In my organization, we have an SSL MITM (Man-in-the-middle) proxy (like ZScaler proxy). If I browse an HTTPS website and check the certificate, I can see that the proxy has issued a separate certificate for the site(means the original certificate chain is replaced). I am not getting any alert in my browser because I think the organization has added the proxy's root certificate as a trusted party in my browser / OS.
My question is: Can we trust an SSL MITM proxy for exchanging confidential information (say bank transactions)? I believe that the organization can snoop if they want to as there is not a single end to end SSL connection (There are two I guess - one from my system to proxy and another one from proxy to the original website).
I understand that if the proxy has not replaced the certificate chain, the traffic is secure even through proxy; but here that is not the case. Can you please let me know. Thanks in advance.