What can Claude Duet do while you are away—and where must it stop?
Anthropic's US research preview can monitor connected apps and continue tasks in a cloud browser after a device is off. Messages, payments, signatures and deletions require approval, while trading and moving money remain prohibited.
The short version
- What happened
- Claude Duet is a waitlisted US research preview for Pro and Max users, not a generally available service or a measured workplace study.
- Who it affects
- Professionals may gain help with follow-up and preparation while away from a screen, but they also become reviewers of an agent that can combine sensitive information across many services.
- What remains unproven
- This is a company announcement and waitlisted US research preview, not an independent evaluation or general release.
Keep in mind
This is a company announcement and waitlisted US research preview, not an independent evaluation or general release.
Selected tester anecdotes have no denominator, comparator or measured task, productivity, error or safety outcome.
Anthropic says the early version can misread threads and miscalibrate urgency; its browser activity is not yet visible to the user.
Security controls are described by the vendor without published task-level or adversarial-test results in the announcement.
Source analysis · 1 linked source. Primary analysed source date: 21 October 2026.
Keep following the evidence
Join The Impact Brief founding list for selected AI reports, their effect on people and the evidence limits. Read a sample first.
Read the full report · 4 min The evidence, methods, implications and limitations
The agent can keep working after the device is off
Claude Duet changes the interaction model from a person repeatedly opening a chatbot to an agent that can initiate contact. Anthropic says the standalone iOS, Android and web app sends a morning brief, checks connected accounts every few hours and can continue assigned work in a cloud virtual machine even when the user's device is off. The preview shares the subscriber's existing Claude usage limit, so monitoring and long tasks consume the same allowance as conversations.
The company lists more than 6,000 available connectors and plugins. Its examples include finding missed Gmail or Slack messages, drafting invoice reminders from QuickBooks or Stripe, preparing payroll in Gusto, creating a LinkedIn job post, sending documents through DocuSign and managing a Shopify store. It can also prepare purchases through Stripe Link or Shop Pay. These are described capabilities, not measured completion rates across those services.[1]
Approval gates narrow—but do not remove—the risk
Anthropic says the agent reads, drafts and prepares work independently, but pauses before sending a message, making a payment, signing a document or deleting anything. Trading securities and moving money between accounts remain off-limits. The company also says credentials are isolated, an action classifier checks proposed steps and a dedicated classifier blocks the strictest sensitive data, while health or financial information may be sent only after an explicit instruction.
Those controls matter because a background agent combines broad access, stored context and the ability to act. They do not establish that every harmful or mistaken action will be caught. Anthropic says Duet may misread threads, misjudge urgency and cannot yet show users its browser. It cites adversarial testing, an external penetration test and a bug bounty, but publishes no task-level error rate, prompt-injection success rate or independent assessment in this announcement.[1]
The distinction that matters
What happens without—and with—human approval
Anthropic draws a boundary between background preparation, approval-gated actions and prohibited financial activity.
Background
Read connected apps, draft and prepare work
Can continue in a hosted virtual machine
Approval gate
Send, pay, sign or delete
Must show the proposed action and wait
Prohibited
Trade securities or move money between accounts
Unavailable even with approval
For workers, the immediate question is delegation design
For a small-business owner or overloaded professional, the appeal is continuity: a task can progress without keeping a laptop open, while consequential steps return to the human. The new burden is deciding what the agent may see, how often it should interrupt and what evidence is needed before approving an action. Teams should start with narrow connectors, inspect drafts and transaction details, and keep a separate audit trail for approvals. Evidence from representative users—covering completion, error, correction time and harmful near-misses—would be needed before treating the preview as a productivity or safety gain.[1]
Watch the background, then check the evidence
Illustrative photo · not a video frame
UNESCO · 11 min 27 sec · Background explainer
UNESCO Talks: Interview with 2024 Nobel laureate Professor Daron Acemoglu
YouTube loads only when you choose; playback starts when you press play.
Economist Daron Acemoglu discusses how choices about AI affect workers, inequality and society. Pair the interview with our comparison of task exposure, hiring and skills evidence.
Evidence check: An expert interview from 2024, offering a perspective on policy and work rather than a measured forecast of job losses.
Published 2024-10-14. Source checked 14 October 2026. Check captions on the publisher’s video page.
Read the AI and jobs guidePhoto: Dylan Gillis / Unsplash · Licence
Continue the story
Read next
Continue exploring small business: compare the finding and its evidence limits.
Gemini wants to run more of a small business—where should owners keep control?
Google is rolling out a small-business hub that connects marketing, finance and workplace apps. It may reduce repetitive work, but the announcement does not prove time savings, financial accuracy or business growth.
Read the next reportExplore the full source and evidence record
What this means for people
- Professionals may gain help with follow-up and preparation while away from a screen, but they also become reviewers of an agent that can combine sensitive information across many services.
Global context
The preview begins with US Pro and Max subscribers. Organisations elsewhere would need to check service availability, privacy, employment, record-keeping and sector-specific rules before allowing an agent to monitor or act across workplace systems.
What the evidence does not yet show
- This is a company announcement and waitlisted US research preview, not an independent evaluation or general release.
- Selected tester anecdotes have no denominator, comparator or measured task, productivity, error or safety outcome.
- Anthropic says the early version can misread threads and miscalibrate urgency; its browser activity is not yet visible to the user.
- Security controls are described by the vendor without published task-level or adversarial-test results in the announcement.
What to watch next
- Independent measurements of task completion, correction time and harmful near-misses
- Whether users can inspect the agent's browser and reconstruct every material action
- Evidence that approval prompts remain understandable under workload and notification fatigue
- Availability, data handling and governance outside the United States
Living evidence record
Impact record IAI-0F0GLTZ
Evidence stage
Announced
Confidence
Developing
Reporting basis
Source analysis
Independent or research support
Not yet
Record status
Monitoring
Last checked
23 October 2026
Source trail
1 direct source across 1 source type.
People impact
Documented in this record.
Uncertainty
Limits and next checks are explicit.
Stages describe the evidence available—not whether a technology is good or bad. See the public method.
Single-source reporting disclosure
This record analyses one direct source. It can establish what Anthropic published or reported, but it is not independent corroboration of every performance claim or predicted outcome. The confidence label will change only when broader evidence is added.
Evidence trail
Sources used for this report
Links checked 23 October 2026
Research question, topics and regions
Topics: AI agents · Small business · Work automation · Approvals · Prompt injection
Regions: United States
This report is labelled source analysis. We summarise and analyse source material in our own words; company statements remain attributed claims until independently supported. Translated summaries preserve the meaning of the original source and link back to it. Read our editorial standards.
Reader commentary
What does this mean where you are?
Tell us what you have seen at work, in your community or in everyday life. A question is welcome too. No account is needed; we review notes before publishing them.
Explore commentary across the portal →Published reader notes
0No published reader notes yet. You can start the evidence-led discussion above.
Prefer a private correction or response? Contact the newsroom.