Is it safe to upload a tender to ChatGPT?
Only when the tender’s confidentiality conditions, your organisation’s policy, and the service’s controls all permit it. Uploading sends the pack to an external provider. Whether the provider uses it for model improvement, how long it retains it, who can access it, and where it is processed are separate questions.
For individual ChatGPT accounts, OpenAI says model-improvement use depends on the user’s data-control setting; users can turn it off, and Temporary Chats are not used to improve models. Temporary Chats may still be retained for up to 30 days. See OpenAI’s Data Controls FAQ and Temporary Chat FAQ. Those controls do not override a tender’s confidentiality clause or your employer’s policy.
What should you ask a vendor?
Where the pack lives. Who can see it. Whether it is used to train a model you do not control. Whether you can delete it. Whether inference stays in a region you can name. Whether logs retain prompts. The buyer’s guide is ten questions; four and five are this page.
Australian data residency is a fact. Ask it as a fact. A marketing sentence about encryption is not an answer to where the disk is.
What about a private GPT or Copilot on our tenant?
A managed business or enterprise service can provide stronger contractual and administrative controls. OpenAI states that ChatGPT Business, Enterprise, Edu, and API inputs and outputs are not used to train its models by default; its business-data privacy page also describes encryption, retention controls, and available residency options. Verify the exact product, workspace, region, retention setting, connected tools, and agreement you actually use.
A managed workspace is not approval by itself. Draw the data flow, include any connectors or actions, compare it with the tender and client obligations, and have the accountable owner approve the use.
How does selrob sit here?
The pack is the job. It is not a training set you did not agree to. Ask us the same questions you ask everyone else. Plans and hosting options, including private cloud and on-premise on Enterprise, are covered on a call. This page is the objection, written so you can search it, not a security white paper.
If the honest reason you opened a chatbot is that nobody will read the pack, the problem is the gate. Install the read. Then decide which tool is allowed to see the pages.