Is the Claude connection safe?
The safety status of the Claude connection, in plain words. To connect, see Connect Claude.
Status today
| Check | Status |
|---|---|
| Built | Yes, on 3 October 2026 |
| Security reviews | 5 reviews. The last one, on 4 October, found nothing serious. Everything found is fixed |
| Can Claude change anything? | No. It can only read |
| Switched on | Only where an owner turns it on. Every environment starts switched off |
| Sign-off | Waiting for the Business owner and Legal. See decision 43 |
| Risk level | High, accepted with safeguards. See risk SEC-17 |
"High" is because Claude can read member details. It does not mean a flaw was found.
To see whether Claude is on where you work, open Your account and find the card Claude and other AI assistants.
What keeps it safe
| Safeguard | What it means for you |
|---|---|
| Read only | Claude cannot change, cancel, refund or email anything. The database itself refuses changes |
| Your own password and phone | Claude signs in as you, with your password and the code from your phone. A temporary password does not work |
| Password change ends it | Change your password, and every Claude connection you made ends |
| A new phone ends it | Set up a new phone, or have an owner reset your two-step sign-in, and every Claude connection you made ends |
| A fixed list of things | Claude sees only what its tools allow. It never sees staff notes, card details, Stripe ids, passwords or settings |
| A last check | FMS checks every answer before it leaves. An answer holding hidden data is stopped |
| Off until switched on | An owner switches Claude on for each environment. Production starts off |
| A door key in Cloudflare | Since 5 October 2026 a Claude request reaches FMS only with the two Cloudflare values staff type into the connector. A stranger's Claude cannot ask FMS anything, whatever it signs in as |
| An email for each sign-in | You get an email each time Claude signs in as you. The admin alert address gets its own email, with the address and browser |
| A record of everything | Every sign-in and question is on Settings → Audit, under your name |
| A limit on questions | Too many questions in a short time pauses Claude. Heavy use emails the admin address |
| One press to cut off | You can end your own connection. An owner can end anyone's |
| Unused connections end | A connection not used for 30 days ends by itself |
What Claude can and can't see
| Claude can | Claude can never |
|---|---|
| Find a member by email or name, and read their plans, dates, teams, gifts and payment amounts | Change, cancel, refund or email anything |
| Read a team's seats, plan, team admin, billing contact and roster | See staff notes on a member or team |
| Read revenue per month and currency: gross, fees, net, refunds | See Stripe or Mailchimp ids, or card details |
| Read growth: new, renewed, returning and churned members | See bank references, invoice links or discount codes |
| Read today's headline numbers and the plan list | See team-invoice addresses or the activity and IP records |
| Read donation totals, never donors | Open settings, connections, staff accounts, logs or backups |
| Explain what FMS terms mean | Read anything, or be connected, in an environment an owner has not switched on for Claude |
| Explain how to do something, from this guide | Read the full engineering records (Decisions, Risk register) |
| Say what changed and what is planned (every role, Developers included). Owners, Membership managers and Finance: the decision board. Owners: the risk board | Read a board your role does not include |
What can still go wrong
| Risk | How we guard against it |
|---|---|
| Someone sends you a fake sign-in link. If you sign in, their Claude can read members as you | The sign-in page says where your sign-in goes. You get an email for every sign-in. Only sign in on a link you started. Their Claude also needs the two Cloudflare values, so never forward those, and delete the message they came in |
| What Claude reads goes to Anthropic, the company behind Claude | Anthropic keeps it under Frontier's Claude plan. FMS cannot take it back. Ask about one member at a time |
Nobody can move money or change a member through Claude, even with a stolen sign-in.
What leaves FMS
Whatever Claude reads is sent to Anthropic to answer you. They keep it under the terms of Frontier's Claude plan. FMS cannot take it back. Ask about one member at a time, and do not paste what Claude says into places members can see.
What you should do
- Only press Connect in your own Claude. Never sign in from a link someone sent you
- Read each sign-in email from FMS
- Never paste Claude's answers where members can see them
- Ask about one member at a time
- Treat any answer that says sandbox as test data, not real members
If something looks wrong
- Disconnect Claude on Your account.
- Change your password on the same page.
- Tell an owner.
For the technical team
The full record is risk SEC-17 in the risk assessment and decision 43 in Decisions. The reviews are in the progress notes for 3 and 4 October 2026. The operations runbook covers the connector in section 9.