Typical tasks
- Email and calendar briefing
- Connected SaaS work
- Background research and documents
- Follow-ups and proactive suggestions
AnthropicEvidence-based agent profile · Enterprise & Produktivität
Claude Duet
Proactive Claude agent with a cloud computer that prioritizes connected-app work, continues in the background and asks approval for consequential actions; US waitlist preview only.
What is Claude Duet?
Direct answer: Proactive Claude agent with a cloud computer that prioritizes connected-app work, continues in the background and asks approval for consequential actions; US waitlist preview only.
This profile summarizes product-specific primary sources, not an independent audit. Missing controls are unknown, not false.
ProductClaude Duet
ProviderAnthropic
CategoryEnterprise & Produktivität
StatusUS waitlist for Claude Pro and Max; separate iOS/Android app and web, not Team/Enterprise
Sources checked2 · October 26, 2026
Documented control1 / 36 · vendor statement
Functions and how it works
Duet inherits Claude memory, skills and existing connectors and runs on a separate cloud computer. It periodically checks connected services, surfaces work and carries out multi-step tasks. Anthropic describes approvals before sending, signing, paying or deleting.
Product strengths
- Cloud computer continues after app closes
- Reuses Claude connectors
- Approval before consequential actions
- Voice and text interaction
Critical checks
- US Pro/Max invite only
- Background checks use plan limits
- Review connector scopes and prompt injection
- Do not equate with Cowork or Enterprise
For individuals and enterprises
Individual use
Useful to invited US professionals with heavy inbox and calendar workloads. Anthropic notes that personal errands, including ticket purchases, are weaker in this early build.
Enterprise use
Not yet available on Claude Team or Enterprise. Administrative SSO, audit and compliance features elsewhere in Claude should not be inherited as confirmed Duet capabilities.
Detailed product analysis
How Duet differs from Cowork
Cowork mainly handles knowledge-work requests initiated by users. Duet adds proactive discovery of outstanding work, scheduled checks and follow-up prompts. They share parts of Claude but are separate products with separate access requirements. A Cowork subscription does not itself prove eligibility for Duet.
Background execution and limits
Duet operates on its own cloud computer and reuses connected Claude services. It produces morning email and calendar briefs and revisits selected sources throughout the day. Multi-step tasks such as forecasts, reports or websites can use many model turns. These runs count against the account's normal Pro or Max limits.
Safety and privacy boundaries
Emails, documents and webpages can contain untrusted instructions. Anthropic explicitly warns about prompt injection and describes approval gates for consequential actions. A vendor's safety design is not equivalent to independent testing. Start with read-only access, audit connector scopes, and check the original evidence for significant outputs.
Access and purchase decision
The research preview is restricted to invited US Pro and Max users; invitations roll out in waves. There is no documented general German, Team or Enterprise availability at this check date. The practical value of proactive action should be measured in controlled workflows before sharing extensive accounts.
Decision-ready field audit
The following checklist separates a vendor feature description from the evidence needed before adopting this product. A missing control is not evidence that it does not exist.
Capabilities
Primary sources describe the task scope, but not an independently measured success rate.
Access and region
US waitlist for Claude Pro and Max; separate iOS/Android app and web, not Team/Enterprise
Operational validation
Actual permission, latency, failure recovery and costs depend on the deployed application.
Suggested evaluation exercise
A pilot should use a read-only connector, a separate calendar and limited test mailbox. Check whether the morning brief prioritizes correctly, how errors can be corrected and how many plan limits periodic checks consume. Record whether approval is visibly required before a draft message is sent. Without a US invitation, first-hand testing is unavailable.
How to read vendor claims
The sources below are original product documentation. Statements about feature availability are scoped to the dated rollout, platform and customer plan. Marketing descriptions of security or compliance do not establish legal compliance for your scenario; review the current vendor terms and request audit artifacts separately.
Trust, security, privacy and EU AI Act
Source limitation: Only one narrowly scoped control is documented. The remaining 35 controls are unknown; this is not a compliance rating or safety certification.
Product access rules, data processing, contract commitments and action logs must be assessed in the actual tenant. The EU AI Act classification depends on deployment purpose and human oversight, not on the product label alone.
Access, costs and decision criteria
US waitlist for Claude Pro and Max; separate iOS/Android app and web, not Team/Enterprise
Check real entitlement, supported region, usage quotas, connector permissions and cancellation terms against the latest provider documents before purchasing.
Alternatives and related profiles
These links lead to separate AgentenCode profiles. Similar providers do not share identical trust evidence or access conditions.
Primary sources and claim scope
What does the manufacturer establish? Vendor documentation establishes only the stated product scope and date. No independent functional or penetration test was conducted.
Frequently asked questions
Is Claude Duet available outside the US?
The documented research preview requires an eligible US Pro or Max account and a waitlist invitation.
Is Duet the same product as Cowork?
No. Duet is a distinct proactive app with background checks and different access rules.
Do background tasks consume extra credits?
They count against the existing Pro or Max usage limits, including session and weekly limits.
Can Duet send a message without review?
Anthropic describes approval before messages and other consequential actions are sent or executed.
Has its full security been independently audited?
No independent end-to-end Duet security audit was established from these sources.
History and review status
· New source-scoped profile added. No independent tenant test or security certification has been performed.
Agent history →