OpenAI AI Footnotes
What OpenAI's AI features do with your data, as OpenAI publishes it. Checked October 31, 2026. OpenAI in the Directory.
Agent access
OpenAI API (Responses API and related endpoints) for programmatic and agent access, authenticated with API keys or workload identity federation tokens. source · checked October 31, 2026
ChatGPT Enterprise
ChatGPT Enterprise
| On by default? | Not published as of October 31, 2026 |
|---|---|
| How an admin turns it off | Not published as of October 31, 2026 |
| Trains on customer data? | No training on business data by default; data is used for training only if the customer explicitly opts in (for example, through feedback). source · checked October 31, 2026 |
| Retention | Workspace admins set the retention period. Deleted conversations are removed from OpenAI systems within 30 days unless OpenAI is legally required to keep them. source · checked October 31, 2026 |
| Where data is processed | Enterprise supports data residency in ten regions: the US, the EU, the UK, Japan, Canada, South Korea, Singapore, India, Australia and the UAE. source, source 2 · checked October 31, 2026 |
| Model providers | Not published as of October 31, 2026 |
| Price | Custom pricing through sales; no per-seat list price is published. source · checked October 31, 2026 |
ChatGPT Business (formerly ChatGPT Team)
ChatGPT Business
| On by default? | Not published as of October 31, 2026 |
|---|---|
| How an admin turns it off | Not published as of October 31, 2026 |
| Trains on customer data? | No training on business data by default. source · checked October 31, 2026 |
| Retention | Workspace admins can control retention. Deleted or unsaved conversations are removed within 30 days unless longer retention is required by law or reasonably necessary to protect the services or third parties. source · checked October 31, 2026 |
| Where data is processed | Not published as of October 31, 2026 |
| Model providers | Not published as of October 31, 2026 |
| Price | Per seat. Standard seat: $20 per user per month billed annually, $25 billed monthly. Premium seats are priced separately. source · checked October 31, 2026 |
Codex
ChatGPT Business and ChatGPT Enterprise
| On by default? | Codex Cloud is off by default in Enterprise workspaces until an admin enables it. source · checked October 31, 2026 |
|---|---|
| How an admin turns it off | Workspace settings: "Allow members to use Codex locally" in Codex Local (or the combined "Allow members to use Codex and Work Locally") for local use, and the "Use Codex in the cloud" permission for Codex Cloud. source · checked October 31, 2026 |
| Trains on customer data? | OpenAI states it does not train on ChatGPT Enterprise data or Codex data. source · checked October 31, 2026 |
| Retention | With ChatGPT sign-in, Codex follows the workspace retention and residency settings; with an API key, it follows the API organization settings. source · checked October 31, 2026 |
| Where data is processed | With ChatGPT sign-in, Codex follows the workspace's ChatGPT Enterprise residency settings. source · checked October 31, 2026 |
| Model providers | Not published as of October 31, 2026 |
| Price | Included in Business, Edu and Enterprise plans; usage shares plan limits and credits with ChatGPT Work. source · checked October 31, 2026 |
Plugins and apps (connectors and custom MCP servers)
ChatGPT Business and ChatGPT Enterprise
| On by default? | Off by default in Enterprise and Edu workspaces; on by default in Business workspaces. In Enterprise, the permissions to publish custom MCP-backed plugins are off by default. source, source 2 · checked October 31, 2026 |
|---|---|
| How an admin turns it off | Admin console > workspace > Plugins sets installation; App access, Tools and Permissions control each app. Custom MCP creation needs the "Create plugins with MCPs" permission in Permissions & roles. source · checked October 31, 2026 |
| Trains on customer data? | No training on data accessed from apps by default. source · checked October 31, 2026 |
| Retention | Not published as of October 31, 2026 |
| Where data is processed | Connected services that plugins reach keep their own residency, retention and compliance requirements. source · checked October 31, 2026 |
| Model providers | Not published as of October 31, 2026 |
| Price | Included in ChatGPT Business. source · checked October 31, 2026 |
API Platform
OpenAI API
| On by default? | Not published as of October 31, 2026 |
|---|---|
| How an admin turns it off | After approval: Settings > Organization > Data controls > Data Retention, at organization and project level. source · checked October 31, 2026 |
| Trains on customer data? | Data sent to the API is not used for training since March 1, 2023, unless the customer opts in. source · checked October 31, 2026 |
| Retention | Abuse monitoring logs are kept up to 30 days by default. Zero Data Retention or Modified Abuse Monitoring needs prior approval by OpenAI; some endpoints keep application state until deleted. source · checked October 31, 2026 |
| Where data is processed | Per-project data residency for eligible customers. Data residency endpoints carry a 10% uplift for eligible models released on or after March 5, 2026. source · checked October 31, 2026 |
| Model providers | Not published as of October 31, 2026 |
| Price | Consumption, per 1M tokens. gpt-6.1-sol lists $2.00 input and $10.00 output per 1M tokens (Standard, short context). source · checked October 31, 2026 |
Connections to outside MCP servers
ChatGPT connects to remote MCP servers through plugins. In Enterprise, the permissions to create MCP-backed plugins ("Upload plugins" and "Create plugins with MCPs", which uses developer mode) are off by default and granted in Permissions & roles. The pricing page labels developer mode beta; plugins carry no stage label. source, source 2, source 3, source 4 · checked October 31, 2026
Compliance
- HIPAA: OpenAI signs BAAs for the API; API coverage requires Modified Retention. In ChatGPT, a BAA applies with ChatGPT for Healthcare, ChatGPT for Clinicians or a Regulated workspace, and then covers local Codex use. The BAA does not cover Codex cloud. source, source 2, source 3, source 4 · checked October 31, 2026
- FedRAMP: FedRAMP 20x Moderate authorization for ChatGPT Enterprise and the API Platform, announced April 27, 2026. source, source 2 · checked October 31, 2026
EU AI Act
On July 11, 2025, OpenAI announced its intention to sign the EU General-Purpose AI Code of Practice, subject to the AI Board formally approving the current version. The European Commission lists OpenAI among the signatories of the General-Purpose AI Code of Practice (as of October 31, 2026). source, source 2 · checked October 31, 2026
Not published by OpenAI as of October 31, 2026
- List price for ChatGPT Enterprise seats (custom pricing through sales)
- A stage label (beta or generally available) for plugins and apps in ChatGPT Business and Enterprise; only developer mode is labeled beta
Changes
No changes recorded since the first check on October 31, 2026.
How this page is made, and how to send a correction: method.