Claim denial dispute letters and AI confidentiality: what a declined-claim letter gives away in ChatGPT or Claude.

When an insurer declines a client’s claim, the broker writes the dispute letter, and it is the document most likely to be drafted at speed in ChatGPT or Claude. The letter sets out what happened, quotes the insurer’s reasons, argues against them, and states what the client wants. It also carries the client’s weakest facts, often an admission from a staff member that the insurer has not yet heard. This page marks every item in a realistic dispute letter that the Code of Practice, ASIC’s complaint-handling guide RG 271 and the Privacy Act bear on, and shows how the same letter is drafted on Ermos inside the brokerage.

The claim denial dispute letter

Sent within days of a decline, once the client has authorised the brokerage to act and the insurer’s reasons and any report have been reviewed.

Pacific Harbour Insurance Brokers
AFSL 123456

The Claims Manager, Meridian General Insurance, claim MG-BP-2026-05127, policy BP-0000-1234¹
By email
2 November 2026

Re: Declined claim, CBCT scanner, Marchetti Dental Pty Ltd (Northside Smile Studio)²

We act for the insured and write on its instructions. Dr Lena Marchetti and Dr Marco Marchetti are the directors.²

What happened. On Friday 23 October a storm hit Brookvale. At about 3.40pm the practice lost power and the scanner in Imaging room 1 shut down with an error. It has not restarted. The practice’s electrician found no damage to the building supply and no surge protection on that circuit.³

Your decision. Your letter of 30 October declines the claim on the grounds that the failure resulted from gradual deterioration and that the scanner was not maintained as the policy requires, because its last service was in February 2025.⁴

Our response. The practice manager, Kerry-Ann Lowe, accepts the service reminder arrived in December 2025 and was set aside. She says the machine was working normally until the storm. We do not suggest the service was done; we say the loss followed the storm and the lapse did not cause it.⁵

The practice’s loss. The repair quote is $43,670 including GST. Since 23 October 31 appointments have been moved or lost, and the practice estimates lost gross profit at $2,300 per trading day. Lessor repayments of $4,900 a month continue.⁶

What we ask. That you reverse the decision and pay the repair, or at least pay the repair while the practice’s business interruption claim is assessed. If the exclusion for deterioration is relied on, please say what evidence shows the failure was gradual rather than a result of a surge.⁸

Please treat this letter as a complaint. We ask for your written response within 30 calendar days, with the reasons for any decision and the information relied on, and a copy of any further report or technical evidence you rely on. If the matter is not resolved the practice may take it to the Australian Financial Complaints Authority.⁷

The practice’s bank account is currently frozen following a separate fraud, so timing matters to its cash flow.⁹

Priya Desai¹⁰
Account Manager, Pacific Harbour Insurance Brokers. Authority signed by Lena Marchetti, 30 October 2026.¹⁰

An invented letter. The policy number is a placeholder. Hover or tap any highlighted item for the analysis; the full list is below.

What leaves the brokerage

The insurer, the claim and the policy

A live claim identified to a third party’s servers by its reference numbers. Confidential claim information shared between the insurer, the client and the broker. Privacy Act guide.

Frontier Models (ChatGPT, Claude)	A live claim identified on a third party’s servers
Ermos Edge	Stays on your instance in Australia; leaves only inside a permitted excerpt, per question, to the named provider
Ermos Dominion	Stays on the unit in your office

The client and its directors

The company, its trading name and two named directors. Personal information about the directors, and the identity of the claimant. Privacy Act guide.

Frontier Models (ChatGPT, Claude)	Transmitted to the provider, generally offshore on personal plans
Ermos Edge	Stays on your instance in Australia; leaves only inside a permitted excerpt, per question, to the named provider
Ermos Dominion	Stays on the unit in your office

The account of the loss

A detailed account of the day, the time, what failed and what the electrician found, including that no surge protection was fitted. Evidence in a dispute, drafted before the client’s version has been settled.

Frontier Models (ChatGPT, Claude)	Your account of the loss transmitted
Ermos Edge	Stays on your instance in Australia; leaves only inside a permitted excerpt, per question, to the named provider
Ermos Dominion	Stays on the unit in your office

The insurer’s reasons

The grounds on which the claim was declined, in the insurer’s own terms. Confidential to the parties and the central issue in the dispute.

Frontier Models (ChatGPT, Claude)	The insurer’s reasons transmitted
Ermos Edge	Stays on your instance in Australia; leaves only inside a permitted excerpt, per question, to the named provider
Ermos Dominion	Stays on the unit in your office

A staff member’s admission

The practice manager accepts the service was overdue. A statement against the client’s interest by a named employee, the sort of fact the insurer would most like to have confirmed. Personal information about her. Privacy Act guide.

Frontier Models (ChatGPT, Claude)	A staff member’s admission transmitted
Ermos Edge	Stays on your instance in Australia; leaves only inside a permitted excerpt, per question, to the named provider
Ermos Dominion	Stays on the unit in your office

The loss and the cash position

A repair quote, lost appointments, a daily income estimate and lessor repayments. Confidential financial information, and a statement of how long the client can wait.

Frontier Models (ChatGPT, Claude)	Lost income and repayments transmitted
Ermos Edge	Stays on your instance in Australia; leaves only inside a permitted excerpt, per question, to the named provider
Ermos Dominion	Stays on the unit in your office

7
The complaint request and its timeframe
A request to treat the letter as a complaint and respond in 30 calendar days. ASIC’s RG 271 sets a maximum of 30 calendar days after the complaint is received for a written response to a standard complaint (RG 271.56), and a response that rejects a complaint must set out the reasons and the right to go to AFCA (RG 271.53 and 271.54). The wording is public and holds no client data.

Frontier Models (ChatGPT, Claude)	A published timeframe with no client data
Ermos Edge	Nothing to protect in a published timeframe
Ermos Dominion	Nothing to protect in a published timeframe

The remedy and the argument

What the client wants and the fallback if it is refused. The negotiating position, and the legal and factual argument a person has to be satisfied about before it goes out.

Frontier Models (ChatGPT, Claude)	Your negotiating position transmitted
Ermos Edge	Stays in Australia, but the argument and the figures need a person to check them
Ermos Dominion	Stays on the unit, but the argument and the figures need a person to check them

The frozen bank account

A separate fraud and its effect on the practice’s cash flow, mentioned as leverage. A commercial confidence about a different matter, and one the insurer does not otherwise know.

Frontier Models (ChatGPT, Claude)	A commercial confidence about another matter transmitted
Ermos Edge	Stays on your instance in Australia; leaves only inside a permitted excerpt, per question, to the named provider
Ermos Dominion	Stays on the unit in your office

The broker and the client’s authority

Ties the letter to a named account manager and records the written authority to act. The Code of Practice commits a brokerage to act in the client’s best interests when acting for them (clause 5.3).

Frontier Models (ChatGPT, Claude)	Transmitted, and the leak is traceable to you
Ermos Edge	Stays on your instance in Australia; leaves only inside a permitted excerpt, per question, to the named provider
Ermos Dominion	Stays on the unit in your office

What happens in Frontier Models (ChatGPT, Claude)

The whole document is transmitted to the provider’s servers. On personal plans the user cannot choose where it is stored or processed, and for the major providers that has generally meant outside Australia, under that country’s legal process. Some business plans offer storage in Australia, but the provider still receives the content.
On consumer tiers, prompts can be retained and used to train future models.
The provider’s staff and systems can reach the content under the provider’s own policies.
Once sent, the brokerage no longer controls it. Retention and deletion happen on the provider’s terms.

The same document on Ermos

Ermos Dominion

The document is drafted on a unit in your office, from your own templates and the client file. Every marked item stays on the unit, which keeps working with the internet switched off. Nothing in it is transmitted to an AI provider, so there is no disclosure to analyse: the confidentiality work is the same as for your file server.

Ermos Edge

Your documents, the index and your access boundaries stay on your own instance in an Australian data centre. When a staff member asks for this draft, only their question and the excerpts they are permitted to see go to a named Australian provider, who is contractually barred from keeping the content or training any model on it. Nothing is processed outside Australia.

	Frontier Models (ChatGPT, Claude)	Ermos Edge	Ermos Dominion
Where the document is processed	Provider servers, generally offshore on personal plans	Your instance in an Australian data centre; answers generated in Australia	The unit in your office
Who can read it	Provider staff and systems, under policy	Your staff, within the boundaries you set. The named Australian provider processes only permitted excerpts, under contract, and keeps nothing	Your staff only
Is it kept	On the provider’s terms	Kept on your instance; the provider is barred from retaining it	Stays on the unit
Can it train a model	On consumer tiers, yes	No, by contract	Only your own unit learns from it, on your hardware

Part of AI data leakage in insurance brokerages. See how this works in practice: Claims chronologies on Ermos.

Common questions

Do ChatGPT and Claude use the information in a claim denial dispute letter?

Everything pasted or uploaded goes to the AI company's servers and is processed there to produce a reply. As at October 2026, whether a conversation on a personal plan (ChatGPT Free, Plus or Pro; Claude Free, Pro or Max) can be used to train the models depends on a setting each user controls. Business plans (ChatGPT Business and Enterprise, Claude Team and Enterprise) and the developer APIs sit under commercial terms, and OpenAI and Anthropic each say they do not train on that content by default (OpenAI, Anthropic). On either product, the thumbs up and thumbs down buttons can send a whole conversation back for training. A dispute letter carries the insurer's reasons for declining the claim, the practice manager's admission about the overdue service and lost income of $2,300 a trading day.

Can we use ChatGPT or Claude for a claim denial dispute letter if we remove the names?

No, because the story of the claim still identifies the client. Removing names rarely makes a document anonymous. Information stays personal information while the person is reasonably identifiable, and the OAIC warns that information can be at risk of re-identification even when it has been de-identified or anonymised. A scanner that shut down in a Brookvale storm at about 3.40pm on 23 October, a service last done in February 2025 and a $43,670 repair quote fit one practice. The Office of the Australian Information Commissioner (OAIC) recommends in its guidance on commercially available AI products that organisations do not enter personal information, and particularly sensitive information, into publicly available generative AI tools, because of the significant and complex privacy risks.

Does a ChatGPT Business or Claude Team plan make it safe for a claim denial dispute letter?

Not on its own. A business plan changes the default on training, but it does not change who receives the content. On a personal plan the user cannot choose where conversations are stored or processed. Some business plans let an organisation choose to store data at rest in Australia (OpenAI), which still leaves the content with the AI company. The OAIC's guidance also tells organisations to review carefully the terms and settings that will apply to their use of any AI product. The letter's argument against the insurer, its figures and its request to treat the letter as a complaint would still reach the AI company before the insurer sees them. Our comparisons with ChatGPT Enterprise and Claude weigh the trade-offs.

How can a brokerage use AI for a claim denial dispute letter without sending it to ChatGPT or Claude?

Ermos is built so the document stays under your control. On the Dominion AI unit it is drafted inside your office and none of it is sent to an AI provider. On Ermos Edge your documents and index stay on your own instance in an Australian data centre, and only the question and the excerpts the user is permitted to see go to a named Australian provider that is contractually barred from keeping them or training any model on them. The letter is drafted from the claim file and the brokerage's own dispute letter template. The account manager checks every fact and figure against the insurer's reasons and signs it.

How long does an insurer have to answer a complaint about a declined claim?

ASIC's RG 271 sets a maximum of 30 calendar days after the complaint is received for a written response to a standard complaint (RG 271.56). An insurer need not meet that if resolution is particularly complex or circumstances beyond its control are causing delay, but it must send the complainant a delay notification before the 30 days end (RG 271.64 to 271.66). The brokerage should record the date the complaint was lodged.

What must the insurer's response contain?

ASIC says a written internal dispute resolution response must include the final outcome, the right to escalate to AFCA and AFCA's contact details. If the complaint is rejected in part or in full, the reasons must be clearly set out, including the findings and the information relied on.

Can the client take a declined claim further?

The insurer's response must tell the complainant about the right to escalate to the Australian Financial Complaints Authority. Whether AFCA can consider a particular business's complaint depends on its rules, so check them before promising the client that route. The Code of Practice also lets anyone report an alleged breach of the Code by the brokerage to the Insurance Brokers Code Compliance Committee (clause 11.2).

See Dominion answering from your own documents.

A demonstration takes 30 minutes, uses no client data, and comes with no obligation.

Book a demo

Keep reading

AI data leakage in insurance brokerages AI for insurance brokers The Privacy Act, the APPs and AI All professions