A guide to securing Claude Code deployments at enterprise scale through six control layers: SSO identity management, centralized gateway routing via TrueFoundry’s AI Gateway, MCP tool governance through TrueFoundry’s MCP Gateway, local sandboxing with managed settings, audit logging to SIEMs, and compliance-aligned data retention.