It depends on what the office puts into it and which plan it has signed. As of October 2026, every hosted ChatGPT plan processes prompts and uploaded files on OpenAI’s servers, under that plan’s terms. For drafting with no client data in it, that is often acceptable. Statements, trust deeds and side letters belong in a tool that runs on infrastructure the office controls.
When a member of staff pastes a statement or uploads a side letter, the text travels to OpenAI’s service and is processed there. What happens next is set by the plan: consumer accounts and business plans carry different data terms, and providers revise those terms from time to time.
The office’s protection is the contract it signed, and whether staff used the account that contract covers. A business plan does little for a document pasted into a personal account on a phone.
Hosted assistants suit general drafting, summarising public material, and rewording a letter with no names in it. The test is simple: nothing in the prompt would matter if someone outside the office read it.
Many offices allow that kind of use on an approved business account, with the rule written down. That is a sensible place for a hosted tool.
Documents that carry family names, holdings, tax positions or counterparties are a different matter. A custodian statement, a trust deed or a side letter describes the family as much as the assets.
The FCA’s good-practice review of AI in financial services, published on 19 October 2026, describes firms adopting AI systems and architecture that reflect the sensitivity and security requirements of each use case. A family office can apply the same test: match the tool to the document. (Source: FCA, October 2026.)
Each answer belongs in writing, with the date it was checked, because provider terms change.
Super Chain is software that runs on infrastructure the family office controls: its private cloud or its own servers. Each answer is cited to the page it came from.
Access is set by role, down to the single document, and each query is logged for the office. The office chooses the model, and keeps that provider’s terms in its own review. Read more on what “private AI” means and how to protect family office data when using AI.
This guide is for principals, COOs and compliance owners at single and multi-family offices whose staff already use ChatGPT, or are asking to.
It is not for an office that has already banned hosted AI tools and enforces the ban. The cyber-safe AI roadmap will serve that office better.
Super Chain is accountable for the platform and its configuration. The office remains accountable for which documents go in, who may see them, and the terms of the model provider it chooses.
Super Chain is built by Super Cat Technology. The same team built a fully on-premise retrieval system for a Big 4 firm, where every answer returns with its source paragraph.
“When a family office asks me if ChatGPT is safe, I ask which account the side letter went into. The plan the office signed matters less than the personal login on someone’s phone. My advice is a written rule for hosted tools. Anything that names the family goes into a platform the office controls.”
It depends on what the office puts in and what it has signed. As of October 2026, any hosted ChatGPT plan processes prompts and attachments on OpenAI’s servers; the plan sets the contract terms, not where the processing happens. Super Chain takes another route for family office data: it runs on infrastructure the office controls, private cloud or on-premise.
That depends on the plan and its current terms. As of October 2026, OpenAI publishes different data terms for consumer and business plans, so the office should read the terms for the accounts its staff actually use. Super Chain does not train on client data, and it runs on infrastructure the family office controls.
For some of it. As of October 2026, Super Chain’s view is that hosted assistants suit drafting and research with no client data in the prompt. Statements, trust deeds, side letters and anything naming the family belong in a tool the office controls. Put the rule in writing, and name the person who answers questions about it.
An AI platform that runs on infrastructure the office controls. As of October 2026, Super Chain is deployed on the family office’s own private cloud or servers. It answers from the office’s documents with the source page cited, limits each document to the roles cleared to see it, and records every query in an audit log the office holds.
We load one vehicle’s documents onto your infrastructure. Your team asks real questions of them for 30 days, and each answer comes back cited to the page it came from.
Choose a time below to scope the pilot with us. If you would rather see the platform first, book a private demonstration.