Is it safe to upload financial statements to ChatGPT?

Its maker’s own help pages, read in October 2026, say this about financial data or any other file you share with ChatGPT:

• On the plans for individuals, conversations may be used to train its models unless you switch off “Improve the model for everyone” under Settings, then Data controls. The setting applies to your whole account, on every device.
• Rating a reply with a thumbs up or down can send that whole conversation for model improvement, even with the setting off.
• On the business plans — Business, Enterprise and Edu — inputs and outputs are not used for training by default.
• A temporary chat is not used for training and stays out of your history, but a copy may be kept for up to 30 days for safety.
• A deleted chat or file is scheduled for permanent deletion within 30 days, unless it has to be kept longer for security or legal reasons. A file saved to the library is not deleted with the chat that used it.

These terms change, and they differ by plan and by workspace. Read the current data-controls page for the plan you are on before uploading anything you would not want kept.

Professional ethics codes for accountants treat client information as confidential, and engagement letters often say where it may be sent. A trial balance or a set of statements usually goes further than totals: the debtors and creditors ledgers name customers and suppliers, and payroll ledgers can name employees. Where those are people, data protection law applies to the upload too. None of that makes a chat assistant off-limits. It means the decision to upload belongs to whoever is responsible for the data, and it should be made before the file is attached, not after.

1. Use a business plan, or switch off model training, before the file goes in.
2. Take out what names people and accounts: customer and supplier names in the debtors and creditors ledgers, employees in the payroll ledgers, bank account numbers and tax identifiers.
3. Upload a summary rather than the ledger detail where the question allows it.
4. Check the engagement letter, if the accounts are a client’s, and whether it lets you send them to a general-purpose service.
5. Delete the chat and the file when you are done, and remember the 30 days.

Asking a chat assistant to total, restate or compare statements means asking a language model to do arithmetic. It writes the number that reads most likely, which is usually right and occasionally not, and nothing in the reply marks the one that is wrong. For explaining a ratio or drafting a note to a director that is fine. For a figure that goes into a report, the figure has to come from a calculation you can trace back to the ledgers. More on that is in can AI prepare financial statements from a trial balance?

A tool built for monthly reporting can make narrower promises than a general-purpose assistant, and these are the ones Magic MIS makes. Each uploaded file is encrypted under a key that belongs to that company alone before it is stored. No person at Magic MIS can open a customer’s file: no screen, tool or staff role does. Every time a file is opened — by a run you start, a question you ask or your own download — it is recorded on the company’s Files and settings page, where you can see it. Deleting the company destroys its key, so its files cannot be read again by anyone.

The AI receives only what one step needs: the structure of a sheet, a capped sample and ledger names, with party and employee names replaced by tokens first. It never receives a whole file, it never writes a figure, and your data is not used to train AI models. What is not claimed is on the security page too: there has been no external audit and no certification is held yet.