Claude Duet has no company-wide controls yet, only personal ones

Claude Duet, Anthropic's new agent app that acts on your behalf, has no company-wide controls yet. As of October 21, 2026, Anthropic has published no admin console, no on-off switch for an organization and no guide for managed devices. The safety limits it does have work for each person, not for a business.

What Duet is

Duet is a research preview, which means an early test version. It is available only in the United States and is included in Pro and Max plans. It uses the same usage limits as the rest of Claude. It runs as an app on iOS and Android and on claude.ai. Anthropic has not given a date for Team or Enterprise plans, and there is no Duet API for developers. It is a consumer app.

What is missing

Several things an IT team would normally ask for are not in Anthropic's published material:

• An admin console for Duet
• An organization-level switch to turn Duet on or off
• Statements on single sign-on or automatic account setup
• Audit-log export or a Duet-specific data retention schedule
• Instructions for deploying through Intune or any device-management tool

That does not prove the controls are absent inside Anthropic. It means an admin cannot point to them, and a security questionnaire cannot be answered from them. There is also no published way to deploy, configure or remotely wipe Duet through device management.

What each user does get

Anthropic says Duet never directly sees your passwords or sign-in tokens. Purchases go through Stripe's Link wallet, which asks the user to approve the spend and uses a virtual card, so the real card number is not shared. Shop Pay works the same way. Signing in with logins saved in 1Password is listed as coming.

Duet also uses a classifier to block sharing of the most sensitive data, such as credit card numbers and government ID. Before it sends a message, pays, signs or deletes, it shows the action and waits for approval. Trading securities and moving money between accounts are refused even with approval. Users can disconnect any app Duet can reach.

Spending is not controlled by the company

The spend approval belongs to the individual's wallet. A card limit is a Link setting, not a Duet setting. Nothing published suggests an admin can see or cap what an employee's Duet session spends.

What to do

Treat Duet as a personal trial for now. Anthropic does document admin tools for a different agent product, Cowork, including an organization-wide off switch and role-based access. Those controls should not be assumed to apply to Duet. Teams that need device management must wait for documentation that does not exist yet.