Is ChatGPT kosher?
It is the most common question we get, and the most common answer — "it depends what you mean" — is unhelpful. Here is a straight one.
Food is certified. Software is not. There is no hechsher for ChatGPT, nobody is inspecting it, and any product that implies otherwise is telling you something that is not true. So the question has to be rephrased before it can be answered.
What people are actually asking is narrower and much more answerable: can my family use this without encountering things we have decided not to encounter? That question has a real answer, and for ChatGPT as it ships, the answer is no — not because of anything malicious, but because of what it was built to be.
What ChatGPT's safety policy actually is
ChatGPT has a content policy, and it is not nothing. It refuses a real list of things: instructions for weapons, explicit sexual content involving minors, direct assistance with serious crime. If your concern is that a general assistant will cheerfully produce the worst material on the internet, that concern is mostly misplaced.
But that policy was written for everybody on earth at once. It is the intersection of what is acceptable to a secular adult in Berlin, a teenager in Ohio and a business user in Tokyo. It permits a great deal that a frum family would not want in the house, and it was never intended to do otherwise. It is not a failure of the product. It is the product working as designed, for an audience that is not you.
The specific gaps
- Romantic and sexual material short of explicit. A general policy permits a lot of it, and a curious thirteen-year-old will find the edge quickly.
- Images of people. Ask for a picture of a woman and you get whatever the model's training data considers a normal picture of a woman. Tznius is not a category any general model has.
- Religious content. A general model will answer a halachic question fluently and confidently, and it may be wrong, out of date, or drawn from a source you would not accept. It has no way of knowing which.
- No visibility. If your child had a two-hour conversation yesterday, there is no parent-facing record of what was asked or what came back.
- No settings that are yours. You cannot add a topic to the blocked list. The policy is the vendor's and it applies to everyone identically.
Why your internet filter does not close the gap
This is the part most families get wrong, and it is worth stating plainly: a device or network filter is not protecting you here. A filter works by deciding whether to allow a web address. Once it has allowed chat.openai.com, every conversation inside that page is a single approved connection. The filter cannot see the questions and it cannot see the answers, because to the filter it is all one permitted site.
So a home with a TAG-installed filter and a strict profile is protected on the open web and essentially unprotected inside a conversational AI. That is not a criticism of the filter. It is a category the filter was not built for, and most people have not yet realised the two are different problems.
So what would make one usable?
A tool that is genuinely usable in a frum home needs a few specific properties, and you can check all of them from the outside:
- Filtering on both sides. The question and the answer both get checked. Checking only the question catches the obvious cases and misses everything where an innocent prompt produces an answer you did not want.
- Filtering on the server, not the device. If it runs in the browser or in an extension, it can be turned off by whoever is using it. If it runs before the request reaches a model, it cannot.
- Standards you set. A core list you cannot switch off, plus topics you add. If every customer gets the same policy, it is the same problem as ChatGPT with different wording.
- Failing closed. When the safety check cannot run — outage, timeout, anything — does it refuse, or does it answer unchecked? Ask this question directly. The answer tells you what the vendor actually prioritises.
- A record. You should be able to see what was asked and what was declined, without reading over anyone's shoulder.
The honest summary
ChatGPT is not kosher and does not claim to be. It is a general-purpose tool built for a general audience, and it is very good at that. The question is not whether the vendor did something wrong — they built what they set out to build — but whether that thing belongs in a house with children in it, unmodified and unobserved.
For most frum families the answer is that it does not, and that the alternative is not abstinence but a tool where the boundaries are yours.
Common questions
Is there a hechsher for AI software?
No. Nobody certifies software the way food is certified, and any product implying it carries a hechsher is misrepresenting itself. What you can do is check specific properties: what gets filtered, where the filtering runs, who sets the standard, and what happens when the check fails.
Does ChatGPT have any content filtering at all?
Yes, and it is real. It refuses a genuine list of categories. But the policy is written for a global general audience, so it permits a great deal that a frum family would not want, and it cannot be adjusted by you.
Will my internet filter block inappropriate AI answers?
No. A filter decides whether to allow a web address. Once it has allowed the AI site, everything inside that conversation is one approved connection — the filter cannot see the prompts or the responses.
Published by Navōn. How these guides are written and checked.
Read next
- Kosher AI: what it means and how to evaluate it
A complete guide to what people mean by kosher AI, why no certification exists, and the specific properties to check before a tool enters your home or classroom.
- What makes an AI kosher?
There is no hechsher for software. So what should a frum school or family actually check before letting students use an AI tool? A practical standard.
- Why your internet filter does not cover AI
TAG, Gentech and every other device filter work by allowing or blocking web addresses. Conversational AI is one allowed address with everything inside it. Here is the gap.