Skip to content

Uploading bank statements to ChatGPT: is it safe?

Short answer

It can be, if you pick the right plan and settings and remove what the task does not need. OpenAI says it does not train on ChatGPT Business or Enterprise content by default, and consumer users can turn off model training. Redact account numbers and names first, and if you prepare tax returns, follow your written security plan.

How to upload a bank statement more safely

  1. 1Check which ChatGPT plan you are on and whether your firm or client allows AI tools for financial data.
  2. 2On a personal plan, turn off Improve the model for everyone under Settings, then Data controls[1], or use a Temporary Chat.
  3. 3Export only the period and columns you need, ideally as CSV.
  4. 4Remove or mask account numbers, card numbers, names, addresses and tax identifiers.
  5. 5Delete the conversation and any downloaded files you no longer need when the task is done.
  6. 6If you prepare tax returns, record the tool and its settings in your written information security plan.

Does ChatGPT train on files you upload?

It depends on the plan. On Business, Enterprise, Edu and the API, OpenAI doesn't train on your data by default[1][2]. For the API, data has not been used for training since March 1, 2023 unless you opt in[3].

On consumer plans, OpenAI says that when Improve the model for everyone is off, new conversations won't be used to train its models[4].

What does Temporary Chat do?

OpenAI says a temporary chat is not used to improve its models while it remains temporary, and that OpenAI may keep a copy of a temporary chat for up to 30 days for safety purposes[5]. So Temporary Chat limits training use, but it does not mean the file is never stored.

What rules apply to bookkeepers and tax preparers?

If you prepare tax returns, the FTC Safeguards Rule applies. IRS Publication 4557 says tax return preparers must create and enact security plans to protect client data, that the rule requires a written information security plan, and that failure to do so may result in an FTC investigation[6]. The rule's text lists tax preparation firms among covered financial institutions and requires encryption of customer information in transit and at rest[7]. The IRS repeats that FTC regulations require professional tax preparers to have security plans[8].

Accounting publications are more cautious than the vendor settings. The Journal of Accountancy says you should never enter client or confidential information into ChatGPT[9], and CPA Practice Advisor says data needs to be anonymized first[10].

How do Claude and Microsoft Copilot compare?

On Anthropic's consumer plans, chats are used to improve Claude only if you choose to allow it, and Incognito chats are not used for training[11]. By default, Anthropic does not use inputs or outputs from its commercial products to train its models[12]. For organizational use, Microsoft says prompts, responses and data accessed through Microsoft Graph aren't used to train foundation models[13].

Frequently asked questions

Does ChatGPT keep my uploaded bank statement?
Check your plan's retention terms. For Temporary Chat, OpenAI says it may keep a copy for up to 30 days for safety purposes[5]. Delete conversations you no longer need.
Is ChatGPT Business safer than the free plan for client data?
Business and Enterprise content is not used for training by default[2], which is one reason many firms choose them. Training is only one part of safety, so still redact and follow your firm's policy.
What should I redact from a bank statement before uploading?
Account and card numbers, names, addresses, tax identifiers, and any payee details the task does not need. Keep dates, descriptions and amounts.
Do I need a written security plan to use AI with client data?
If you prepare tax returns, IRS Publication 4557 says the Safeguards Rule requires a written information security plan[6]. Include the AI tools you use and their settings in it.

Sources

  1. 1.OpenAI Help Center: How your data is used to improve model performance (archived copy, Oct 10, 2026)
  2. 2.OpenAI Academy: Data governance and compliance
  3. 3.OpenAI API docs: Your data
  4. 4.OpenAI Help Center: Data controls in ChatGPT (archived copy, Sep 26, 2026)
  5. 5.OpenAI Help Center: Temporary Chat (archived copy, Oct 5, 2026)
  6. 6.IRS Publication 4557: Safeguarding Taxpayer Data
  7. 7.eCFR: 16 CFR Part 314, Standards for Safeguarding Customer Information
  8. 8.IRS: Protect your clients, protect yourself
  9. 9.Journal of Accountancy: 3 ways to use ChatGPT-4o with Excel (Jul 2025)
  10. 10.CPA Practice Advisor: How to use ChatGPT to analyze financial statements (Jun 2024)
  11. 11.Anthropic Privacy Center: Is my data used for model training? (consumer plans)
  12. 12.Anthropic Privacy Center: Is my data used for model training? (commercial products)
  13. 13.Microsoft Learn: Enterprise data protection in Microsoft Copilot

Sources were checked when this page was last updated. Archived copies are cited where the original page could not be reached from our checker. Features and settings change, so confirm details with each vendor.

Not professional advice. This is general information, not accounting, tax, legal or financial advice. Check AI output yourself and consult a licensed professional for your situation. See our Terms of Use.

Related workflows

  • Reconciliations

    Triage Unmatched Bank Transactions and Miscoding with an AI Exception Review

    This Workplace AI Institute article argues that bookkeepers should let accounting platforms do bulk bank matching and then hand only the exception list to a general-purpose model such as ChatGPT or Claude. It describes exporting unreconciled items as a CSV and asking the model, using its analysis tool, to find likely duplicates, flag GL coding inconsistent with the payee, and list large items to confirm with the client. The article warns that models can be confidently wrong about specific dollar amounts and that the review is a triage tool, not a posting tool.

    Works in ChatGPT, Claude, Grok, Gemini

    Xero, QuickBooks Online

    Workplace AI Institute (blog)
  • Receipts and Expenses

    Chase Clients About Uncoded Transactions with an AI-Drafted Email

    The Firm's guide to ChatGPT prompts for bookkeepers argues that bank feeds and ledger rules already handle matching, so chat assistants are most useful for the writing around the ledger, starting with the email asking a client to explain transactions the bookkeeper cannot code. It recommends grouping similar items, numbering questions, requesting receipts, and following up with a shorter, firmer second chase. The article also says to strip names, tax identifiers and account numbers before pasting, use a firm-approved tier, and never let the assistant decide tax treatment or code from memory.

    Works in ChatGPT, Claude, Grok, Gemini

    The Firm (accounting publication)
  • Reporting and Analysis

    Draft a Client Financial Health Review from an Income Statement

    CPA Practice Advisor walks through pasting an anonymized landscaping company's income statement into ChatGPT and Gemini Advanced and asking how financially healthy the business is and what to recommend. Both tools identified the net loss, flagged salaries as a large share of expenses, and suggested cost and revenue actions. The author stresses anonymizing data, getting client permission, having an expert check every answer, and reviewing terms of service.

    Works in ChatGPT, Claude, Grok, Gemini

    CPA Practice Advisor

Last updated: