Will instruction sheets and AI confidentiality: what the plans for her children give away in ChatGPT or Claude.

A will instruction sheet is the most personal form a law firm completes. It records who the client trusts with her children, what she owns, what she is afraid of and who she wants kept out, usually in her own words, taken down in an hour. Staff paste it into ChatGPT or Claude to turn the notes into drafting instructions or a first draft of the will. This page marks every item in an instruction sheet that rule 9 and the Privacy Act bear on, and shows how the same sheet is turned into a draft on Ermos inside the firm.

The will instruction sheet

Completed by the solicitor in the first meeting with a client who wants a will, and used to draft the will and later to defend it if it is challenged.

Will instruction sheet
Matter SOTO-0421 · interview 30 October 2026, 10.30am, in person ·

Client
Children
Capacity note
Guardian and executor
Assets
Structure
Other
Fees

An invented form. Hover or tap any highlighted item for the analysis; the full list is below.

What leaves the firm

  1. 1
    The client, her address and her date of birth

    Enough to identify her and to open accounts in her name. Personal information, and confidential to the client under rule 9. Rule 9 confidentiality guide.

  2. 2
    Two children and their dates of birth

    Two named minors with dates of birth, and the reason the will exists. Personal information about children. Privacy Act guide.

  3. 3
    Guardian and executor choices

    Two named people the client trusts with her children and her estate, in order of preference, and her wish to keep one of them out of the drafting. Their personal information and the client’s most private planning. Rule 9 confidentiality guide.

  4. 4
    Health and the capacity note

    A diagnosis, medication and a treating doctor, recorded so the will can be defended if its validity is later questioned. Health information is sensitive information under the Privacy Act, which applies to a law practice only if the practice is covered, for example through turnover above $3 million. Privacy Act guide.

  5. 5
    Assets, debts and superannuation

    A home, a mortgage, super and cover, with values. A map of what the estate holds, useful to a fraudster and to a relative who expects more. Rule 9 confidentiality guide.

  6. 6
    The children’s father, excluded, and a court file number

    A named person the client wants kept out of the trust, tied to a family court file. Plans the other parent has not been told about, in a document that sits beside live proceedings. Part XIVB of the Family Law Act, covered on the family law affidavit page, is why identifying people in those proceedings is handled with care. Privacy Act guide.

  7. 7
    A claim that has not been decided

    That the client expects to recover from her employer and wants the money held for her children. It links two matters, and tells a reader she expects to recover. Part of the client’s privileged instructions. Legal privilege guide.

  8. 8
    The fee estimate

    The firm’s price for the work, sent with the client’s name.

  9. 9
    The solicitor

    Ties the sheet to a practitioner bound by rule 9. Law Society AI guidance.

What happens in Frontier Models (ChatGPT, Claude)

  • The whole document is transmitted to the provider’s servers. On personal plans the user cannot choose where it is stored or processed, and for the major providers that has generally meant outside Australia, under that country’s legal process. Some business plans offer storage in Australia, but the provider still receives the content.
  • On consumer tiers, prompts can be retained and used to train future models.
  • The provider’s staff and systems can reach the content under the provider’s own policies.
  • Once sent, the firm no longer controls it. Retention and deletion happen on the provider’s terms.

The same document on Ermos

Ermos Dominion

The document is drafted on a unit in your office, from your own templates and the matter file. Every marked item stays on the unit, which keeps working with the internet switched off. Nothing in it is transmitted to an AI provider, so there is no disclosure to analyse: the confidentiality work is the same as for your file server.

Ermos Edge

Your documents, the index and your access boundaries stay on your own instance in an Australian data centre. When a staff member asks for this draft, only their question and the excerpts they are permitted to see go to a named Australian provider, who is contractually barred from keeping the content or training any model on it. Nothing is processed outside Australia.

Frontier Models (ChatGPT, Claude)Ermos EdgeErmos Dominion
Where the document is processedProvider servers, generally offshore on personal plansYour instance in an Australian data centre; answers generated in AustraliaThe unit in your office
Who can read itProvider staff and systems, under policyYour staff, within the boundaries you set. The named Australian provider processes only permitted excerpts, under contract, and keeps nothingYour staff only
Is it keptOn the provider’s termsKept on your instance; the provider is barred from retaining itStays on the unit
Can it train a modelOn consumer tiers, yesNo, by contractOnly your own unit learns from it, on your hardware

Part of AI data leakage in law firms.

Common questions

Do ChatGPT and Claude use the information in a will instruction sheet?
Yes, whatever is pasted from the sheet is sent to the AI company's servers and processed there to produce a reply. As at October 2026, whether a conversation on a personal plan (ChatGPT Free, Plus or Pro; Claude Free, Pro or Max) can be used to train the models depends on a setting each user controls. Business plans (ChatGPT Business and Enterprise, Claude Team and Enterprise) and the developer APIs sit under commercial terms, and OpenAI and Anthropic each say they do not train on that content by default (OpenAI, Anthropic). On either product, the thumbs up and thumbs down buttons can send a whole conversation back for training. This sheet holds two children's names and birth dates, a capacity note with a diagnosis and medication, and the client's wish to keep the children's father out of the trust.
Can we use ChatGPT or Claude for a will instruction sheet if we remove the names?
No, because the circumstances on the sheet still point to one client. Removing names rarely makes a document anonymous. Information stays personal information while the person is reasonably identifiable, and the OAIC warns that information can be at risk of re-identification even when it has been de-identified or anonymised. Two children born in 2018 and 2020, an anxiety disorder under treatment, a family court file number and a claim she expects to recover on fit only one person. The Office of the Australian Information Commissioner (OAIC) recommends in its guidance on commercially available AI products that organisations do not enter personal information, and particularly sensitive information, into publicly available generative AI tools, because of the significant and complex privacy risks. Health information is also sensitive information under the Privacy Act, which applies to a law practice only if the practice is covered.
Can ChatGPT or Claude remember the details in a will instruction sheet later?
They can. Both products also have memory features that can carry details from one conversation into later ones, and on a personal account each user decides whether they are switched on (ChatGPT, Claude). A solicitor who pastes one client's sheet and later asks for help with a different will could find those details follow into the new chat. The guardian choices, the children's birth dates and the wish to keep a sister from seeing the draft belong to this client and to no other matter.
How can a law firm use AI for a will instruction sheet without sending it to ChatGPT or Claude?
Ermos is built so the document stays under your control. On the Dominion AI unit it is drafted inside your office and none of it is sent to an AI provider. On Ermos Edge your documents and index stay on your own instance in an Australian data centre, and only the question and the excerpts the user is permitted to see go to a named Australian provider that is contractually barred from keeping them or training any model on them. The first draft of the will is produced from the instruction sheet and the firm's own will precedents, and a solicitor checks every clause against the client's instructions and signs off the draft.
Why is the instruction sheet more sensitive than the will?
The will is a formal document with the minimum detail. The sheet holds the reasons: who the client does not trust, what she fears, her health and what else is going on in her life. It is also what a solicitor produces to defend a will if it is challenged, so it is written candidly and kept.
Does the Privacy Act cover the information on a will instruction sheet?
Health information is sensitive information under the Privacy Act, and the Act applies to law practices that are covered, for example those with annual turnover above $3 million. A smaller practice may sit outside it. Rule 9 of the Australian Solicitors' Conduct Rules applies to every solicitor regardless of the size of the practice.
How is a will drafted from an instruction sheet on Ermos?
The sheet, the firm's will precedents and the testamentary trust clauses sit on your own network, and the unit produces a first draft with the sheet's instructions beside it. The solicitor checks every clause against the instructions and decides what the will can and cannot do.

See Dominion answering from your own documents.

A demonstration takes 30 minutes, uses no client data, and comes with no obligation.

Book a demo