How to Keep a Confidential Contract Private When Using AI

A signed NDA is already sitting on the file you want explained. Open the disclosure clause. Treat a consumer chatbot as a third party. Then pick consumer (redacted only), enterprise or purpose-built, or do not upload.

In August 2026, Nia — founder, nine people — is 35 minutes from a buyer diligence call. The mutual NDA is signed. The buyer’s 14-page MSA — a master services agreement, the frame vendors hang order forms on — is in the inbox. Typical mistake: a personal ChatGPT Plus tab, “just for a summary.” OpenAI is not an adviser bound in writing.

Disclaimer: Checkory provides AI support, not legal advice. Consult a qualified lawyer for binding decisions.

Why can pasting a raw NDA breach the NDA itself?

An NDA usually names who may receive the paper: employees, and sometimes professional advisers bound in writing. A consumer chatbot vendor is neither. Pasting the raw file can be the unauthorised disclosure, even if nobody else ever reads the thread.

Stephenson Harwood (25 June 2026): uploading confidential information may be an unauthorised disclosure, and platform security does not mean the NDA permits the upload. DarrowEverett: silence does not authorise the use. KJK: an AI provider may not be a permitted Representative, and training can collide with return-or-destroy. The SRA notice of 17 August 2026 cites UK v SSHD [2026] UKUT 81 (IAC): putting client letters into ChatGPT is to place them in the public domain. The paste is still the disclosure.

• Do: open recipients, purpose, and return-or-destroy first.
• Do not: paste because the NDA never mentions AI.

How does training, retention, and third-party disclosure actually change?

A paid Plus, Pro, or Max tab is still a consumer contract. Training may be an opt-out toggle, not a signed no-train term. Humans can review chats. Treat the vendor as a third party until a different written contract exists.

OpenAI’s consumer FAQ may use ChatGPT content to improve models; Business offerings default to no training unless you opt in. Google’s Gemini Apps hub (29 June 2026): reviewed chats can sit three years after you delete activity. Anthropic commercial Claude defaults to no training. Meland Budwick: after a consumer paste you often cannot certify return-or-destroy. Temporary Chat still keeps chats 30 days. In practice that is a copy you cannot recall on demand.

• Do: name the exact tier and save the dated policy URL.
• Do not: treat Plus or Temporary Chat as a signed no-train term.

How do you redact parties, numbers, and the secret before any consumer tool?

Redact before the window opens, not after the paste feels “a bit sensitive.” Party names, deal values, and the secret subject are the confidential information. If you cannot strip the secret and still ask a useful question, you do not paste.

Build a one-page excerpt. Replace names with Party A / Party B. Strip addresses, prices, identifying dates, and the technology or target. Ask a clause-structure question. For example, a redacted definitions section plus the clause you care about is enough. Do not paste schedules “for context.”

• Do: redact parties, numbers, and the secret, then paste only the excerpt.
• Do not: anonymise later, or paste the full PDF because Temporary Chat is on.

What to demand from a purpose-built review tool?

Marketing “we don’t train” is not a permission slip under your NDA. Any purpose-built review tool is still a third-party disclosure. Demand writing before the first real file: no-training, retention hours, and a DPA — a data processing agreement.

Steal the SRA list: safeguards in writing; no training except where authorised; no extra retention. Archer & Greiner: verify no-train, retention, access, and deletion in the contract. Ask three written questions: training for anyone else; retention after delete; a DPA, sub-processors, and who reads tickets? No writing, no upload. A purpose-built first-pass — the first machine pass that extracts clauses — is not counsel — a qualified lawyer — and not an NDA stamp. Checkory can highlight after that gate; a human still opens every High flag — an item scored high severity.

• Do: collect the three answers on paper before the first file.
• Do not: treat “legal AI” as a green light to drop the raw PDF.

When is consumer chat, enterprise, or do not upload the right lane?

Binary panic — ban all AI — and binary comfort — upload everything — both fail. Pick one lane per document class: redacted consumer chat, enterprise or purpose-built after written answers, or keep the file on your machine.

Carta (6 July 2026): blanket “no AI” clauses also hit Copilot and Workspace Gemini and are commercially unworkable. Allow a controlled tool only after isolation, retention limits, and no-training are explicit. Google’s Workspace Gemini hub (14 August 2026) is a different product from gemini.google.com on a personal Gmail.

• Do: match the file class to one lane in the table.
• Do not: mix a personal login with “we have Workspace somewhere.”

When to check the file before the first paste or upload?

Before the first paste or upload, fill a one-page log: document class, NDA permission, tool tier, redaction done yes or no, go or stop. If you cannot fill the row, keep the file offline and call a human.

You are done when you can name the clause you relied on, name the three vendor questions, and either send a redacted excerpt, upload only after written answers, or escalate to a named lawyer. Workflow: read NDA permission → classify file → pick tier → redact or stop → ask vendor in writing → upload or keep offline.

• Do: keep the dated log (clause, tool, URL, redaction, go or stop).
• Do not: skip the do-not-upload lane because a call starts in 20 minutes.

After a safe extract, a named reviewer still verifies High flags.