Can you limit which files/folders Claude's co-work feature can access, or does it see everything?

You're supposed to be able to point co-work to exactly which folders it should access. However, one member noted getting comments suggesting it was seeing more than intended, and when they asked Claude directly whether it was seeing everything, it denied doing so. The group didn't fully resolve whether co-work can "roam" beyond the pointed folders — one member's IT provider had flagged in fine print that the tool "could roam" even when pointed to a specific location, which raised concern. The broader view expressed was that many existing tools already use AI to scan files and emails (e.g., AI summaries), and clients already send sensitive data like Social Security numbers over email, so this risk isn't entirely new — though violating 7216 was noted as a serious matter (potentially involving jail time), and the group agreed each firm has to decide its own risk appetite. No one had personally observed the tool hallucinating or acting erratically.