- Claude Fable 5 on Bedrock requires sharing inference data with Anthropic, which involves opting into providerdatashare, a data retention mode that sends prompts and outputs to Anthropic for 30-day retention with human review.
- Once you opt into data retention, your data will leave AWS's data and security boundary, which has raised concerns among users.
- Anthropic frames the 30-day retention as a safety requirement for Mythos-class models, needed to catch novel attacks and jailbreaks through their blocking classifiers.
- This is not an AWS decision. It is Anthropic's policy applied consistently across all platforms where Fable 5 and Mythos 5 are offered.
- Chris Farris, a cloud security researcher, published a detailed critique arguing that AWS broke the core value proposition of Bedrock.
- For European organizations, there are concerns about the CLOUD Act, as Anthropic is a US company deploying its most capable model in collaboration with the US government.
Claude Fable 5 on Bedrock requires users to opt into a data retention mode, providerdatashare, which sends prompts and outputs to Anthropic for 30 days. This policy, described as a safety measure, is intended to help identify novel attacks and jailbreaks through their blocking classifiers.
However, this requirement raises significant concerns regarding data security and compliance, especially for European organizations. Chris Farris, a cloud security researcher, criticized this move, stating that it undermines the core value proposition of AWS Bedrock, which was designed to be a neutral platform between companies and model providers.56
Farris specifically highlighted the implications of the CLOUD Act, noting that Anthropic, a US-based company, is now deploying its advanced models in collaboration with the US government, potentially compromising data privacy for European users.
In response to these concerns, AWS has recommended that users create dedicated Bedrock projects for Fable 5 while keeping production workloads under zero-retention. This shift indicates a growing tension between compliance requirements and user data security in the evolving landscape of AI technology.
On June 12, AWS announced that Anthropic requested the revocation of access to Claude Fable 5 and Claude Mythos 5 for all users, citing compliance with a US Government export control directive.
“Claude Fable 5 on AWS Bedrock necessitates sharing inference data with Anthropic, which retains data for 30 days. This policy has raised concerns among users regarding data security and compliance.”
infoq.com