Is it safe to put tender drawings and rates into ChatGPT or Claude?

Short answer: It can be, if you use the right kind of account and set a few rules. Use a company business or team plan, not staff's personal accounts, keep your rates inside an account your firm owns, and put an NDA in place with anyone who handles your files. Check the tender's confidentiality conditions, and remember that PDPA 2010 applies to any personal data in the documents, not just to customer lists.

What's the risk of uploading tender drawings to AI?

Tender documents usually come with conditions. Main contractors and consultants issue drawings for the purpose of pricing, often with a clause saying they're confidential and not to be shared beyond that purpose. Your rate sheet is your own commercial secret. If a competitor saw it, they'd know exactly how to undercut you.

So the real questions are practical ones:

Who can see the files once they're uploaded?
Can the provider use them to train or improve its models?
Who in your firm controls the account, and what happens when someone leaves?
Does anyone outside your firm, such as a consultant setting things up, get access?

Is a personal ChatGPT or Claude account safe for tender work?

It's the setup we'd steer you away from. The common situation is an estimator using their own free or personal paid account because it was quick. The problems:

Training settings. On personal accounts, whether your conversations can be used to improve the provider's models depends on the account settings and the provider's current consumer terms. Many staff never check.
Ownership. The account belongs to the person, not the firm. When they leave, your drawings, rates and chat history leave with them.
No oversight. Nobody in management can see what's been uploaded or remove access.

How are business and team plans different?

Anthropic and OpenAI both offer business plans for organisations. Under their business terms, both providers state that they don't use business customers' content to train their models by default. Terms do change, so read the current data and privacy pages for the plan you choose before you sign up, and keep a copy.

Question	Personal account	Business or team plan
Who owns the account?	The individual	Your company
Used for model training?	Depends on settings and consumer terms	Not by default, under the provider's business terms
Add and remove users	Not possible	Admin controls who has access
When a staff member leaves	Their history goes with them	You remove their seat; the firm keeps the work
Who pays	Often the employee	The company, directly to the provider

This is why UkurBQ only sets up inside a company's own Claude or ChatGPT business account. You pay the provider directly, you own the account, and you decide who has a seat.

How do I keep my rates private?

Your rates are the most sensitive thing in the whole process. A few rules that work:

Keep the rate sheet in your own account only. It shouldn't sit on anyone else's laptop or in anyone else's AI account, including ours.
Apply rates after sign-off. Quantities are drafted and checked first. Rates are applied at the end, inside your account.
Limit seats. Give access to the people who price, not the whole office.
Never share rates across firms. A setup built for you uses your rates and nobody else's. Your files and rates are never used for another firm.
Update in one place. When copper or equipment prices move, update the rate sheet once so old figures aren't floating around in chat histories.

Do I need an NDA before sending drawings to an AI consultant?

Yes. Anyone outside your firm who handles your tender documents or rates should sign one first. With UkurBQ, we sign an NDA before you send anything, including the past tender for the free test. Test files are deleted on request.

It's also worth checking the tender's own conditions. Some main contractors restrict sharing documents with third parties. If yours does, use a past tender that has closed, or ask the main contractor. The free test is designed around a past tender for exactly this reason.

Does Malaysia's PDPA 2010 apply to tender drawings?

The Personal Data Protection Act 2010 governs how personal data is handled in commercial transactions in Malaysia. Most of a drawing set isn't personal data: layouts, schedules and specifications are commercial information. But tender packs often do contain personal data, such as:

Names, phone numbers and emails of consultant and main contractor staff on title blocks and correspondence.
Owner or occupier details on residential projects.
Staff details on your own forms, such as site supervisor CVs.

In general terms, PDPA expects you to use personal data only for the purpose it was collected, keep it reasonably secure, and not keep it longer than needed. The Act was amended in 2024, so check the current requirements with the Personal Data Protection Department (JPDP) or your legal adviser if you handle a lot of personal data. For takeoff purposes, a sensible habit is to avoid uploading documents you don't need, like CVs or correspondence, and to stick to the drawings, schedules and BQ.

This isn't legal advice. If your firm has specific obligations under a contract or to a client, speak to your lawyer.

What should a safe AI setup look like?

Company business or team plan, paid by the firm.
An admin who controls seats and removes leavers.
Rates kept in your own account and applied only after your estimator signs off.
NDA with any outside party before files are shared.
Only the documents needed for takeoff are uploaded.
Written rules for staff: no personal accounts for tender work.

FAQ

Will Anthropic or OpenAI see our drawings?

Your files are processed on their systems so the AI can read them. On business plans, both providers state they don't train on your content by default. Read their current business data terms for the detail on retention and access.

Does UkurBQ keep a copy of our rates?

No. The setup runs in your own account, and your rates stay there. Any files sent for the free test are covered by the NDA and deleted on request.

Can we use a past tender for the free test if it was confidential?

Usually a closed tender is the safest choice. If the conditions still restrict sharing, ask the main contractor, or pick a different past job.

Is ChatGPT or Claude more secure?

Both offer business plans with admin controls and no training on business content by default. Compare their current terms and pick the one your team is comfortable with.

Try it on a tender you've already priced

Send one past tender. We return a draft BQ with every quantity traced to its sheet, so you can compare it with your own. Free, under NDA.

Book a free BQ test