An artificial intelligence research company that develops and operates large language models and AI systems, including ChatGPT and GPT-4, which are used by millions of consumers worldwide for text generation, conversation, and various productivity tasks. The company's policies govern how user data is collected and used to train AI models, what content is permitted on their platforms, and the safety measures implemented to prevent harmful AI outputs, making their terms particularly significant given the personal and sensitive information users often share with AI assistants.
High, provisions that significantly limit your legal rights, authorize broad data collection, or create material financial exposure. Medium, provisions worth knowing about but with partial protections or limited scope. Low, standard terms with minimal consumer impact.
Higher = more protective of you, the user/customer — a deliberately user-protective lens, not a universal “good vs bad” score. Computed algorithmically from OpenAI’s cited governance stances; no dimension we haven’t confidently read is ever counted against the score. Free, reproducible, and never purchasable.
The retention and use of flagged content by sub-processors is double-limited: by time (review period only) and by purpose (assisting OpenAI's review only), constraining how sub-processors can handle …
Customer data is sent to Snowflake for warehousing unless the customer has Zero Data Retention, making ZDR status the operative factor in whether Snowflake processes a customer's data.
This clause signals that OpenAI is positioning its existing safety and security practices against an EU-level emerging legal standard, indicating the geographic scope of its compliance posture.
The act of using or enabling the App triggers an automatic data transmission authorization, and the receiving Application's terms—not OpenAI's—govern that data once transmitted.
This prohibition protects individuals from unauthorized likeness reproduction and requires affirmative consent and rights clearance before such use.
This document lists the companies OpenAI shares your data with, what those companies do with it, and where in the world they process it. Your data may be handled by …
This document describes the safety testing OpenAI performed on GPT-5.5 and GPT-5.5 Pro before making them available, including adversarial testing focused on cybersecurity and biology risks. OpenAI states these models …
This document describes how OpenAI has built, restricted, and structured the GPT-5 model family. A real-time router—not the user—decides which model handles each query based on conversation type, complexity, and …
This document describes how OpenAI governs the safety of its most advanced AI systems, covering serious risks like cyberattacks, biological and chemical weapons, harmful manipulation, and AI operating outside human …
This document governs how OpenAI handles your business data when you use its enterprise products or API. By default, OpenAI does not use your data to train its models, and …
This document sets out OpenAI's commitments to keeping its AI systems safe and responsible — including filtering harmful content, protecting private information, and enforcing child safety protections. OpenAI publishes system …
This document sets out how OpenAI handles the data you send through its API and products. By default, OpenAI does not use your business data to train its AI models …
This document sets the rules for how OpenAI handles data that business customers provide when using its services. OpenAI can only use that data as the customer instructs, and cannot …
These terms set out what you can and cannot do when using OpenAI's Services, and what OpenAI can do with the content you provide. Key points for ordinary users include …
This agreement sets the rules for businesses using OpenAI's services: you own the outputs OpenAI generates for you, but you are responsible for everything your affiliates do under your account …
These terms set out the rules for using OpenAI's services, including what OpenAI will and won't cover if you or your business face a legal claim over AI-generated content. Key …
OpenAI's Usage Policies, updated October 29, 2025, define what users and developers may and may not do when using OpenAI products and services. The terms explicitly prohibit a range of …
This document establishes the terms governing user access to and use of OpenAI services, including ChatGPT, Sora, and related products. The agreement authorizes OpenAI to use content submitted by users …
This is OpenAI's US Privacy Policy covering how the company collects and uses personal data when users interact with ChatGPT, Sora, the Atlas browser, and other consumer-facing Services. The policy …
This is OpenAI's System Card for GPT-4o, a multimodal AI model that accepts text, audio, image, and video inputs and generates text, audio, and image outputs, published alongside OpenAI's Preparedness …
These are the rules for using OpenAI's Services if you are outside the United States. OpenAI can use content you submit to develop and improve its Services, and it can …
This is OpenAI's privacy policy for users outside the United States. It explains what data OpenAI collects, how it uses and shares that data, and what choices you have — …
This is OpenAI's Usage Policies document, governing what users and developers may and may not do with OpenAI's products including ChatGPT, Sora, Codex, and the API. The policy prohibits a …
OpenAI modified two sentences in its Enterprise Privacy policy as detected on July 18, 2026. The first change was purely formatting, moving the title 'Enterprise privacy at OpenAI' to appear …
View change record →OpenAI modified two sentences in its Enterprise Privacy Policy, detected on July 16, 2026. The opening section now includes a formatting change (addition of 'Enterprise privacy at OpenAI' as a …
View change record →OpenAI's privacy policy was restructured on June 12, 2026, adding a table of contents and clarifying how personal data is used. The most material change is new language explicitly disclosing …
View change record →OpenAI updated its privacy policy on June 7, 2026 to add explicit language about how it collects and uses advertising data for Free and Go users. The updated policy now …
View change record →OpenAI updated its Service Terms on June 2, 2026, adding new sections governing Licensed Materials (software and code installed on customer systems) and ChatGPT Sites (a website creation feature). The …
View change record →Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
OpenAI expanded its data sharing terms to include third-party marketing partners. The updated policy authorizes the use of personal data fo…
872 provisions across 8 AI platforms. The terms your AI provider sets become the terms your product operates under.
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
The bill does not regulate most AI startups directly. But it changes the companies they depend on. Here is what the first federal AI law wo…
H.R. 8094 would make the FTC the referee for AI model disclosure. It also names system cards as a way to comply, which turns a voluntary in…
ConductAtlas tracks 19 OpenAI documents including terms of service, privacy policy, and other governance documents. Every document is captured daily with cryptographic verification.
OpenAI has made 88 policy changes in the past 12 months across the documents ConductAtlas tracks, including 2 classified as high severity.
ConductAtlas has classified 309 provisions across OpenAI's tracked documents. 70 are rated high severity, 194 medium, and 45 low.
Yes. Monitor subscribers ($4.99/month) can add OpenAI to their watchlist and receive same-day email alerts whenever any tracked document changes.