It depends on product terms, account type, data classification and policy — not a blanket yes or no.
Separate account types and terms
Consumer, team and enterprise plans differ on training data and admin controls — match the product you actually use.
Pasting personal data, unpublished finance, client contracts or source into unapproved tools is the usual governance gap.
Minimum pre-adoption checklist
Data classification, an approved-tool list, banned upload types, and an owner for exceptions.
Pilot on low-risk workflows before expanding to client-data workflows.