Is It Safe to Put Company Data into ChatGPT, Claude or Gemini?

Whether it is safe to put company data into ChatGPT, Claude or Gemini depends on three things: which plan you are signed in to, how its privacy settings are set, and what kind of data it is. A personal account with default settings is a different situation from a business workspace your employer has set up.

The short version: on all three providers, business and API plans do not use your data to train models by default, according to their own help pages. Consumer accounts work differently, and each provider has a setting that changes what happens. Below is what each provider’s official pages say, the exact settings to check, and a simple way to decide what can be pasted. Last verified: November 1, 2026.

What each provider says

OpenAI (ChatGPT)

Anthropic (Claude)

Google (Gemini)

Side by side

Consumer defaultSetting to changeBusiness / API default
ChatGPTUsed for model improvementImprove the model for everyone → offNot used for training
ClaudeUsed if you allow model improvement; flagged chats may be usedModel improvement setting; Incognito chatsNot used for training
GeminiSubset of chats human-reviewedKeep Activity → offWorkspace: not used for training without permission

“Not used for training” is not the same as “not stored”. Every provider keeps data for some period to run the service, and each has its own retention rules. If retention matters for your work, read the provider’s retention page for your plan.

The plan is only half the answer

A business plan removes training by default, but the data is still leaving your company. Before pasting, ask:

A traffic-light rule for staff

ColourExamplesRule
GreenPublic website text, published prices, your own draft emails without names, made-up sample dataFine on any approved tool
AmberInternal procedures, non-public plans, customer names in emails, sales figuresBusiness plan only, minimum needed
RedPasswords and API keys, card or bank numbers, ID numbers, health or HR records, client files under NDADo not paste

Most tasks work as well with amber or red details removed. A complaint reply does not need the customer’s address, and a formula needs only column headers, as our spreadsheet formulas guide shows. For meeting transcripts, see how to summarise meeting notes.

Settings checklist

  1. Find out which account you are using: personal or a workspace managed by your employer.
  2. On a personal ChatGPT account, decide on Improve the model for everyone in Settings → Data Controls.
  3. On a personal Claude account, check the model improvement setting in privacy settings, and use Incognito chats for one-off sensitive drafts.
  4. On a personal Gemini account, check Keep Activity, or use a temporary chat.
  5. For a team, prefer a business plan or the API, and write down which tools are approved. Our AI acceptable use policy template has a ready-made section for this.

What a business plan costs

If the safest option is moving a team from personal accounts to a business plan or the API, compare the costs first. ChatGPT Plus vs Claude Pro vs Google AI Pro compares the individual plans and works through when the pay-as-you-go API is cheaper.

Frequently asked questions

Does ChatGPT train on what I type?

On personal Free, Plus and Pro accounts, OpenAI says data sharing for model improvement is on by default and can be turned off with the Improve the model for everyone setting. For ChatGPT Business, Enterprise, Edu and the API, OpenAI says inputs and outputs are not used for training by default.

Does Claude train on my chats?

For consumer accounts, Anthropic says chats are used for training if you allow it in the model improvement setting, or if they are flagged for safety review. For commercial products such as Claude for Work and the API, it says inputs and outputs are not used for training by default.

Do people read my Gemini chats?

In the Gemini app, Google says a subset of chats are reviewed by human reviewers and asks you not to enter confidential information you would not want a reviewer to see. Turning off Keep Activity stops future chats being reviewed.

Is a business plan enough to make confidential data safe?

It removes training by default, but it does not make every use appropriate. Contracts, data protection law and your own policy may still forbid sharing some data, such as health records or client files, with any outside service.

What should I never paste into an AI chat?

Passwords, API keys, full card or bank numbers, government ID numbers, and health or HR records about identifiable people. Removing them rarely changes the quality of the answer.

Sources

Written by Editorial team · Last updated: · Facts last verified: · Editorial policy