Is Claude Cowork Safe to Use with Client Data?

It depends on the client. Cowork activity is not captured in the Compliance API, and standard audit logs do not record it, so it is off the table for any client whose contract requires a data audit unless a Team or Enterprise plan streams Cowork events out through OpenTelemetry. On the desktop computer-use path, Cowork also runs with no sandbox between the agent and your screen. Build the human review step into your documented process before delegating anything involving confidential information.