Is the free version of ChatGPT safe for client files, or do I need a business plan?

The difference is less about the model and more about the contract. On a free or personal plan you are a consumer using a public service, and providers have commonly used consumer conversations to improve their models by default unless you opt out. That alone is a poor fit for anything a client handed you in confidence.

Business, team and enterprise plans are built for this. The usual pattern is that your data is not used for training by default, an admin controls who has access, and there are terms you can point to if a client asks how their information is handled. Providers change these terms, so read the current ones for the plan you are buying rather than relying on a blog post — including this one.

Even on a business plan, the professional rule still applies: strip what you do not need. Most of the help you want — wording, structure, a summary — does not require the client’s name, account numbers or anything identifying.

If your profession has a regulator, check its guidance too. Law societies and professional bodies in Canada have been publishing advice on generative AI, and their expectations sit on top of whatever the tool’s terms say.