Get the brief
Home › Guides › ChatGPT and client data

Is ChatGPT Safe for Client Tax Data?

Updated 2026-10-15. Educational only, not legal or tax advice. Every claim links to a source below.

Short answer: not by default. A general assistant is fine for de-identified questions and drafting. Identifiable return information is a 7216 disclosure that needs client consent, and the FTC Safeguards Rule requires you to protect it.

Safe uses

  • General tax questions with no client identity attached, verified against primary sources.
  • Drafting client emails, engagement letter explanations and checklists you fill in yourself.
  • Excel formulas and cleaning up redacted data.

Unsafe without consent and controls

  • SSNs, EINs, account numbers or names.
  • Whole returns, K-1s or statements tied to a named client.
  • Anything on a consumer plan where you have not checked the training and retention terms.

Business plans and training

ChatGPT Business costs $20/user/month billed annually (2-seat minimum). Claude Team is $20/member/month annual, and Anthropic says Team data is not used for training by default.

A business plan reduces risk but does not remove the 7216 question. The disclosure happens when the data reaches the provider.

A safer setup

  1. Use a business tier, not a personal account.
  2. Redact identifiers by default and write that rule into your WISP.
  3. For tasks that need real data, use a tax-specific tool that states SOC 2 and 7216 handling, and get written consent.
  4. Review every output. A r/taxpros commenter put it plainly: the concern is not the software's terms of service, it is Section 7216.

FAQ

Can I put a client's tax return into ChatGPT?

Not without a valid 7216 consent. Entering identifiable return information is a disclosure to the AI provider. Redact identifiers for general questions.

Is ChatGPT Business safer than the free plan?

It adds business controls and OpenAI does not train on Business data by default, but the disclosure question under 7216 remains.

What should I use instead for client data?

Tax-specific tools that state SOC 2 controls and 7216 handling, combined with a signed client consent and a WISP entry.

Sources

  1. law.cornell.edu/uscode/text/26/7216
  2. tomtalkstaxes.com/p/ai-7216
  3. irs.gov/pub/irs-pdf/p4557.pdf
  4. help.openai.com/en/articles/8792536-managing-billing-and-seats-in-chatgpt-business
  5. claude.com/pricing
  6. privacy.anthropic.com/en/articles/7996868-is-my-data-used-for-model-training
  7. reddit.com/r/taxpros/comments/1w3qjuu/anyone_else_hacking_their_tax_software_with_claude

The Friday Prep Brief

One email a week: new AI tax tools, pricing changes, and what practitioners report. Five minutes, no hype.

Subscribe free →
Opens our beehiiv signup page. One email a week, unsubscribe anytime.