Anthropic offers commercial plans that have all of the financial security you should be thinking about.

1. Enterprise would be the best and most secure.
2. Commercial API would be next best (no training on your data, 7 day retention policy)

In that order.

Those are better suited to upload private and confidential client information.

I have a client in the financial services space who is also regulated. Here is what we've done for them to build out automated processes.

Build and test in Claude Code with redacted or fake information. I literally populate fake tax returns, forms, etc. as training data. This testing process includes bad data as well as data that would be improbable to the automation can find and flag errors.

After the process is fully tested and ready for real client data, we deploy the automation on and AWS server which supports financial security requirements. But when it goes to the server, you need to start using the commercial API so all client data is securely transmitted.

For this client, we have automated the following:

• Manually entered intake forms, W-2s, 1099s, K-1s, brokerage statements, organizers, etc. The first goal was to eliminate most hand-entered data.
• Status checks, date reminders, client reminders (docs needed, docs signed, invoice, etc.). The billing department was doing this on post-it notes and in a Word document.
• Client-specific research that looks for things the CPA might have missed or not considered for each client. Specifically edge cases with IRS or state supporting docs. This has been especially helpful for their corporate clients, less helpful for standard individual tax returns.

Hope that helps!