Jotform Sign in ChatGPT and Claude: Privacy Review for Freelancers

Short answer: Jotform Sign for ChatGPT and Claude moves your client contracts through two companies at once, and Jotform’s own AI policy says content you put into form fields may be used to train its AI. Our verdict is USE WITH CAUTION: fine for client agreements once you lock down training settings, risky if you paste fees, IDs, or health details straight into the chat. Policy reviewed October 2026. Jotform announced the connector on September 29, 2026. You describe a service agreement or NDA in a prompt, the assistant builds the document, and Jotform sends it out for e-signature and tracks who signed. For a solo consultant that is a real time saver. It also means your client’s name, rates, and payment terms now sit in a chatbot history and in a Jotform account. Here is how we vet privacy claims before any tool gets a verdict.

What Jotform Sign does with your data

Privacy at a glance

Privacy dimension	Jotform Sign’s answer (via ChatGPT or Claude)
Trains on your data?	Jotform: form-field content may train its AI
Training opt-out	No Jotform toggle; chat side depends on your plan
Data retention	Kept while account is active; one month after closure
Third-party sharing	No sale; OpenAI or Anthropic plus Jotform’s AI providers
Storage region	US by default; EU (Frankfurt) is an opt-in setting
Enterprise-team tier	SOC 2 environment, HIPAA BAA on request
Backups	Hourly AWS snapshots, each held 30 days

The connector itself is simple. You link your Jotform account inside ChatGPT or Claude, then either upload a PDF or ask the assistant to draft one. Follow-up prompts change the client name, the dates, the fee, or the signing order, and the assistant pushes the final file to Jotform Sign, which emails it to signers and keeps an audit trail (per Jotform’s ChatGPT Sign page, retrieved 2026-10-01). Recipients do not need a chatbot account to sign. Jotform Sign is free for up to 10 signed documents a month, and paid plans start around $34 per month billed annually (per SignWell’s Jotform pricing overview, retrieved 2026-10-01).

That design puts your contract in three places:

• The chat provider. OpenAI or Anthropic holds the conversation, including the draft text and any PDF you uploaded.
• Jotform. It stores the document, signer details, and the signing record, mostly on Google Cloud in Iowa with backup copies on AWS in Virginia (per Jotform’s security page, retrieved 2026-10-01).
• Jotform’s AI subprocessors. Jotform lists these separately and names OpenAI among its providers.

The policy language deserves a close read. Jotform says the data you put into its forms stays yours and is treated as private, and that it never sells it (per Jotform’s privacy policy, retrieved 2026-10-01). The same policy, however, lets Jotform use form data and form metadata internally to build new services and features, and to run research and development. Its separate AI policy goes further. It promises that your personal data will not train its underlying AI systems, yet it carves out content you place in the fields of forms you create, which may be used for training. It also states plainly that some of its AI providers, OpenAI included, do train on data (per Jotform’s AI policy, retrieved 2026-10-01).

Jotform does not say whether a Sign document counts as a “form you create” under that clause. Sign documents are built from fields, so we read the risk as live until Jotform says otherwise.

On retention, Jotform keeps your data while the account is open. If you close the account and take documents offline, it deletes personal info after one month. An inactive account is held encrypted for a further year, then deleted.

What this means for solo freelancers

Based on the policy as written, the connector is not a leak waiting to happen. It is a chain of three data handlers, and each link has its own default. Here is where that chain bites a freelancer who handles client data.

Scenario 1: your rate card ends up in a training set. You ask ChatGPT on a personal Plus plan to draft a consulting agreement with your day rate, the client’s legal name, and a confidential project codename. On consumer ChatGPT plans, chats can feed model training unless you switch the “Improve the model for everyone” control off (per OpenAI’s enterprise privacy page and help center, retrieved 2026-10-01). The contract text is now covered by two training clauses at once: OpenAI’s on the chat, and Jotform’s on the form fields.

Scenario 2: an NDA becomes a liability. Many client NDAs restrict who may receive confidential information. If you paste the project brief into Claude to “add a scope section,” you have shared it with Anthropic and, through the connector, with Jotform. Anthropic notes that connected services process data on their own infrastructure, under their own terms (per Anthropic’s connector help article, retrieved 2026-10-01). Based on the policy as written, that onward transfer may sit outside what your NDA allows.

Scenario 3: EU clients and the US default. If you sign contracts with clients in the EU, Jotform stores documents in the US unless you flip the EU storage switch. Jotform acts as a processor for data you collect and certifies under the EU-U.S. Data Privacy Framework. The chat provider is a separate processor you would also need to account for. See our guide on the GDPR rules for EU freelancers working with US clients before you route an EU client’s contract through two US vendors.

There is also a quieter risk. Signed contracts are legal records, and Jotform’s policy says it will hand over user data in response to valid legal process. That is standard for any US host, but it matters if your contracts touch sensitive disputes.

How to use it safely

You can keep most of the convenience and cut most of the exposure. Work through these settings before your first signature request.

1. Turn off chat training first. In ChatGPT, open Settings, then Data controls, and switch off “Improve the model for everyone.” In Claude, open Settings, then Privacy, and turn off the option that lets your chats help improve Claude. If you are on ChatGPT Business or a Claude Team plan, training on your workspace is off by default, so check your admin settings instead.
2. Move Jotform storage to the EU if you serve EU clients. In Jotform, open Settings, then the Data tab, and enable EU data storage. Your documents migrate to Frankfurt.
3. Draft templates, not deals, in the chat. Ask the assistant for a clean service agreement with placeholders like [CLIENT] and [RATE]. Fill in the real names, fees, and bank details inside Jotform’s own editor, not in the conversation.
4. Never upload a client’s signed original into the chat. If you need to amend an existing contract, redact it first, or edit it directly in Jotform Sign.
5. Keep regulated data out entirely. No patient details, ID numbers, or tax IDs in prompts. If you need HIPAA coverage, request Jotform’s Business Associate Agreement and use its HIPAA features, without the chatbot in the loop.
6. Disconnect when idle. Remove the Jotform app or connector from ChatGPT or Claude between contract cycles, and delete chats that held contract drafts.
7. Turn on two-factor login on Jotform. Your Sign inbox now holds every signed agreement you have. Our Claude privacy review covers the chat-side settings in more detail.

Privacy-friendlier alternatives

The connector bundles two jobs: drafting contract text with AI, and collecting signatures. You can split those jobs between tools that hold less of your data. These picks match the e-signature and AI-drafting category, not generic security apps.

Documenso (documenso.com) – What it gives you that Jotform Sign does not: open-source code you can audit, and a free Community Edition you can self-host, so signed contracts never leave your own server. – Pricing band: free cloud plan with 5 documents per month; paid Individual cloud plan around $25 per month; self-hosting is free under the AGPL license. – Best for: freelancers who want a hosted e-sign service run by a German-founded company, with a self-host exit route.

DocuSeal (docuseal.com) – What it gives you that Jotform Sign does not: a no-license-fee self-hosted edition with multiple signers, audit logs, and your own email server for delivery. No AI layer touches your documents unless you add one. – Pricing band: open-source edition free to self-host; Pro on-premises about $240 per user per year. – Best for: technical freelancers and small agencies comfortable running a Docker container.

Proton Lumo for the drafting step (proton.me/lumo) – What it gives you that ChatGPT or Claude does not: Proton states it keeps no logs of your prompts and never trains on your conversations, and saved chats use zero-access encryption. Draft the clause wording in Lumo, then paste the finished text into whichever signing tool you choose. – Pricing band: free tier available; paid upgrades run in the low double digits per month. – Best for: anyone who wants AI help writing contracts without a training clause attached. See our full Lumo privacy review.

Whichever tool you pick, check four things before you send the first client contract through it:

• Training language. Does the policy rule out training on document content, not only on “personal data”?
• Storage region. Can you choose EU hosting, or self-host, if your clients expect it?
• Audit trail export. Can you download the signing certificate with each PDF, so the record survives if you leave the service?
• Deletion path. Is there a clear way to delete signed files and the account, with a stated timeline?

Quick matching guide:

• Lowest exposure: self-hosted DocuSeal or Documenso, with drafting in Lumo.
• Least setup: Documenso cloud plus Lumo.
• Staying on Jotform: keep Jotform Sign, but draft in Lumo and skip the chatbot connector.

The verdict

Frequently asked questions

Does Jotform Sign train AI on my contracts?

Jotform’s AI policy says your personal data is not used to train its underlying AI, but content placed in the fields of forms you create may be used for training. Jotform does not say whether Sign documents fall under that clause, so assume they might. Separately, ChatGPT or Claude may train on the chat that drafted the contract, depending on your plan and privacy settings.

Is Jotform Sign GDPR-friendly for EU client contracts?

Based on the policy as written, it can work with care. Jotform acts as a processor for data you collect, certifies under the EU-U.S. Data Privacy Framework, and offers EU storage in Frankfurt as an opt-in setting. The gap is the chat provider, a second processor in the chain. Enable EU storage, keep personal details out of prompts, and list both vendors in your client records.

Can I use Jotform Sign for HIPAA-covered documents?

Jotform offers HIPAA features and a Business Associate Agreement on request, which covers its own platform. The ChatGPT and Claude connector is a different matter: once health details appear in a prompt, the chat provider handles them too, and consumer chatbot plans offer no BAA. Based on the policy as written, keep protected health information out of the chat and use Jotform’s HIPAA setup directly.

Do my clients need a ChatGPT or Claude account to sign?

No. Signers receive a standard signature request by email or link and complete it through Jotform Sign. They never interact with the chatbot. Their name, email, signature, and the signing record are stored in your Jotform account, which is why your Jotform login security and storage region matter more than most freelancers expect.

How long does Jotform keep my signed documents?

Jotform keeps your data while your account stays open. If you close the account and take your documents offline, the policy says personal info is deleted after one month. Inactive accounts are held in encrypted form for an extra year before deletion. Backup snapshots on AWS are kept for 30 days, so download signed copies before closing anything.

Sources

• Jotform privacy policy (retrieved 2026-10-01)
• Jotform AI policy (retrieved 2026-10-01)
• Jotform security page (retrieved 2026-10-01)
• Jotform Sign app for ChatGPT (retrieved 2026-10-01)
• Jotform announcement: Sign for ChatGPT and Claude (dated 2026-09-29, retrieved 2026-10-01)
• OpenAI enterprise privacy (retrieved 2026-10-01)
• OpenAI help center: GPTs data privacy FAQ (retrieved 2026-10-01)
• Anthropic help center: using connectors (retrieved 2026-10-01)
• Anthropic consumer terms update (retrieved 2026-10-01)
• SignWell: Jotform Sign pricing overview (retrieved 2026-10-01)
• Documenso self-hosted (retrieved 2026-10-01)
• DocuSeal on-premises (retrieved 2026-10-01)

Reviewed by Jérémy, founder of AidTaskPro and GreenBudgetHub. Based in central France. Privacy posture sourced from public policies and vendor documentation as of October 1, 2026.