AI Privilege Is a Financial Control Issue: What CFOs Need to Know

AI is now part of the financial control environment, and its conversations may become evidence.

Executives use AI to evaluate liquidity, transaction structures, disputes, financial reporting issues, investigations, debt negotiations and employment matters. These tools can preserve an unusually detailed record of assumptions, motivations and proposed actions.

Confidentiality and legal privilege are not interchangeable. A private AI chat about a legal issue does not automatically qualify as an attorney-client communication.

In United States v. Heppner (February 2026), a New York federal court rejected privilege and work-product protection for independently created Claude chats. In Warner v. Gilbarco and Morgan v. V2X, courts recognized work-product protection for particular self-represented litigants' AI-supported litigation preparation.

On October 21, Fontainebleau Florida Hotel v. Botach held that AI prompts and outputs may qualify as work product even without lawyer direction, but rejected blanket protection and considered subpoenas to four AI providers. Protection requires a fact-specific, document-by-document showing.

Separately, in March, the Delaware Court of Chancery considered a CEO's ChatGPT strategy as evidence in Fortis Advisors v. Krafton, involving a potential $250 million acquisition earnout. That case was not a privilege ruling. It illustrates how AI-assisted strategic thinking can enter the litigation record.

1. Classify sensitive uses: contract disputes, M&A, lender negotiations, investigations, regulatory inquiries, compensation and employment matters.
2. Use counsel-directed workflows: where legal strategy or anticipated litigation is involved, have counsel determine tools, purpose, documentation and access.
3. Review provider terms: confidentiality, retention, training, access, subprocessors, memory and connected applications are all material.
4. Prepare for legal holds: identify relevant AI accounts, agents, transcripts and data sources; preserve records when legal duties arise.
5. Limit unnecessary distribution: an agent sending sensitive summaries into email, CRM or third-party systems can expand the evidence footprint.

Do not assume attorney review after the fact makes an earlier AI conversation privileged. Do not treat deleting logs once litigation is foreseeable as a risk-management strategy.

Finance leaders should keep using AI to improve decision quality. But the same rigor used for signatory authority, financial reporting, audit trails, confidentiality and document retention belongs around AI-assisted work.

The CFO does not decide whether material is privileged. The CFO ensures the company can identify, protect and preserve information so counsel can make that determination.

That is a financial and operational governance responsibility, not simply an IT setting.