Your Boss Can Finally Audit Claude: Smart Reports, Surveys and Shared Budgets Go GA
On October 28, Anthropic made Claude Enterprise Smart Reports, in-app surveys and pooled group budgets generally available: reports break spend down by workstream, surveys add employee experience, and shared budgets pool idle allowance. This article covers what each tool does, where the privacy guardrails sit, and why accounting for spend is not the same as proving return.

In one line: bosses can finally audit the Claude bill, but the audit itself is now the controversy
On October 28, Anthropic moved three Claude Enterprise features to general availability: Smart Reports, in-app surveys, and pooled group budgets. In plain terms, the first tells you what employees did with Claude, what they produced, and what it cost; the second asks employees directly how much time Claude saved them and what would slow down without it; and the third gives a whole team a shared monthly spending limit, while keeping individual limits in place, so one heavy user no longer runs dry while a colleague's allowance sits unused.
All three were in beta since September, so the October 28 change is not "from nothing to something." It is Anthropic promoting these tools to standard Enterprise capability. The pressure behind it is easy to understand: when a company's Claude bill grows from thousands to hundreds of thousands a month, the finance team will eventually ask where the money went and whether it was worth it. Until now the answer relied on gut feeling and scattered usage numbers. Anthropic now offers an official, drillable way to answer. But the same tooling immediately raises a second question: when a report can drill down to a particular session and a category called "inefficiencies," will employees feel that every conversation has been put on a management dashboard?
The short verdict is that this is a very purchaser-friendly release and a real test of employee trust management. Smart Reports are considerably stronger than traditional usage statistics, but they prove where money went and what it cost, not whether it was worth it. Surveys add subjective experience, but self-reported data carries its own bias. Pooled budgets fix uneven allowance allocation, but the rules for "who runs out first, and who gets stopped" must be explained in advance. Enterprises can adopt this, but they should first write down the purpose, the permissions, and the communication plan, or the budget saved may cost more in lost trust than it gains in control.
What Anthropic actually shipped: three tools, three jobs
The first tool is Smart Reports. According to Anthropic's official help documentation, an administrator first picks the scope: a team, a period of up to the last 28 days, and one or more products (chat, Claude Code, Claude Cowork, or the unified chat and Cowork experience), plus focus areas and custom questions. Claude then reads a sample of transcripts in that scope, groups them into workstreams and output types, attaches spend to each group, and writes up the findings. A report includes workstream distribution, deliverables produced, average spend per session by output type, task outcomes, the most common pain points, sessions Anthropic calls "inefficiencies," the most complex autonomous work, work that is new to the organization, work people automated for themselves, the most expensive sessions, answers to custom questions, and a recommendations list.
Several official details define the boundaries of the report and are worth recording exactly. Each organization can generate up to 10 reports per month at no charge; queued and in-progress reports count toward the limit, failed reports do not, and the limit resets on the first day of the next calendar month, with further reports arranged through the account team. Reports usually take a few hours to generate, an email arrives when one is ready, and reports also appear in the Analytics Smart reports list. Smart Reports are off by default and must be switched on by an organization owner, so an enterprise is not silently monitored simply by buying the plan. That default-off choice matters: adoption requires a deliberate enabling step.
The second tool is in-app surveys. Administrators can ask employees questions inside Claude, customize the questions, choose recipients, and export answers to a spreadsheet. In Anthropic's framing, surveys ask three kinds of things: what valuable work Claude helped complete, how it changed the time a task took, and what would slow down if access disappeared. Those questions target something usage numbers cannot supply: employees' own experience. Precisely because it is experience, it can corroborate but cannot replace business outcomes.
The third tool is pooled group budgets. A team gets a shared monthly allowance while each member keeps an individual limit; every request counts against both, and a member stops when either limit runs out first. Billing administrators receive email alerts when the shared budget reaches 50%, 75%, 95%, and 100%. Members can request more capacity inside Claude, and administrators can see in Smart Reports whose work is being held back by a personal limit and, with billing permission, raise that limit directly from the report. Anthropic also says the system suggests a budget based on recent usage, that members can belong to multiple pooled budgets, and that administrators can rank those budgets by priority.
The sensitive part: how deep the drill-down goes, and where the privacy guardrails sit
The most valuable part of Smart Reports is also the most likely to cause friction: it does not stop at totals. A manager can click into a workstream and see sessions ranked by cost, each with a one-paragraph summary, the product used, the date, and the output type, filterable by subcategory and downloadable as HTML with drill-downs intact. For a manager, that finally answers "which kind of work is the money going to." For an employee, it means a sample of their conversations may appear, summarized, on someone else's screen.
Anthropic's official privacy guardrails should be stated rule by rule, because they are specific rather than rhetorical. First, sessions involving restricted topics are used only for aggregate analysis, with no summaries and no drill-down; personal conversations likewise include no individual sessions or names. Restricted topics cover protected characteristics, health and medical matters, union activity, harassment, whistleblower and legal complaints, political or religious views, personal life, and sentiment about a named person, and custom questions cannot touch them either. Both guardrails are always on and cannot be switched off. Second, attribution to individuals is off by default: drill-down views show "User" instead of names, an organization must separately enable attribution before anyone can reveal a name, and each reveal is logged.
Third, Anthropic's stated purpose boundary is explicit: Smart Reports help administrators understand adoption and plan investment in Claude, and they are not designed for, and should not be used for, evaluating individual performance or making employment decisions. But there is a gap between a statement and reality: the tool itself does not prevent a manager from taking an aggregate "inefficiency" or "personal or off-topic" figure into a performance conversation as supporting color. A tool can declare a purpose; only an organization's internal rules can enforce it.
Fourth, availability itself has hard exclusions. Organizations using customer-managed encryption keys, a HIPAA configuration, or a hybrid deployment cannot use Smart Reports at all, and organizations with zero data retention for Claude Code get reports covering chat and Cowork only. These are not footnotes; they are a pre-purchase checklist. If your organization falls into one of these configurations, the October 28 general availability may, for you, be someone else's feature.
Does it prove ROI? It can account for spend; that is not the same as proving return
The hardest question in enterprise AI buying has never been "how much did we spend" but "was it worth it." Smart Reports go halfway. They break spend down from a total into workstreams, output types, and sessions, turn "what got done" from a feeling into browsable output categories, and turn "where did it get stuck" from complaints into countable pain-point categories, such as a missing connector, output that did not match the request, approval or sign-in gating, tool failures, and rework loops. That information is genuinely useful for optimizing spend: you can see which team is burning tokens on rework, or which missing connector is causing a batch of wasted sessions.
But reaching "worth it" needs two more steps that Smart Reports alone cannot supply. The first is converting outputs into business results: a document written, a piece of code generated, or an analysis produced is not, by itself, revenue, cost saved, or risk reduced, unless the enterprise connects outputs to business metrics itself. The second is ruling out other explanations: if a team's output rose this month, was it because of Claude, because headcount grew, because a project cycle peaked, or simply because work previously done elsewhere moved into Claude? A report can show correlation; it cannot establish causation.
Surveys supply a third kind of evidence: employees' own sense of value. When employees say time was saved or work would slow down without Claude, that is valuable for judging whether a tool is really being used. But self-reported data has systematic bias: people who enjoy the tool are more likely to answer, and respondents tend to overstate time saved and understate rework. The sound approach is to read all three kinds of evidence together: Smart Reports for hard numbers on usage and spend, surveys for soft signals on experience and friction, and business metrics for the final value judgment. Reporting ROI from any one of them alone is cherry-picking.
Pooled budgets: they fix uneven allowances, not insufficient allowances
Before pooled budgets, the familiar Enterprise embarrassment was this: heavy users hit their individual limit mid-month and had to stop until the next month, while light users' allowances expired unused at month's end. A pooled budget pools the idle allowance: the individual limit stays as a guardrail against one person consuming without restraint, and the team pool lets peak demand borrow from elsewhere in the group. Whichever limit runs out first stops the member. The rule is simple and easy to explain to employees.
The design also creates two new management questions that should be settled in advance. The first is fairness: is the team pool first-come, first-served, or allocated by project priority? If one member uses most of the pool early in the month and colleagues' normal work is stopped at month's end, who is responsible? Anthropic lets members belong to multiple budgets with administrator-set priorities, which gives managers a lever, but a lever does not automatically produce fairness; fairness comes from a priority rule agreed inside the team beforehand. The second is approval: members can request more capacity inside Claude and administrators can raise limits directly from a report, so the smoother that path becomes, the easier it is for allowance management to turn into "whoever asks, gets" rather than "whoever needs most, gets." Keep the request, approval, and record as a fixed workflow, with reasons, approvers, and changes logged, or nobody will be able to explain at year-end how the allowance was spent.
The alerting itself deserves credit: email alerts at 50%, 75%, 95%, and 100% give administrators a window to intervene instead of discovering an empty pool at month's end. But alerts go only to billing administrators, not directly to team members, which means front-line employees could be stopped without warning. If a team wants employees to manage their own pace, budget usage should also be visible to team leads, not only to the billing administrator.
A rollout checklist: write the rules before switching the feature on
First, write a purpose statement and make sure employees can see it. At minimum it should cover four points: Smart Reports are for understanding team adoption and planning investment, not for individual performance evaluation or employment decisions; reports do not show names by default, revealing a name requires a separate setting, and every reveal is logged; restricted-topic and personal conversations feed only aggregate analysis, not session detail; and employees can see which teams are in scope and whether the feature is enabled. A statement buried in an internal document does not count; it must reach employees before the feature is switched on.
Second, apply least-privilege permissions. Those who can create and view reports should be owners, administrators, and custom roles with analytics view access; team leads should see only their own groups, not the whole organization. Anthropic supports scoping by team, department, and cost center, including department and cost center attributes passed via SCIM, and those capabilities should be used rather than granting everyone full-organization visibility for convenience.
Third, run a one-month pilot with a control comparison. Pick one team, generate a report, and collect survey feedback and business metrics alongside it. Check whether the report's pain points and "inefficiency" categories match the team's lived experience, whether the most expensive sessions were genuinely worth their cost, and whether the recommendations, such as turning a recurring workflow into a skill or adding a rule to a code repository, contain actionable items. If the report's conclusions diverge widely from front-line experience, suspect that the scope was drawn too coarsely or the sample is unrepresentative before using the report for budget decisions.
Fourth, check your own configuration against the availability exclusions. Customer-managed keys, HIPAA configuration, hybrid deployment, and zero data retention each change what you will see. Verify against the official documentation before promising leadership a complete report, or you may find that a key product line is out of coverage after the promise has been made.
Judgment: friendly to buyers, demanding on trust management
Taken together, the three tools reveal Anthropic's intent clearly: when enterprise customers start auditing AI spend seriously, the vendor must supply the auditing tools, or customers will renew on feeling alone. Smart Reports provide a drillable ledger, surveys provide the employee perspective, and pooled budgets provide flexibility in allowance allocation. Combined, they move Claude Enterprise one step from "a good AI assistant package" toward "an enterprise investment that can be managed."
But that step also puts a previously blurry question on the table: when an AI assistant's usage can be analyzed, categorized, ranked, and priced, where is the trust boundary between employee and employer? Anthropic's answer includes off-by-default activation, aggregate-only protection for sensitive topics, anonymous-by-default drill-downs, logged reveals, and a purpose statement, and all of those design choices deserve credit. The final answer, however, is not in product documentation; it is in each organization's own rules. Whether reports are used to improve workflows or to grade individuals, whether budgets are used to pool idle allowance or to quietly throttle use, and whether surveys are used to listen or to perform listening, are choices the tool will not make for you.
One closing thought: the October 28 general availability lets enterprises account for Claude spend more completely for the first time, but accounting is only the beginning. What decisions follow, how they are communicated, and how trust is protected are what will decide whether this tooling creates value or resistance. The next time a leadership team walks into a meeting carrying a Smart Report, it is worth asking one question first: is this report meant to help the team do better work, or to prove that someone's work was not good enough? Depending on the answer, the same report means something entirely different.
Comments (0)
Sources
Related articles

On October 28, Microsoft opened the agent harness behind its Copilot products through Foundry: 20+ models plus bring-your-own-key, with Microsoft running the agent loop and sandbox. This article unpacks what was actually opened, why now, and the three questions to settle before adopting it.

On October 28, Google announced Gemini 4 Carbon, with strong cybersecurity scores and multi-day task ability, but first access goes only to a small group of vetted cyber defenders, with no date for developers or consumers. This article unpacks its scores, pricing, and safety claims, and judges whether it is worth chasing now.

On October 26, 2026, Anthropic released the Claude for Nonprofits plugin, built with about 30 nonprofits: skills for fundraising, hiring, marketing, and governance, aimed at teams where over 75% have fewer than 10 seats. This piece explains the three areas, why the map-first design is the part worth copying, and the boundaries the announcement does not guarantee.