ChatGPT Security: Control ChatGPT Use at Work
See the customer data, source code and contracts employees paste into ChatGPT. Log prompts, mask sensitive data or block the request.
- ChatGPT
- Microsoft Copilot
- Google Gemini
- Claude
- Allow & log
- Redact
- Block
- Deny app
Risks of ChatGPT use
Personal accounts
employees use a personal free or Plus account instead of the company workspace. Data in these accounts is outside the company's admin and retention rules.
Model training
on OpenAI consumer plans, chats can be used to improve models unless the user turns this off. The company cannot manage that setting.
Share links
in 2025, public share links appeared in search engines. One link can take company data outside.
Recommended AI Control policy
Scope: Windows, macOS and Linux devices with the Moftgate agent. Personal phones without the agent are out of scope.
- 01
All browsers and desktop apps × ChatGPT: Allow & log. See the usage first.
- 02
When personal data or card number classifications match: Redact.
- 03
When source code or secret key classifications match: Block.
Allow & log
The prompt is sent and recorded.
Redact
Matched data is masked and the masked prompt is sent.
Block
The prompt is not sent and the event is recorded.
Deny app
The app cannot talk to this provider at all.
Questions about ChatGPT
Details are based on policies published by OpenAI and public reports. Plans and settings can change; check current terms with the vendor.
See your ChatGPT use in one week
AI Control logs prompts and masks or blocks sensitive data. Data stays on your own servers.