Three people on personal ChatGPT accounts is already a data problem

The usual way it happens

Here is how most small companies end up with ChatGPT. One person signs up for Plus, finds it useful, and expenses it. Then a second person does the same, then a third, and before long a third of the office is pasting client emails, draft proposals and the odd spreadsheet into accounts the company doesn’t own, can’t see, and can’t switch off when someone leaves. Nobody decided this. It just accumulated, the way most IT problems do.

My answer, then. ChatGPT Plus is a personal plan and works well for one person. ChatGPT Business is the company version: the workspace belongs to the business, an admin adds and removes people, and OpenAI says it doesn’t train its models on business data by default. Once three or more of your staff use ChatGPT for work, I think personal Plus accounts become a data-control problem, and at annual billing Business costs roughly the same per person anyway.

What actually differs

Who owns the account

This is the difference that matters most and gets mentioned least. A Plus account belongs to the person who signed up, usually with a personal email. Their chat history, uploaded files, projects and any custom GPTs they built live in that account. When they leave your company, all of that leaves with them, including whatever client information they pasted in along the way. You can’t see it, you can’t export it, and you can’t delete it.

In a Business workspace, the company is the customer. An admin invites people and removes them when they leave, and OpenAI says a removed member’s projects and custom GPTs are reassigned to a workspace owner rather than leaving with the person. That is the same principle as owning your Microsoft 365 tenant rather than letting staff run the company on personal Gmail accounts, which nobody would accept, but somehow we accept it for AI.

Whether your data trains the models

On individual plans, including Plus, OpenAI’s help pages say conversations may be used to improve its models unless the user turns off the “Improve the model for everyone” setting under Data Controls. That means your company’s protection depends on each employee finding and changing one setting, and leaving it changed. On Business and Enterprise, OpenAI says it does not train on business data by default. For a company, a default you control beats a setting you hope people changed.

Admin control and shared work

Business adds centralized billing and administration, single sign-on and MFA options, usage analytics, and a shared workspace where colleagues can build on each other’s work instead of copying prompts around by email. The exact feature list changes often, so check OpenAI’s current plan page for what’s included at the time you buy.

Usage

A standard Business seat is meant for everyday work, and usage limits on every plan change often enough that I wouldn’t quote them. If someone on the team is a very heavy user, OpenAI also sells Premium seats within Business ($100 per user per month billed annually, or $125 monthly, as of October 2026) with five times the usage of a standard seat, and you can mix the two.

Worked example: six people

Prices as published on OpenAI’s pricing and help pages as of October 2026, in US dollars before tax. Plus is billed monthly only; OpenAI doesn’t offer an annual Plus plan. Check the current pricing page before you buy, because they change.

• Six Plus accounts: $20 each per month, so $120 a month, or $1,440 a year, spread across six personal accounts and six expense claims.
• Business, billed annually: $20 per standard seat per month, so $120 a month, or $1,440 a year, in one company workspace.
• Business, billed monthly: $25 per standard seat, so $150 a month, or $1,800 a year.

At annual billing the difference is nothing. At monthly billing it’s $360 a year for six people, which buys you a company-owned workspace with a training default you control, and an admin who can remove a leaver the day they go. To be honest, I struggle to think of a cheaper piece of risk reduction. Business needs a minimum of two seats, so it isn’t an option for a genuine one-person business, and that’s fine: a sole owner on Plus with training switched off is a sensible setup.

When Plus is still the right answer

For a one or two-person company where the owner is the main user, or a single employee trying ChatGPT for a month to see whether it’s worth rolling out, Plus is fine, with the training setting switched off and a rule that client names and confidential details don’t go in.

And if your company runs on Microsoft 365, look at Copilot before you buy anything, because some Copilot features may already be included in the licenses you pay for. Our Copilot vs ChatGPT comparison covers when each one makes more sense.

How I use it, and what I never paste in

For what it’s worth, here is my own practice. I use ChatGPT and Copilot mostly to speed up first drafts and analysis: turning rough project notes into an explanation a client can follow, brainstorming the ways an integration might fail, writing a first-pass PowerShell or Python script, and checking whether a troubleshooting sequence I’ve planned misses an obvious branch. I still verify commands against the actual environment, review any generated code, and test changes before running them with production privileges.

I would never paste client passwords, API tokens, recovery codes, private keys or an unredacted client database export into a general-purpose chat. A Business plan doesn’t change that rule. Even when an account has enterprise controls, I first check the organization’s data-handling policy and minimize or anonymize anything sensitive. The biggest practical benefit is faster preparation. Knowing whether the answer is correct is still my job.

Moving a team from Plus to Business

1. Find out who’s using what. Ask openly and without blame; you’ll get a more honest answer.
2. Decide on annual or monthly billing. Seats are generally not refundable once you’ve committed, so start with the people who use it now.
3. Set up the Business workspace with a company admin account, not someone’s personal login.
4. Write a one-page AI use policy before you invite anyone: what can go in (drafts, public information, your own writing), what can’t (client personal data, health or financial records, passwords, anything under NDA unless approved). Our AI acceptable use policy guide has a starting point.
5. Invite staff with their work email and ask them to recreate any custom GPTs or projects they rely on inside the workspace.
6. Ask them to cancel their personal Plus subscriptions and stop expensing them. Then check next month’s expense claims, because someone always forgets.

If you want help working out where AI genuinely saves time in your business, and how to set it up so the data stays yours, that is part of our automation and practical AI work. Our free Technology Health Assessment also rates AI opportunities alongside your IT and security: 30 minutes of data collection, a plain-language report the next day, yours to keep. Pick a time.

Related services

• Automation and practical AI
• Is ChatGPT safe for business?
• AI acceptable use policy
• Free Technology Health Assessment