From Anthropics recent blog post: https://www.anthropic.com/news/detecting-and-preventing-dist...

> By examining request metadata, we were able to trace these accounts to specific researchers at the lab.

> The volume, structure, and focus of the prompts were distinct from normal usage patterns

Clearly some employees of Anthropic personally looked at individual inputs and outputs of their API

I thought that was pretty open? Even their more privacy-oriented Zero Data Retention agreement (which isn’t so easy to get on your business account) includes an exception “where needed to comply with law or combat misuse”