Privacy & safety
Is it safe to review contracts with AI?
Short answer: it can be, if you use a tool built for confidential documents and you know its data policy. The risk is highest with general chatbots that may retain or train on what you paste and give you no way to check their answers. Here is what actually puts your contract at risk, what to look for in any tool, and how ClauseShift handles it.
Last updated July 18, 2026
The real risks
Training on what you paste
Some consumer AI tools may use what you type to improve their models, depending on the product and your settings. For a confidential agreement, that is the difference between a private read and handing your terms to a third party. Always check the specific tool's data and training policy.
How long it is kept
A contract you upload can sit in chat history, logs, or temporary storage for far longer than the few seconds it took to answer. The question is not only who sees it, but for how long it is retained and whether you can delete it.
Invented terms and misses
A general chatbot can confidently describe a clause that is not in your document, or miss one that is, and give you no way to check. Without the exact wording quoted back to you, you are trusting a summary you cannot verify.
Confidentiality obligations
If you are under an NDA, pasting the document into a tool that may store or reuse it could itself breach the confidentiality you are trying to protect. Know what the tool does with the text before it leaves your screen.
What to check before you upload a contract anywhere
- Does the tool train its AI on what you submit, and can you turn that off?
- Is the document stored, and if so, for how long, and can you delete it?
- Is the connection encrypted, and is your data kept separate from other users?
- Does it quote the exact clause, so you can verify its answer rather than trust it?
- Who are the third-party providers behind it, and what do their terms allow?
How ClauseShift handles it
We do not keep your document
The contract you submit is analyzed to produce a report and is not saved to your account. Only the generated report is stored, and you can delete any report, or your whole account, at any time.
ClauseShift trains no AI of its own
We do not train any model of our own on your contracts. Third-party AI and transcription providers process submitted content under their own terms, and we do not currently know or claim whether those providers use submitted content for model training.
Encrypted, and short-lived when held at all
Traffic is HTTPS-only and each account can reach only its own reports. When resumable processing is enabled, an encrypted job may hold the source content temporarily; that payload is cleared on completion and the job expires within 24 hours.
Not a black box
Every risk we flag quotes the exact clause it came from, so you check the wording yourself instead of trusting the AI on faith. That is the single best defense against invented or missed terms.
Frequently asked questions
Is it safe to review contracts with AI?
It can be, if you use a tool built for confidential documents and you understand its data policy. The risk is highest with general-purpose chatbots that may retain or train on what you paste and that give you no way to verify their answers. A purpose-built reviewer that does not keep your document, encrypts it in transit, and quotes the exact clause is a much safer choice.
Is it safe to paste a contract into ChatGPT?
Treat anything you paste into a general chatbot as potentially retained and, depending on the product and settings, possibly used to improve the model. For a confidential contract, and especially one under an NDA, that may not be appropriate. Check the specific tool's retention and training settings, and prefer a tool designed for private document review.
Does ClauseShift train AI on my contracts?
No. ClauseShift trains no AI of its own on your contracts, and we do not keep the document you upload; only the generated report is saved to your account. Third-party AI and transcription providers process content under their own terms, and we do not currently know or claim whether they use it for training.
Can I delete my data?
Yes. You can delete any individual report or your entire account at any time, and a machine-readable export of your account data is available from Settings. Deleted items are purged permanently.
Where can I read the full details?
The Trust Center lists exactly how documents, reports, accounts, and payments are handled, along with every third-party provider. The Privacy Policy covers what is collected and your rights.
ClauseShift provides informational risk summaries and is not a substitute for legal advice. Review important agreements with a qualified professional before acting.