Skip to content

Guide

Is it safe to upload your clients' information to ChatGPT?

If you keep books for third parties, the papers you handle aren't yours. This guide separates the three risks that almost always get argued as if they were one.

The short answer

It isn't forbidden, but it isn't a free-for-all either — and the risk everyone talks about isn't the one that will cost you dearly.

There are three different questions hiding inside “is it safe?”: whether the provider keeps what you upload, whether you can verify what it answered, and whether you have the right to share information that belongs to your client. They're mitigated in different ways, and the second — the one almost nobody discusses — is the one that affects you every day.

The heart of the matter

Three distinct risks, not one

Each one is checked one way and solved another. Mixing them is what makes the discussion end in “better not use it” or “it's fine,” which are both the wrong answer.

01

Does the provider keep what you upload?

The risk everyone talks about — and the easiest one to contain.

Consumer and business accounts of the same AI provider don't treat what you type the same way: on business accounts, using your conversations to improve the models is usually off by default; on personal accounts it's usually on, and you have to go turn it off. We deliberately don't quote anyone's current policy here: they change without notice, and a guide that cites one becomes false without anyone noticing. What always holds is how to check — and that's below.

Watch out for the most common confusion: “we don't train on your data” does NOT mean “we don't store it.” Almost everyone keeps conversations for a while for safety and abuse review. Those are two different questions, and you have to ask both.

02

Can you verify what it answered?

The risk almost nobody talks about — and the one that can really cost you.

A language model gives you a number with the same confidence whether it read it or deduced it. If it tells you the quarter's deductible total was such-and-such, and you can't see which document and which line it came from, you don't have a fact: you have a hypothesis formatted like a fact. And the problem isn't that it's wrong now and then — it's that it's wrong without changing its tone.

This weighs more in accounting than in almost any other trade: in a tax audit, you answer — not the tool. A figure you can't trace back to its source document is useless for work even when it happens to be correct, because you can't defend it.

03

Do you have the right to share that information?

The one that gets forgotten — because the information isn't yours.

The invoices, payroll, and bank statements you handle belong to your clients, and they contain third parties' personal data: names, tax IDs, addresses, sometimes salaries. Uploading them to a service operated abroad is, under Mexico's data protection law, a transfer — and transfers come with notice requirements and, depending on the case, consent requirements.

It's not a prohibition: it's a formality you either do right or do wrong. What doesn't exist is the option of it not applying. The authority on the matter is now Mexico's Secretaría Anticorrupción y Buen Gobierno (the INAI was dissolved on March 20, 2025). Confirm your specific case with your legal advisor: this guide describes the obligation, it doesn't resolve it.

Before uploading anything

Seven things you can check today

None of them needs a lawyer or an IT department. They're questions with a public answer, or an answer in your own contract.

  1. Check the policy for whether the provider trains on what you upload

    The words to search for are “train” or “improve our models.” If the answer depends on the type of account, find out which one YOU have — not which one they sell.

  2. Ask separately how long they keep it

    Not training and not storing are two different things. If the policy only answers the first, you haven't learned the second.

  3. Find out in which country it's processed

    That's the fact you need to know whether you're making an international transfer — and to be able to declare it if you are.

  4. Review what your own contract with the client says

    Many accounting-services contracts already include a confidentiality clause that sets what you can and cannot do with their paperwork. It's usually stricter than the law.

  5. Strip what isn't needed before uploading

    If the question is about amounts and dates, the client's address and tax ID add nothing to the answer. Data that doesn't travel can't leak.

  6. Demand to see the source of every answer

    If the tool doesn't show you which document and which part each figure came from, you can only use it to draft and organize ideas — never to state a number.

  7. Keep a record of which tools you use

    If a client asks tomorrow where their documents have been, the answer should exist before the question.

What this is for

What changes if the originals never leave your Drive

Wurz exists because of risk number two, not number one. It's only honest to say what it protects you from and what it doesn't.

Wurz works on top of the storage you already use —Google Drive, Dropbox, or OneDrive—: the files stay there and Wurz keeps no durable copy of them. Only the excerpt needed to answer travels to the model, and every answer arrives with the document and the exact chunk it came from, checked against the source text before it's shown to you. If the fact isn't in your documents, the answer is that it isn't.

What it does not do: remove the third party. Content is still sent to AI providers to summarize it and to answer you, and that is still a transfer you have to declare. That's why who they are, what each one receives, and which country they operate from is published — so you can meet point three of the checklist instead of trusting that someone already thought about it.

How Wurz treats your documentsSee the provider list

Common questions

What people ask most about this

Is it illegal to upload my clients' invoices to ChatGPT in Mexico?

There is no general prohibition, but it isn't a free-for-all either: your clients' invoices contain third parties' personal data, and sending them to a service operated abroad counts as a transfer under Mexico's personal data protection law, with notice requirements and, depending on the case, consent requirements. Also review the confidentiality clause in your contract with the client, which is usually stricter than the law. Confirm your specific case with your legal advisor.

Does ChatGPT use my conversations to train its models?

It depends on your account type and your settings, and policies change without notice, so the only reliable answer is the one you verify today in your plan's current policy. As a rule, business accounts and API access usually have training on your data off by default, and personal accounts usually have it on with an option to turn it off. And keep in mind that not training doesn't mean not storing: those are separate questions.

What if the AI gets a figure wrong and I file it with the tax authority?

You answer for it. Responsibility before the authority lies with the taxpayer and whoever signs — not the software provider — and no AI tool's terms of service assume that responsibility. That's why a figure you can't trace back to the document and excerpt it came from is unusable for filing, even if it happens to be correct: you can't defend it.

Does anonymizing documents before uploading solve the problem?

It helps with the legal risk and doesn't solve the verification one. Removing names, tax IDs, and addresses reduces what you expose and is good practice whenever those fields aren't needed for the answer. But you still won't be able to verify where each figure came from, which is the risk that affects your daily work. Besides, anonymizing dozens of documents by hand costs more time than the tool saves you.

What's the alternative if I don't want to upload originals to any AI?

Let the originals stay where they already are. There are tools that work on top of your own storage —your Google Drive, Dropbox, or OneDrive— and only send the model the excerpt needed to answer, without keeping a copy of the file. What you should demand from any of them is the same: that it tells you which providers it sends content to, from which country they operate, how long they keep it, and that every answer comes with the document and the exact excerpt it came from.

Try it with your real documents

Upload a handful of receipts from your most demanding client and ask the question that normally takes you half an hour. That's how you'll know if it's worth it.

Try WurzTalk to us

No credit card. Nothing to install.