Reference Guide for Enterprise Compliance Teams
What: A persistent workspace with uploaded documents (knowledge) and custom instructions.
When: You have a set of documents and rules Claude should always reference for a body of work.
Example: Your "Compliance" project contains the AI Policy, risk matrix, and compliance manual. Every conversation in this project can reference them.
Sharing: Share with specific people (view or edit) or make visible to the whole organization.
What: A portable procedure anyone can run — like a template that tells Claude how to do a specific task.
When: You have a repeatable process you want others to follow consistently.
Example: The "Compliance Checker" skill — any employee runs it, gets a structured compliance report.
Sharing: Provision org-wide (all employees get it automatically) or share with specific people.
Example instructions for a compliance project:
You are assisting the CCO of an SEC-registered RIA. Rules: - AI is a drafting tool only — never a decision-maker - Cite specific policy sections and rule numbers - Flag anything that needs human review - Format output as structured reports Reference the uploaded AI Policy, risk matrix, and compliance manual for all reviews.
A skill is a folder (delivered as a ZIP file) containing:
compliance-checker/
SKILL.md ← required: metadata + instructions
references/ ← optional: supporting documents
ai-policy-rules.md
scripts/ ← optional: Python/Bash/JS scripts
This is the core of the skill. It has two parts:
--- name: compliance-checker description: >- Review documents or AI usage against the firm's AI Policy and compliance requirements. Generates a structured report for CCO review. --- # Compliance Checker [Instructions Claude follows when this skill activates] [When to use, what to check, how to format output]
description field is critical. Claude reads it to decide when to
automatically activate the skill. Write it as if you're telling Claude "use this when someone asks
about..."
| Action | How |
|---|---|
| Share with a specific person | Project settings → Members → add by name or email → choose "Can view" or "Can edit" |
| Make visible to everyone | Project settings → Visibility → switch to "Public" (all org members can see it in the Team tab) |
Claude does not have built-in version history for skills. To maintain versions:
compliance-checker-2026-09-25.zip,
compliance-checker-2026-12-01.zip)Claude does not natively track which users ran a specific skill. Workarounds:
Claude can run tasks automatically on a recurring schedule. This is ideal for daily compliance scans, weekly report generation, or any repeating workflow.
If your M365 connector has write tools enabled, you can configure a scheduled task to draft an email with the results. The draft appears in your Outlook Drafts folder for you to review and send — keeping human-in-the-loop for all outbound communications.
| Limit | Value |
|---|---|
| Max file size (project knowledge) | 30 MB per file |
| Number of files | Unlimited (within context window) |
| Supported document types | PDF, DOCX, XLSX, CSV, TXT, HTML, ODT, RTF, EPUB, JSON |
| Supported image types | JPEG, PNG, GIF, WebP |
| PDF page limit | 1,000 pages |
| XLSX files | Require "Code execution" to be enabled in org settings |
On paid plans, Claude automatically enables RAG (Retrieval Augmented Generation) when your project knowledge approaches the context window limit, expanding effective capacity by about 10x while maintaining quality.
| Feature | Project | Skill |
|---|---|---|
| Always loaded | Yes (in that project's chats) | No (loads on demand when triggered) |
| Carries documents | Yes (knowledge files, up to 30 MB each) | Yes (references folder in the ZIP) |
| Shareable | Yes (view/edit permissions) | Yes (read-only for recipients) |
| Org-wide distribution | Public visibility (anyone can find it) | Owner provisions via Org settings, or share with organization |
| Editable by others | If given "Can edit" permission | No — owner only; recipients get updates automatically |
| Auto-updates for recipients | Changes visible immediately | Recipients get the new version at next use |
| Works in Desktop app | Yes (Windows and Mac) | Yes (Windows and Mac) |
| Can use connectors | Yes (M365, etc. are account-level) | Yes (runs in context with active connectors) |
| Can automate on schedule | No (projects are passive knowledge) | Yes (via Cowork scheduled tasks) |