Five questions before entering business information
- What is the information? Is it public, confidential, personal, commercially sensitive or legally protected?
- Which product and account are being used? A personal consumer account and an organisation-managed business workspace may have different data controls and contractual terms.
- Who can access it? Consider administrators, connected applications, shared links, authorised staff and the provider.
- What happens to it? Check retention, deletion, service improvement and whether data may move across jurisdictions.
- What happens if the output is wrong or exposed? Consider customers, staff, contracts and legal obligations.
A provider not using data for model training is an important distinction, but it does not mean the data is never stored, processed, accessible under permissions or subject to other terms.
What differs between ChatGPT plans?
According to OpenAI's current documentation, business offerings such as ChatGPT Business and Enterprise exclude workspace content from model training by default. Consumer services may use content to improve models depending on the user's settings and other conditions. These details can change, so check the current official terms and your organisation's configuration before using real business data.
Even with a managed business product, permitted use is not automatic. Your customers' confidentiality, the nature of the data, staff authorisation, tool permissions and applicable law still matter.
Unlock the rest of this lesson
You're halfway through. Enter your email to read the full lesson, use the exercises and quizzes, and unlock the rest of The Business of Growth library.
Already signed up through The Business of Growth? Use the existing signup to return and unlock this browser. No payment required.
Worked example: a customer complaint
Fictional example. A plumbing company wants help responding to a complaint containing a customer's home address, phone number and medical circumstances. An employee is tempted to paste the entire email into a personal AI account.
A safer first approach is to remove identifying and sensitive details, use a fictional summary and ask for a general response structure. The employee then drafts the real reply using authorised systems, checks facts and escalates any legal or safety issue. If the business later wants AI to process genuine complaints, it must assess and approve that specific tool and data flow.
Other risks beyond privacy
AI may invent facts, misread a document, include biased assumptions or follow malicious instructions embedded in material it reads. Connected AI tools can also create risks through excessive permissions or unsafe integrations. These risks are relevant even when the tool does not use the information for model training.
Australian privacy and cybersecurity guidance recommends assessing products before use, controlling what data staff enter and retaining human oversight where consequences matter.
Your next action
Your notes stay on this page unless you choose device saving, download them or submit them to Greg below.
Keep names, private customer details and confidential information out of your notes. Device saving is optional. Only the separate Send my lesson work button below sends anything to Greg. There is no account or cross-device sync.
Two questions before you move on
These checks support learning. They do not assess business health, award a qualification or send a result to Greg.
Ask Greg
Ask a question about this lesson or a challenge in your own business. I read submissions and may reply or cover common questions in future lessons. I cannot promise an individual reply to every question.
Lesson: Is ChatGPT Safe for Business Use?. Please do not include confidential client, financial, health or staff information.
Questions this lesson answers
Is a business AI subscription automatically private?
No. Privacy depends on the specific service, contract, configuration and data practices. Review the current official documentation, not marketing labels alone.
Should I upload contracts and staff records to an AI tool?
Only when the tool and use have been appropriately assessed and authorised, with controls suited to the information. For an initial learning exercise, use invented or properly de-identified material.
Work out where your business is getting stuck
The free Growth Diagnostic asks ten questions across acquisition, conversion, relationships, delivery and commercial control. It gives you an area to investigate and three things you can do next.
One complete sample lesson in each stream is fully open. Read halfway into every other lesson, then enter your email to unlock the remaining content, exercises and quizzes across the library. Ongoing marketing emails are optional.