---
title: 'Is It Safe to Use ChatGPT and Copilot at Work?'
url: 'https://triplepoint.org.uk/guides/is-it-safe-to-use-chatgpt-at-work'
markdown: 'https://triplepoint.org.uk/guides/is-it-safe-to-use-chatgpt-at-work.md'
date: '2026-10-28'
description: 'Can your staff use ChatGPT, Copilot, Claude or Gemini safely? The real data risks, what to put in an AI policy, and settings worth checking first.'
---

# Is It Safe to Use ChatGPT and Copilot at Work?

![](https://triplepoint.org.uk/user/pages/guides/is-it-safe-to-use-chatgpt-at-work/is-it-safe-to-use-chatgpt-at-work.jpg)

**ChatGPT, Microsoft Copilot, Claude and Google Gemini can all be used safely at work, as long as staff use business accounts rather than personal ones, keep sensitive information out of tools you haven't approved, and follow a short written AI policy.** The biggest risk is client, staff or confidential information being pasted into free personal accounts, where conversations can be used to train the provider's models. With Copilot and Gemini in Google Workspace, the main risk is internal: they can surface any file a user already has access to.

## How many businesses manage the risk?

In the government's [Cyber Security Breaches Survey 2025/26](https://www.gov.uk/government/statistics/cyber-security-breaches-survey-20252026/cyber-security-breaches-survey-20252026), **31% of businesses were using AI, adopting it or actively considering it, but only 24% of those had cyber security practices in place to manage the risks** from using it.

And that's only the AI the business knows about. Many staff use free tools on their own initiative, which is where most of the risk sits.

## The real risks

- **Data leaving your control.** The NCSC's [guidance on large language models](https://www.ncsc.gov.uk/blog-post/chatgpt-and-large-language-models-whats-the-risk) points out that what you type is visible to the provider and stored, and will almost certainly be used to develop the service at some point. Its advice: don't include sensitive information in queries to public AI tools, or anything that would cause problems if it were made public.
- **Personal data.** Client records, staff details and anything else covered by UK GDPR still need protecting when they go into an AI tool. Using a tool without suitable terms can put you in breach.
- **Oversharing inside your business.** Copilot and Gemini in Google Workspace work with the files and emails each person can already reach. If permissions are too loose, such as salary spreadsheets shared with "everyone", AI makes them much easier to find.
- **Confident wrong answers.** AI tools can produce plausible but incorrect information. Anything going to a client, into a contract or into your accounts needs a human check.
- **Unapproved tools.** Browser extensions, AI note-takers that join meetings and new apps appear every week, each with its own data terms.

## Personal accounts vs business accounts

The same product can handle your data very differently depending on the account:

| Tool and account | Used to train the provider's models? |
|---|---|
| **ChatGPT Free, Plus or Pro (personal)** | Yes by default. Can be switched off in Settings, Data Controls, "Improve the model for everyone" |
| **ChatGPT Business or Enterprise** | No, by default |
| **Microsoft Copilot Chat, signed in with a work account** | No. Covered by Microsoft's enterprise data protection terms |
| **Microsoft Copilot (licensed, formerly Microsoft 365 Copilot)** | No. Works with your files and emails, and respects your existing permissions |
| **Claude Free, Pro or Max (personal)** | Yes, if "Help improve Claude" is switched on in Settings, Privacy. Check it's off |
| **Claude Team or Enterprise** | No, by default. Covered by Anthropic's commercial terms |
| **Gemini app, signed in with a personal Google account** | Can be, and chats may be read by human reviewers. The "Keep activity" setting limits this, but doesn't stop it entirely |
| **Gemini in Google Workspace, signed in with a work account** | No. Not used for training nor reviewed by humans without your permission |

Sources: [OpenAI's help centre](https://help.openai.com/en/articles/8983130-what-if-i-want-to-keep-my-history-on-but-disable-model-training), Microsoft's [enterprise data protection](https://learn.microsoft.com/en-us/copilot/microsoft-365/enterprise-data-protection) documentation, Anthropic's [model training](https://support.anthropic.com/en/articles/7996885-how-do-you-use-personal-data-in-model-training) page, Google's [Workspace with Gemini FAQ](https://knowledge.workspace.google.com/admin/gemini/gemini-for-google-workspace-faq) and the [Gemini Apps privacy notice](https://support.google.com/gemini/answer/13594961?hl=en-GB), at the time of writing. Providers change their terms, so check before you rely on them.

Not being used for training doesn't mean nobody else can ever see your data. Business accounts still store it, under the provider's business terms. That's why the policy below matters as much as the account type.

## What about Claude and Gemini?

The same rules apply, with a couple of points specific to each:

- **Claude.** Anthropic's Team and Enterprise plans give you a business account with an admin console, so you can control who has access. Claude can also be connected to other services, such as Google Drive, Gmail or Microsoft 365. A connected Claude can read whatever that person can reach, so decide which connectors are allowed before staff switch them on.
- **Gemini and Google Workspace.** If your business runs on Google Workspace, Gemini is built into Gmail, Docs, Drive and Meet, and covered by your Workspace terms when staff use their work account. Your admin can turn Gemini on or off for different groups of staff. The risk to watch is staff using the Gemini app on a personal Gmail account for work, where Google's consumer terms apply instead.

## Settings worth checking first

1. **Give staff an approved tool with a work account.** If your business uses Microsoft 365, make sure staff sign in to Copilot Chat with their work account. On Google Workspace, the same goes for Gemini. That way your business terms apply.
2. **Tidy up file permissions before Copilot or Gemini.** Review who can see what in SharePoint, OneDrive and Teams, or in Google Drive and shared drives, especially files shared with everyone or by "anyone with the link".
3. **Turn on multi-factor authentication** for every account that can use AI tools. A hijacked account with Copilot can search your files in seconds.
4. **Control unapproved AI apps.** [Web filtering](https://triplepoint.org.uk/security/people-and-email/web-filtering) lets you allow the AI tools you've approved, block the rest, and control what data can be copied or uploaded to them.
5. **If personal accounts are allowed at all,** ask staff to switch off model training in their settings, and never to use them for client or personal data.

## What to put in an AI policy

A one-page policy is enough to start. It should cover:

- **Which tools are approved,** and which account to use for each.
- **What must never go in:** client personal data, staff records, passwords, financial details, confidential contracts, and anything covered by a non-disclosure agreement, unless it's in an approved tool cleared for that use.
- **Checking the output:** a person reviews anything AI-generated before it goes to a client or is relied on.
- **Meeting recorders and note-takers:** whether they're allowed, and telling attendees when one is used.
- **New tools:** who to ask before trying one, and how quickly you'll answer.
- **Reporting mistakes:** what to do if someone has pasted something they shouldn't, without fear of blame.

Review it every six months or so: the tools change quickly.

## Where we can help

Our [AI adoption](https://triplepoint.org.uk/consultancy/ai-adoption) consultancy helps you choose the right tools, set up business accounts securely, write your AI policy and train staff on real tasks. If you'd like a check of your Microsoft 365 or Google Workspace permissions before rolling out Copilot, [talk to us](https://triplepoint.org.uk/contact?about=AI%20at%20work).

## Questions

 Does ChatGPT learn from what I type?+On personal ChatGPT accounts, your conversations can be used to train OpenAI's models unless you switch it off in Settings, Data Controls, "Improve the model for everyone". On ChatGPT Business and Enterprise, OpenAI says it doesn't train on your data by default. Either way, the provider can see what you type, so the NCSC advises not putting sensitive information into public AI tools.

 Is Microsoft Copilot safe for client data?+Signed in with a work account, Microsoft says Copilot's prompts and responses are covered by its enterprise data protection terms and aren't used to train its AI models. The bigger risk is inside your business: Copilot can find anything a user already has access to, so tidy up file permissions before rolling it out.

 Is Claude safe to use for work?+Claude Team and Enterprise are covered by Anthropic's commercial terms, and Anthropic says it doesn't train its models on that data by default. On personal Claude Free, Pro or Max accounts, chats can be used for training if "Help improve Claude" is switched on in Settings, Privacy, so check it's off or, better, give staff a Team account.

 Is Gemini in Google Workspace safe for client data?+Used with a Google Workspace business account, Google says Gemini's prompts and responses aren't used to train its models or reviewed by humans without your permission, and your existing Workspace controls apply. The personal Gemini app is different: chats can be read by human reviewers and used to improve Google's products. Like Copilot, Gemini in Workspace can reach any file a user can, so check Drive sharing first.

 Should we just ban AI tools?+Bans rarely work: people use AI on their phones or personal accounts instead, where you have no control at all. It's usually safer to provide approved business tools, set clear rules and block the rest.

 Do we need to tell our clients we use AI?+It depends on your contracts, your privacy notice and what you use it for. If client personal data goes into an AI tool, data protection rules apply just as they do to any other software, so check your privacy notice covers it and that the tool's terms are suitable.

 Where to go next- [AI adoption, done safely](https://triplepoint.org.uk/consultancy/ai-adoption)
- [Web filtering and control over AI apps](https://triplepoint.org.uk/security/people-and-email/web-filtering)
- [Cyber security consultancy](https://triplepoint.org.uk/consultancy/cyber-security)
- [How to spot a phishing email](https://triplepoint.org.uk/guides/how-to-spot-a-phishing-email)

[< Back to Guides](https://triplepoint.org.uk/guides)

## Not sure what you need?

Tell us a little about your business and we'll recommend the controls that will work best for you, with no obligation and no jargon.

[Talk to us](https://triplepoint.org.uk/contact)
or
[See every security area](https://triplepoint.org.uk/security)

Our experts spent 20 years at Sophos and include a certified ethical hacker.
[More about us](https://triplepoint.org.uk/about)

---

## Navigation

- Parent: [Cyber Security Guides for UK Small Businesses](https://triplepoint.org.uk/guides.md)
- Previous: [Invoice Fraud: How It Works and How to Stop It](https://triplepoint.org.uk/guides/invoice-fraud-business-email-compromise.md)
- Next: [Lost or Stolen Work Laptop? Why Encryption Matters](https://triplepoint.org.uk/guides/lost-laptop-encryption.md)