Is it safe to upload documents to AI?
It can be, if you check six things first: whether the provider uses your file to train its models, how long it keeps it, who can see it, where it is stored, how to delete it, and what you should remove before uploading. Business and API plans of the large AI providers usually do not train on your data by default; free consumer apps may.
Six questions before you upload
| Question | Good answer | Warning sign |
|---|---|---|
| Is my file used for training? | No by default, in writing | Yes unless you opt out, or no answer |
| How long is it kept? | A stated number of days, then deleted | 'As long as needed' |
| Who can see it? | Only automated systems, staff only for abuse checks | Shared with partners |
| Where is it stored? | A named region | Not stated |
| Can I delete it? | Yes, with a button or request | No clear way |
| What should I remove? | Names, ID numbers, account numbers you do not need | - |
Do this before uploading
- Remove or replace personal details: names, addresses, tax file or PAN numbers, bank details.
- Upload only the pages you need.
- Use a business or API account rather than a personal free account for work files.
- Check your employer's or client's rules - some contracts forbid sending files to outside services.
Australia and India notes
In Australia, the OAIC has published guidance on privacy and commercially available AI products, including a warning not to enter personal information into public AI tools. In India, the Digital Personal Data Protection Act 2023 sets duties for anyone processing personal data. If the file holds other people's data, those rules may apply to you.
Questions
- Do AI chat apps learn from what I upload?
- It depends on the plan and your settings. Read the provider's data-use page; many let you switch training off.
- Is a PDF safer than a Word file?
- No. The format does not matter; the content does.
- What about document chatbots for my business?
- Ask where your documents are stored and which parts are sent to the AI provider for each answer.
Sources
- OAIC: Guidance on privacy and the use of commercially available AI products
- India: Digital Personal Data Protection Act 2023 (MeitY)
- Anthropic Privacy Center
- OpenAI: Enterprise privacy
See the document chatbot
Set up on your own server with your own AI key, and tested on your documents before customers see it.