- Deployment
- hosted
- Hq Country
- United States
- Hq City
- San Francisco
- Ownership
- capped-profit
- Founded
- 2015
- Trust Center Url
- https://trust.openai.com
- Training Default
- never
- Residency Options
- US, EU, Japan, Canada
- Gov Access Exposure
- us-cloud-act
- Eu Ai Act Role
- gpai-systemic
- Certs
- SOC 2 Type II, CSA STAR, ISO 27001
- Dpa Available
- Yes
- Zero Retention Available
- Yes
- Retention Default
- 30 days (ZDR-eligible endpoints: none)
- Retention Exceptions
- US court preservation order (NYT MDL); 2026-01-05 order to produce 20M consumer chat logs. ZDR/Enterprise API excluded per OpenAI statements.
- Subprocessors
- Microsoft Azure, Cloudflare, Snowflake, Stripe
- Subprocessor Count
- 4
- Transfer Mechanism
- sccs+dpf
- Eu Procurement Ready
- conditional
- Eu Procurement Reason
- Data flows pass with EU residency; litigation hold undermines the 30-day deletion promise for consumer-tier logs.
- Last Policy Change
- 2026-01-05T00:00:00.000Z
- Change Summary
- Court affirmed order to hand 20M ChatGPT logs to copyright plaintiffs.
- Prior Value
- 30-day deletion policy operative as written.
- Training Evidence Url
- https://openai.com/enterprise-privacy
- Training Claim Basis
- stated
- Training Confidence
- high
- Residency Evidence Url
- https://openai.com/enterprise-privacy
- Residency Claim Basis
- stated
- Residency Confidence
- high
- Retention Evidence Url
- https://news.bloomberglaw.com/ip-law/openai-must-turn-over-20-million-chatgpt-logs-judge-affirms
- Retention Claim Basis
- stated
- Retention Confidence
- high
- Subprocessors Evidence Url
- https://trust.openai.com
- Subprocessors Claim Basis
- stated
- Subprocessors Confidence
- medium
