Terms of business and AI confidentiality: what a recruitment agreement gives away in ChatGPT or Claude.

The terms of business is the contract between an agency and each client, and it holds the agency’s most guarded commercial terms: the fee percentage, the replacement guarantee, how long a candidate stays “introduced” to the client and what happens if the client later converts a contractor. Staff paste the agreement into ChatGPT or Claude to summarise it, compare it with another client’s or redraft a clause. This page marks every item in a routine agreement that confidentiality and the client relationship touch, and shows how the same agreement is worked on Ermos inside the agency.

The terms of business

Signed with a client before the first search, then reviewed when a dispute arises, a client asks to renegotiate or a lawyer redrafts the standard form. It is read most closely when a placement goes wrong.

Terms of Business
Dated 1 October 2026

1. Parties.

2. Fee.

3. Guarantee.

4. Introduction period.

5. Conversion.

6. Candidate information.

7. Licensing.

8. Liability.

Signed for the Agency by and for the Client by .

An invented agreement. The parties and signatories are fictional; the ABN is the ATO’s published example value. Hover or tap any highlighted item for the analysis; the full list is below.

What leaves the agency

  1. 1
    The parties and the ABN

    Who is contracting with whom. Identifies the client relationship, which the agency is usually obliged to keep confidential, and a business identifier.

  2. 2
    The fee percentage and payment terms

    The price of the agency’s service. The most guarded number in the business: a competitor who sees it can undercut it, and another client who sees it can ask for it.

  3. 3
    The replacement guarantee

    The agency’s commitment if a placement fails. A cost the agency takes on, and a term clients negotiate hard.

  4. 4
    The introduction period

    How long the agency can claim a fee on a candidate it introduced. A restriction on the client’s hiring, and the clause most often argued over.

  5. 5
    The conversion fee schedule

    What the client pays to take on a contractor permanently. Commercial information that shapes how contractors are placed.

  6. 6
    The candidate information clause

    A generic duty to hold candidate information in confidence. The clause that governs what a client may do with the CVs it receives. The wording is standard and contains no personal information. Privacy Act guide.

  7. 7
    The labour hire licensing clause

    The NSW Government says there is currently no labour hire licensing scheme in New South Wales, and that Queensland, Victoria, South Australia and the ACT have schemes. Whether a licence is needed depends on where the work is done and what the agency supplies, so the clause is general and a lawyer should draft it.

  8. 8
    The liability limit

    The most the agency can be liable for on a placement. A term that decides who bears the loss when something goes wrong.

  9. 9
    The signatories

    Two named directors who bound their companies. Personal information about them, and the people a dispute would be addressed to. Privacy Act guide.

What happens in Frontier Models (ChatGPT, Claude)

  • The whole document is transmitted to the provider’s servers. On personal plans the user cannot choose where it is stored or processed, and for the major providers that has generally meant outside Australia, under that country’s legal process. Some business plans offer storage in Australia, but the provider still receives the content.
  • On consumer tiers, prompts can be retained and used to train future models.
  • The provider’s staff and systems can reach the content under the provider’s own policies.
  • Once sent, the agency no longer controls it. Retention and deletion happen on the provider’s terms.

The same document on Ermos

Ermos Dominion

The document is drafted on a unit in your office, from your own templates and the candidate file. Every marked item stays on the unit, which keeps working with the internet switched off. Nothing in it is transmitted to an AI provider, so there is no disclosure to analyse: the confidentiality work is the same as for your file server.

Ermos Edge

Your documents, the index and your access boundaries stay on your own instance in an Australian data centre. When a staff member asks for this draft, only their question and the excerpts they are permitted to see go to a named Australian provider, who is contractually barred from keeping the content or training any model on it. Nothing is processed outside Australia.

Frontier Models (ChatGPT, Claude)Ermos EdgeErmos Dominion
Where the document is processedProvider servers, generally offshore on personal plansYour instance in an Australian data centre; answers generated in AustraliaThe unit in your office
Who can read itProvider staff and systems, under policyYour staff, within the boundaries you set. The named Australian provider processes only permitted excerpts, under contract, and keeps nothingYour staff only
Is it keptOn the provider’s termsKept on your instance; the provider is barred from retaining itStays on the unit
Can it train a modelOn consumer tiers, yesNo, by contractOnly your own unit learns from it, on your hardware

Part of AI data leakage in recruitment agencies.

Common questions

Do ChatGPT and Claude use the information in a terms of business agreement?
Yes, everything pasted or uploaded is sent to the AI company's servers and processed there to produce a reply. As at October 2026, whether a conversation on a personal plan (ChatGPT Free, Plus or Pro; Claude Free, Pro or Max) can be used to train the models depends on a setting each user controls. Business plans (ChatGPT Business and Enterprise, Claude Team and Enterprise) and the developer APIs sit under commercial terms, and OpenAI and Anthropic each say they do not train on that content by default (OpenAI, Anthropic). On either product, the thumbs up and thumbs down buttons can send a whole conversation back for training. The agreement holds the agency's fee percentage, a replacement guarantee, a twelve-month introduction period and a liability limit.
Is it safe to paste a recruitment terms of business into ChatGPT or Claude to summarise it?
No, because it holds terms the agency and the client expect to stay between them. The Office of the Australian Information Commissioner (OAIC) recommends in its guidance on commercially available AI products that organisations do not enter personal information, and particularly sensitive information, into publicly available generative AI tools, because of the significant and complex privacy risks. Many agreements ask each side to keep the terms confidential, so pasting one into a tool the agency does not control can breach the agreement itself. The two signatories are also named.
Does a ChatGPT Business or Claude Team plan make it safe for a terms of business agreement?
Not on its own. A business plan changes the default on training, but it does not change who receives the content. On a personal plan the user cannot choose where conversations are stored or processed. Some business plans let an organisation choose to store data at rest in Australia (OpenAI), which still leaves the content with the AI company. The OAIC's guidance also tells organisations to review carefully the terms and settings that will apply to their use of any AI product. The fee schedule, the guarantee and the introduction period would still reach the AI company, and the agency's confidentiality duty to the client does not depend on the plan. Our comparisons with ChatGPT Enterprise and Claude weigh the trade-offs.
How can a recruitment agency use AI for a terms of business agreement without sending it to ChatGPT or Claude?
Ermos is built so the document stays under your control. On the Dominion AI unit it is drafted inside your office and none of it is sent to an AI provider. On Ermos Edge your documents and index stay on your own instance in an Australian data centre, and only the question and the excerpts the user is permitted to see go to a named Australian provider that is contractually barred from keeping them or training any model on them. Ermos prepares the summary from the signed agreement and the agency's own standard terms. A director or lawyer checks any clause before the agency changes or relies on it.
Does a NSW agency need a labour hire licence?
The NSW Government says there is currently no labour hire licensing scheme in New South Wales, and that it is considering how to regulate labour hire providers. It also says Queensland, Victoria, South Australia and the ACT run licensing schemes, so an agency supplying workers to host businesses there should check those schemes. Take advice on what your own contractor business supplies.
Why are terms of business sensitive?
They hold the agency's fee schedule, guarantee, exclusivity and introduction terms, and the identity of the client, which is commercially sensitive to both parties. Many agreements also ask each side to keep the terms confidential, so pasting one into a tool the agency does not control can breach the agreement itself.
Who has to comply with the Privacy Act under these terms?
Whichever party is an APP entity. A client that receives candidate information holds personal information, and an agency with turnover over $3 million is not a small business operator. A smaller agency may be outside the Act, but section 6D(4)(c) removes small business status where it discloses personal information about another individual for a benefit, unless the individual consents or the law requires or authorises it.

See Dominion answering from your own documents.

A demonstration takes 30 minutes, uses no client data, and comes with no obligation.

Book a demo