Anthropic has published its guidance on using Claude Cowork safely. It is a clear document and worth reading.
It is written for one person on a Pro plan. If you are deciding whether agentic AI enters a 200 person regulated business, you need the next layer: where data is processed, what your auditor sees, and who sets the rules the agent operates under.
That layer is what Moterra builds.
What does Claude Cowork actually do?
Cowork gives Claude the ability to act, not just answer. It reads files, browses the web, runs code, and works inside your connected applications.
Anthropic groups those capabilities in two:
Read capability is where most of the day-to-day value sits. Write capability is where the leverage is, and where governance earns its place. A business deployment should let you tune both, per workflow, rather than accept a single default.
What does a private deployment give you?
A private Claude deployment in your own cloud gives you the five things a regulated business needs before rollout.
This is the foundation. On top of it sits configuration, and that is the part most deployments skip.
How do you govern what an agent reads and does?
By setting a trust boundary and enforcing it in the deployment rather than in a user settings menu.
Anthropic makes a useful point about agent risk: consequential mistakes need two conditions present together. The agent can read content from outside your trusted sources, and the agent can take an action that matters. Narrow either one and the risk drops sharply.
That is a design instruction, and it is straightforward to act on:
Moterra AI Bridge is the layer that makes these enforceable: admin console, MDM profiles, plugin management and agent controls around Cowork.
How does Moterra deploy Private Claude Cowork?
Private Claude by Moterra runs inside your own AWS or Azure tenant. Same Anthropic product, same models, same interface. What changes is where it runs.
Moterra is an official Anthropic partner and an AWS Partner with GenAI Competency. AWS customers can procure through AWS Marketplace and consolidate with existing AWS spend and committed-use credits.
ISO 27001 and ISO 42001 certified across both the AWS and Anthropic layers, so the deployment stack is certified end to end. AWS and Anthropic hold SOC 2 Type II reports, and Moterra’s setup has been independently validated by cyber security specialists. Your deployment is defensible under UK GDPR, EU GDPR, EU DORA and UK operational resilience requirements.
What does this look like in practice?
Ask your SharePoint and your operations database a question in plain English. Get an answer that cites its sources. The answer never leaves your cloud account.
That is the demo, and it runs on your systems, not a sandbox. Most teams reaching this page have already tried a general purpose assistant and found it could not see their actual data. The pattern is rarely about the model.
Get a quote or book a call to see it running in your environment.
Frequently asked questions
Is Claude Cowork safe to use with confidential business data?
In a private deployment, yes. Your data, prompts and files never leave your cloud tenant. Encryption uses AES-256 at rest and TLS 1.3 in transit, through private endpoints with your own KMS keys, and connectors inherit the access permissions already in place rather than creating new ones.
Where is Cowork data processed?
In a Moterra deployment, inside your own AWS or Azure environment, in the region you select. Anthropic's standard product runs sessions on Anthropic's infrastructure.
Will our data be used to train Claude?
No. Models are delivered via AWS Bedrock or Azure AI Foundry inside your own tenant, with no data flowing back to Anthropic. Your prompts, files and outputs never reach a training pipeline. This is guaranteed by architecture, not policy.
Can Claude Cowork run in Azure rather than AWS?
Yes. Moterra deploys the same architecture in AWS or Azure.
Does Claude Cowork meet GDPR and DORA requirements?
Your deployment is defensible end to end under UK GDPR, EU GDPR, EU DORA and UK operational resilience requirements. The stack is ISO 27001 and ISO 42001 certified across the AWS and Anthropic layers, and Moterra operates as a data processor under a DPA covering both UK and EU GDPR.
How do you control what the agent is allowed to do?
Read scopes and write permissions are configured per workflow, with approval gates on consequential actions such as sending, publishing or deleting. Agent identity comes from your existing identity provider, so permissions follow your existing joiner and leaver process.
What is the difference between this and the Claude Cowork my team already uses?
It is the same Anthropic product, running privately in your cloud. Same models, same interface, same capabilities. What changes is where it runs: your AWS or Azure tenant, your encryption keys, your governance.
How long does deployment take?
Standard deployment is typically live within one to two weeks. Doing it yourself usually takes three to six months across MDM setup, identity integration, MCP plugin development and admin tooling.
