Agent skill · data analytics · jeremylongshore
anth-data-handling
Implement data privacy, PII handling, and compliance patterns for Claude
Why this skill is useful
Provides specific PII redaction patterns and compliance handling scripts tailored for Claude API that the AI wouldn't reliably generate on its own.
What it needs
Requires anthropic account access. About 3k tokens when loaded. Last updated 2026-08-07. 2,604 stars on the source repository.
What this skill does
Anthropic Data Handling Overview Anthropic's data policies: API inputs/outputs are NOT used for model training (commercial API). Zero-day retention is available. This skill covers PII redaction before sending to Claude and compliance patterns. Anthropic Data Policies Policy Details -------- --------- Training data API data is NOT used for training (commercial API) Data retention 30-day default; 0-day available via agreement Encryption TLS 1.2+ in transit, AES-256 at rest SOC 2 Type II Certified HIPAA BAA Available for eligible customers PII Redaction Before API Calls Audit Logging Data Handling Checklist [ ] PII redacted before sending to Claude API [ ] Audit logs capture who accessed what and when [ ] Logs never contain message content or PII [ ] Data retention policy matches your compliance needs [ ] Zero-day retention enabled if required (contact Anthropic) [ ] HIPAA BAA in place if handling PHI [ ] User consent obtained for AI processing [ ] Data deletion procedures documented Error Handling Risk Mitigation ------ ------------ PII in prompts Pre-call redaction pipeline PII in responses Post-call output scanning Audit log gaps Centralized logging with alerting Data subject access request Searchable audit trail by userid Prerequisites Define the data classification, processing purpose, legal basis or user consent, and retention owner before sending anything to the API. Provide an approved redaction policy, a secret-manager-backed API credential, and an allowlisted Anthropic workspace or service boundary. Prepare synthetic fixtures that exercise each PII class and a deletion test; do not use real customer records while validating the pipeline. Instructions 1. Classify the input and reject fields outside the approved purpose or destination. Apply deterministic redaction before constructing the request; keep any restoration map encrypted, access-controlled, and short-lived. 2. Run the redaction, prompt, and response scanners against synthetic fixtures. …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills jeremylongshore/anth-data-handling