Claude Cowork for Australian businesses: what it does with your files and apps, what it costs, the privacy risks, and how to run a safe two-week pilot.
Claude Cowork is Anthropic’s agent for everyday knowledge work: you describe an outcome, and Claude works through your files, folders and connected apps until it hands back a finished spreadsheet, report or document for you to check. For an Australian small or mid-sized business, Claude Cowork is worth a structured pilot on repetitive, document-heavy jobs such as month-end reporting. It isn’t yet something to point at client records or data covered by residency commitments.
TL;DR: Claude Cowork comes with every paid Claude plan, from US$20 a month for Pro, and is being merged into the standard Claude app. It is strongest at multi-step work across spreadsheets, documents and connected tools, including scheduled jobs that run in the cloud. Run it on a Team plan, keep sensitive files out of its folders, and pilot one workflow for two weeks before widening access.
What Claude Cowork actually is in late 2026
Anthropic released Cowork as a research preview for Max subscribers on macOS on 12 January 2026, describing it in its release notes as bringing “Claude Code’s agentic capabilities to the Claude desktop app for knowledge work beyond coding”. It reached general availability on macOS and Windows on 9 April and arrived on web and mobile on 7 July. On 16 September Anthropic announced that Claude Cowork and chat are now one Claude: Pro and Max users no longer choose where a task goes, because Claude works out what each request needs. Anthropic declared the unified experience generally available for Enterprise on 23 October. Its September post said Team and Free plans “will follow soon”, with no date.
Anthropic’s getting started guide says Cowork can read and write files in local folders you connect through the desktop app, use connectors, and install plugins that bundle skills, connectors and sub-agents into one package. The Cowork product page gives Microsoft 365 as a connector example and Finance and Legal as plugin examples. Scheduled tasks run in the cloud at whatever cadence you set, with your computer asleep. Large jobs get split across sub-agents working at the same time, and the desktop app has a built-in browser. Computer use, where Claude operates your screen, is still a research preview.
One recent change catches people out. Cowork now runs sessions in the cloud by default; on Pro and Max, only tasks started on the computer before 6 October still need the desktop app open. Team owners can switch cloud sessions off; on Enterprise they stay off until an admin grants them. Either way, Anthropic’s safety guide says plainly that work, including local files opened through the desktop app, “is processed on Anthropic’s servers rather than staying on your computer.”
What Claude Cowork costs
Prices checked on 26 October 2026 against claude.com/pricing and the Cowork product page. Anthropic quotes US dollars, says the prices “don’t include applicable tax”, and publishes no Australian dollar price list. What lands on your card depends on the exchange rate and any tax added on top.
| Plan | List price (US$) | Who it suits |
|---|---|---|
| Pro | $20/month, or $17/month billed annually | A sole trader testing Cowork on their own files |
| Max 5x / Max 20x | $100 / $200 per month | Heavy individual users who hit Pro limits |
| Team, Standard seat | $25/seat monthly, $20 annually | Teams of 2 to 150 needing central billing and admin |
| Team, Premium seat | $125/seat monthly, $100 annually | Staff running long or frequent agent tasks |
| Enterprise | $20/seat/month billed annually, 20-seat minimum, plus usage at API rates | Larger firms needing SCIM, audit logs and custom retention |
The seat price is half the story. Anthropic warns that Cowork uses limits faster than chat, because one request can fan out into dozens of tool calls and sub-agents. A Pro seat that feels generous for drafting emails can run dry halfway through a quarter-end reconciliation. Budget Team Standard seats for most staff and Premium seats only for the two or three people running the heaviest jobs.

Where it earns its keep, and where it falls short
The best uses are dull, recurring and document-shaped. Point Cowork at a folder of exported Xero reports, a sales spreadsheet and last month’s board pack, and ask for an updated pack with variance commentary. Give it past tender responses and a capability statement, and it will assemble a first draft against a new request for tender. Set a weekly scheduled task to refresh a competitor summary from public websites. Each of these has a person who knows what good looks like and checks the output before it goes anywhere. Where a quiet error is expensive (payroll, tax positions, legal advice), treat the output as a draft and nothing more.
Anthropic documents most of the risks itself.
Prompt injection. Malicious instructions hidden in an email, web page or document can try to redirect the agent. Anthropic scans untrusted content and trains Claude to refuse such instructions, but says the risk is “still non-zero”. An agent that can both read your inbox and send email is the combination to watch.
File access and approvals. Cowork reaches only the folders you connect, but anything inside them is fair game. Anthropic advises against granting access to “local files with sensitive information, like financial documents”. There are three approval modes: manual, automatic (a safety check screens each action) and skip, in which “nothing checks its actions”. Skip has no place in a business, and note that on Team plans new tasks start in automatic mode by default.
Data residency. This is where we’d slow down. In the standard Claude apps, conversations are stored on Anthropic’s own backend, and Anthropic’s data residency controls for its developer platform currently offer only US or global inference, with US storage. Anthropic’s answer for in-region processing is Claude Desktop on third-party platforms, pitched at organisations that “cannot send conversation data to the United States”. It sends Cowork’s inference to Amazon Bedrock or Google Cloud in a region you select and keeps conversation history on the user’s device. That is a managed IT rollout, not a setting a small business flips on.
Privacy Act. The OAIC’s guidance on commercially available AI products says privacy obligations apply to personal information you put into an AI system, and recommends against entering personal information, particularly sensitive information, into publicly available generative AI tools. Offshore processing of client data can also raise APP 8 cross-border disclosure questions. Plan choice matters: Pro and Max are consumer plans where training depends on a setting you control, while for its commercial products, Team and Enterprise included, Anthropic says it won’t use inputs or outputs for training by default.
If you can’t yet say which workflows are safe to hand over, that is what our AI Quick-Win Audit is for: a $2,950 flat-fee working session that maps one or two high-friction workflows, ranks the opportunities by estimated time and dollar impact, and includes a live demonstration of one of them.
Claude Cowork vs Duet, Claude Code, Copilot and ChatGPT
Anthropic now sells several agents, and Microsoft and OpenAI both have direct equivalents.
| What it does | Where the work happens | Australian access | How you pay | |
|---|---|---|---|---|
| Claude Cowork | Multi-step tasks you assign across files, connectors and a browser | Anthropic’s cloud, with local folders via the desktop app | Available now | Included in Pro, Max, Team and Enterprise |
| Claude Duet | Proactive agent that briefs you and works in the background | Its own virtual machine with a browser | Not yet: US-only waitlist since 21 October 2026 | Included in Pro and Max |
| Claude Code | Coding agent for building and maintaining software | Terminal, code editor, desktop app or browser | Available now | Included from Pro up |
| Microsoft Copilot Cowork | Background tasks across Microsoft 365 data | Microsoft’s cloud, inside your Microsoft 365 trust boundary | Generally available worldwide since 16 June 2026 | Microsoft 365 Copilot licence plus usage in Copilot Credits |
| ChatGPT workspace agents | Shared team agents used in ChatGPT or Slack | OpenAI’s cloud | On Business, Enterprise and Edu plans | Plan seat plus credit-based usage |
Cowork waits for you to assign a task; Claude Duet watches your connected apps and comes to you with what needs doing, and it refuses to move money between accounts even with approval. Australians can’t get Duet yet, so Cowork is the Anthropic agent you can actually buy.
Copilot Cowork deserves more attention than its borrowed name suggests. Announcing it in March, Microsoft said “working closely with Anthropic, we have integrated the technology behind Claude Cowork into Microsoft 365 Copilot”, so a business living in Outlook, Teams and SharePoint gets similar capability with Microsoft’s sensitivity labels, audit log and eDiscovery already applied. Microsoft’s general availability announcement says it is off by default, requires a Microsoft 365 Copilot licence and is billed per task in Copilot Credits (our Microsoft 365 Copilot guide covers that cost, and Copilot vs Gemini vs ChatGPT for business the wider comparison).
We’d base the choice on where your documents already live. If they’re spread across local drives, Google Drive and a mix of apps, Claude Cowork is the more flexible tool and the easier one to trial, since a Team seat starts at US$20 a month billed annually and Copilot Cowork needs a Microsoft 365 Copilot licence before you spend a single credit. If they’re fully inside Microsoft 365, with IT already rolling out Copilot, Copilot Cowork will be easier to govern. ChatGPT workspace agents suit teams that want one shared agent everyone runs the same way.
How to pilot it without regretting it
Having led digital transformation programs for organisations including NSW Government, UNSW Sydney and Telstra, I’ve seen good tools fail far more often for want of a narrow first use case than for lack of capability. I’d expect Cowork to follow the same pattern.
Pick one recurring task that someone does by hand each week or month and that someone else already reviews. Set it up on Team, not personal Pro accounts, so an administrator controls access, connector approvals and spend limits. Create a dedicated folder holding copies of only the files the task needs, and switch approvals to manual for the first fortnight, because Team doesn’t start there. Time the task before and after, and log every correction the reviewer makes.
Write the rules into your AI policy before a second team starts, and use the National AI Centre’s Guidance for AI Adoption as your checklist for accountability and human oversight. Our guide to a 90-day AI pilot covers turning the result into a business case.
The verdict on Claude Cowork for business
Claude Cowork is the most capable general-purpose work agent most Australian SMBs can buy today, and at US$20 to US$25 a seat per month it is cheap to test. It is not a set-and-forget employee. Run it on Team, confine it to a dedicated folder, leave approvals on, and keep personal and client information out of it unless your IT provider has set up an in-region deployment.
If you’d like help choosing the first workflow and setting it up properly, book a free 30-minute fit call for the AI Quick-Win Audit. The $2,950 fee is credited in full toward any project of $10,000 or more commissioned within three months. You can also read how we handle AI tools and automation setup and process automation within our AI and automation practice, or get in touch.
Frequently Asked Questions
Is Claude Cowork included in Claude Pro?
Yes. Claude Cowork is included in every paid Claude plan: Pro, Max, Team and Enterprise. Pro costs US$20 a month, or US$17 a month billed annually, before tax. Cowork uses your plan’s limits faster than chat, so heavy users may need Max or a Team Premium seat.
Is Claude Cowork the same as Claude Duet?
No. Cowork carries out tasks you assign across your files and apps, while Claude Duet is a separate proactive agent that monitors your connected apps and brings you what needs attention. Duet opened on 21 October 2026 as a US-only research preview, so Australian businesses can’t use it yet.
Can Claude Cowork access files on my computer?
Yes, through the Claude desktop app, but only in folders you choose to connect. Anthropic says local files opened this way are processed on its servers, and recommends a dedicated working folder rather than access to sensitive financial documents.
Does Claude Cowork keep data in Australia?
Not in the standard Claude apps, where conversations are stored on Anthropic’s backend and Anthropic’s own residency options are US or global only. Organisations that need in-region processing can deploy Claude Desktop on a third-party platform such as Amazon Bedrock or Google Cloud, which keeps conversation history on the user’s device and sends inference to the region you configure.
What’s the difference between Claude Cowork and Microsoft Copilot Cowork?
Claude Cowork is Anthropic’s own product and works across local files, connectors and a browser. Microsoft Copilot Cowork was built with Anthropic, integrating what Microsoft calls “the technology behind Claude Cowork” into Microsoft 365, and is governed by your existing Microsoft compliance controls, and needs a Microsoft 365 Copilot licence plus usage billed in Copilot Credits.