ChatGPT — Business
Vendor: OpenAI.
| Field | Value |
|---|---|
| Retention (default) | Admin-controlled; deleted/unsaved chats removed within 30 days source · 2026-10-15 |
| Retention configurable | Yes (workspace admins) source · 2026-10-15 |
| Trains on customer data | No by default (unless opted in via feedback) source · 2026-10-15 |
| Zero data retention option | Not documented on public pages reviewed (ZDR is API-only) source · 2026-10-15 |
| Data residency | No – data residency not on Business source · 2026-10-15 |
| SSO | SAML SSO (enterprise-level authentication) source · 2026-10-15 |
| SCIM | No (standalone Business) source · 2026-10-15 |
| Audit logs / compliance API | No Compliance API (Business); admins can view/export conversations source · 2026-10-15 |
| Customer-managed keys | No – EKM not on Business source · 2026-10-15 |
| Admin connector controls | Yes – admins control which apps are enabled source · 2026-10-15 |
| SOC 2 | Yes – SOC 2 Type 2 source · 2026-10-15 |
| ISO 27001 | No – ISO 27001 scope covers Enterprise, Edu, API only source · 2026-10-15 |
| HIPAA / BAA | Not offered on Business (BAA is API / ChatGPT for Healthcare) source · 2026-10-15 |
| Encryption | AES-256 at rest, TLS 1.2+ in transit source · 2026-10-15 |
| DPA available | Yes source · 2026-10-15 |
| Feedback used for training | Yes, if user opts in via feedback source · 2026-10-15 |
| Vendor human review | Authorized staff + contracted reviewers for abuse source · 2026-10-15 |
| AI mgmt cert (ISO 42001) | Yes – ISO 42001 (OpenAI products) source · 2026-10-15 |
| FedRAMP | No – FedRAMP listing covers Enterprise & API source · 2026-10-15 |
| Pricing note | $20/seat/mo annual ($25 monthly); Premium $100/$125; 2–200 users source · 2026-10-15 |