Vendor release note →