Skip to main content
FinTrace

Is Apple Intelligence Safe? Private Cloud Compute

Is Apple Intelligence safe for client material? What stays on the device, what Private Cloud Compute does, the ChatGPT extension and settings to check.

Published
Updated

It depends: Apple Intelligence is safe for client material only where the processing route and your firm’s approval permit that use. On-device tasks keep their processing on the device. Private Cloud Compute handles some requests remotely under Apple’s published privacy protections, while the optional ChatGPT extension sends material to OpenAI.

A summary appearing inside Mail does not tell you which processing route applies. Separate the confidentiality decision from the accuracy check: read the original client email before acting on a summary.

Is Apple Intelligence Safe for Client Material?

Apple Intelligence’s privacy protections differ between on-device processing, Private Cloud Compute and the ChatGPT extension. Apple’s Apple Intelligence privacy notice explains that many models run locally, while tasks requiring more computing power can use Private Cloud Compute.

For a lawyer, the decision starts with the material and the permitted use. An approved summary of a routine internal message is a different decision from sending privileged advice or an attached expert report to an external model. Record which features your firm permits for client work before using them.

Apple Intelligence is available in Australia in supported English on compatible devices. Apple’s device and feature requirements include iPhone 15 Pro and Pro Max, iPhone 16 models and later, and iPhone Air. Supported tablets include iPads with M1 or later and iPad mini models with A17 Pro or A20 Pro. Macs include M1 and later models and MacBook Neo with A18 Pro.

Writing Tools, Mail summaries and the ChatGPT extension appear in Apple’s supported-feature list for iPhone, iPad and Mac. The operating-system version and Siri version affect the controls you see. Treat a software update as a reason to revisit the device’s settings.

How Private Cloud Compute Works

Private Cloud Compute is Apple’s remote processing system for requests that need more computing power than the device provides. The device sends the relevant request for processing and receives the result.

Apple says PCC content is processed to fulfil the request and is not made accessible to Apple. Its security guide explains the technical controls behind that promise. Processing requires access to readable data inside the protected system, so this is different from keeping the work entirely on your phone.

The guide’s stateless-computation requirements limit how long accessible request data persists. Multi-turn interactions can retain encrypted cached state between turns, with the device supplying the material needed to decrypt it. Avoid interpreting “private” as a promise that every task runs locally or that every stored byte disappears immediately.

Independent researchers can inspect published software releases, check measurements against the public transparency log and examine published security-critical source code. Apple also provides research environments. The verifiable-transparency requirements explain how the device checks the software before entrusting it with data.

Apple’s privacy notice also describes web search for requests needing current information. Approval for PCC processing must account for the actual feature and any further destination, including search or an extension.

The ChatGPT Extension

The ChatGPT extension sends the request and selected content to OpenAI when you use ChatGPT through supported Apple features. It is a separate processing route from Private Cloud Compute.

Apple’s ChatGPT extension privacy terms say the extension is off by default. Siri can suggest ChatGPT for a request, or you can ask for ChatGPT explicitly. Writing Tools and other supported features also let you choose the extension.

Without a ChatGPT account, Apple says OpenAI must process the information only to fulfil the request and must not use it for training. Retention is prohibited except where applicable law requires it. Your IP address is obscured, although general location and limited request information are supplied.

Signing in changes the terms that apply: your ChatGPT account settings and OpenAI’s privacy policies govern the interaction. Assess that account separately before connecting it to a device used for client work. The ChatGPT privacy guide explains the account and plan distinctions.

To disable the extension on an iPhone using the current Siri controls, open Settings, then Siri, then ChatGPT, and turn off Use ChatGPT. With Siri AI, open Siri, then Extensions, then ChatGPT, and turn off Use Extension. Apple’s ChatGPT setup instructions describe both interfaces. Earlier systems use Apple Intelligence & Siri instead of Siri.

Settings to Check

Check each work device separately, using its installed software version. Turning off the ChatGPT extension does not turn off Mail summaries or every other Apple Intelligence feature.

FeatureiPhone or iPad checksMac checks
Writing ToolsReview Screen Time’s Content & Privacy Restrictions and the Siri or Intelligence & Siri controls available for that version. Restrict Writing Tools where listed.In System Settings, open Screen Time, then Content & Privacy, then Intelligence & Siri. Restrict Writing Tools under Apple Intelligence.
Mail previewsIn Settings, open Apps, then Mail, and turn off Summarise Message Previews if summaries are outside the approved use.In Mail, open Settings, then Viewing, and turn off Summarise Message Previews.
ChatGPTTurn off Use ChatGPT or Use Extension in the Siri settings described above.Review the ChatGPT extension in Siri settings. Earlier systems place it under Apple Intelligence & Siri. Turn the extension off if it is unapproved.
Notification summariesIn Settings, open Notifications, then Summarise Notifications, and turn off summaries if they expose or condense client messages without approval.In System Settings, open Notifications, then Summarise Notifications, and turn off summaries where required.

Apple documents the iPhone feature controls, Mac feature controls and Mac Screen Time restrictions. A restriction missing from one interface is a reason to use the controls for that device’s version, not assume another switch covers it.

For a controlled check, enable the Apple Intelligence & PCC Report under Privacy & Security and select a report duration. Use a fictional email or document, then export the report to inspect requests sent off the device. Apple says the report records PCC requests and supported extension requests. Protect the exported report because it can contain request details.

Confirm that disabled previews and restricted features stay disabled after reopening the relevant apps. Record the permitted features and account state before allowing client material through the workflow. Keep that record with your firm’s decision about Apple Intelligence privacy, then repeat the check when the software or approved use changes.

FinTrace

Statements in. Evidence out.

FinTrace turns your bank statements into one searchable Excel ledger and a written findings report, with every finding cited to its source page.

See how FinTrace worksNo software to learn · Every finding sourced