How do I keep client data confidential when using AI tools?
Pasting a client's financials into a free AI tool can breach an NDA. A few rules prevent it.
- Can I paste client data into ChatGPT?
- What do NDAs say?
- Which tools are safe?
Use business or enterprise AI plans where your data isn't used for training and retention is controlled. Check NDAs and contracts for restrictions. Remove names and identifying details where possible. Write a short AI policy and tell clients how you use AI. Keep a record of which tools touch client data.
A simple policy
- Approved tools only.
- No client data in free tools.
- Anonymize where possible.
- Check each NDA.
- Tell clients how you use AI.
How we look at it at ShoutEx
We help set up approved AI tools and policies for small consultancies.
- Free tools for client work.
- Ignoring NDAs.
- No policy.
- Hiding AI use.
- Business plans.
- NDA checks.
- Written policy.
- Transparency.
What consultants say
Here is what regulators and consultants say.
Privacy principles for AI tools.
Read the principles →Community summaries describe recurring themes in public threads, not individual posts. Vendor pages describe vendor claims, so test them on your own calls.
Read next
Go deeper in the ShoutEx guides, or check the sources behind this answer.
We'll help set up approved tools and a policy.
Book a call →Follow-up questions
Should I tell clients I use AI?
Yes, briefly, in contracts or onboarding.
Are enterprise plans enough?
They help. Still follow NDAs.
Can I run AI locally?
Some firms do, for sensitive work.