Get the weekly research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean. No account.
The document states that customers retain rights to inputs and own outputs to the extent permitted by law, while OpenAI receives a license to inputs and outputs limited to service provision, legal compliance, and policy enforcement purposes.
This analysis describes what OpenAI's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes the contractual allocation of rights in AI-generated outputs and inputs, with the phrase 'to the extent permitted by law' creating a condition that the practical scope of output ownership may vary based on applicable copyright and AI-generated content law in the customer's jurisdiction.
Interpretive note: The practical scope of output ownership is conditioned on 'to the extent permitted by law,' and the copyrightability of AI-generated content remains subject to ongoing judicial and regulatory uncertainty across multiple jurisdictions.
The updated policy now states that workspace admins 'can control' data retention rather than 'control' it, introducing subtle ambiguity about whether retention control is a guaranteed right or a permitted option. Additionally, the removal of the word 'workspace' before 'data' broadens the scope of data potentially subject to admin control beyond workspace-specific information. These changes could affect how enterprise customers understand the extent of their administrative authority over data retention practices.
View change record →The updated terms establish that workspace admins, rather than individual end users, control how long workspace conversation data is retained and authorize admins to view, access, export, and delete end user conversations. Previously, the policy stated that each user controlled whether their conversations were retained and that only end users could view their own conversations. The revised terms also permit OpenAI to retain deleted or unsaved conversations beyond the standard 30-day deletion window if retention is required by law or reasonably necessary to protect OpenAI's services or third parties from harm. Workspace users should review their organization's data governance policies to understand what access and retention practices their admins have implemented.
View change record →Current version adds legal qualification 'to the extent permitted by law', clarifies OpenAI's limited rights are only what's necessary for service provision and legal compliance, and explicitly limits rights to enforcing policies.
View full change record →Under this provision, customers are assigned ownership of outputs under the agreement, but the qualification 'to the extent permitted by law' means that the enforceability of that ownership claim depends on how applicable copyright law in the relevant jurisdiction treats AI-generated content. OpenAI retains a license to use inputs and outputs for service provision, legal compliance, and policy enforcement.
Cross-platform context
See how other platforms handle Data Ownership and Rights Limitation and similar clauses.
Compare across platforms →Monitoring
OpenAI has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 20 platforms.
"As between you and OpenAI: you retain all rights to the inputs you provide to our services and you own any output you rightfully receive from our services to the extent permitted by law. We only receive rights in input and output necessary to provide you with our services, comply with applicable law, and enforce our policies.Excerpt from OpenAI's API Data Usage Policies [RETIRED: redirects to /enterprise-privacy/ (CA-D-000825)]
(1) REGULATORY LANDSCAPE: This provision implicates copyright law in multiple jurisdictions, including ongoing regulatory and judicial uncertainty regarding the copyrightability of AI-generated outputs in the United States, European Union, and United Kingdom. The U.S. Copyright Office has issued guidance indicating that purely AI-generated content without sufficient human authorship may not be eligible for copyright protection, which may limit the practical scope of the ownership assertion in this document. The FTC has general authority over accuracy of ownership representations. (2) GOVERNANCE EXPOSURE: Medium. The 'to the extent permitted by law' qualification means that customers relying on this provision for intellectual property protection of AI-generated outputs should conduct independent legal analysis under applicable copyright law before asserting exclusive ownership in commercial contexts. The license granted to OpenAI for policy enforcement purposes is broad and its practical scope is not further defined in this document. (3) JURISDICTION FLAGS: U.S. customers should evaluate the current U.S. Copyright Office position on AI-generated content copyrightability. EU customers should assess how national copyright law in their member state addresses AI-generated output ownership. UK customers should assess the UK's specific sui generis protection framework for computer-generated works. Organizations in regulated industries should assess whether IP ownership representations affect their compliance posture. (4) CONTRACT AND VENDOR IMPLICATIONS: Procurement teams and legal counsel should assess whether the 'to the extent permitted by law' qualification is sufficient for the organization's commercial purposes, particularly for outputs intended for use in products, services, or publications where exclusive ownership is material. B2B contracts relying on OpenAI output ownership should include appropriate representations and warranties that account for this qualification. (5) COMPLIANCE CONSIDERATIONS: Organizations should document their IP ownership position regarding AI-generated outputs and ensure that internal IP policies account for the jurisdictional uncertainty in copyright protection for such outputs. Legal teams should monitor developments in AI copyright law across relevant operating jurisdictions, as the practical scope of the ownership provision is dependent on evolving legal frameworks.
Regulatory citations, enforcement risk, and due diligence action items.
Provision-level monitoring, governance timelines, and regulatory mapping built from archived source documents and historical version tracking.
This provision establishes the contractual allocation of rights in AI-generated outputs and inputs, with the phrase 'to the extent permitted by law' creating a condition that the practical scope of output ownership may vary based on applicable copyright and AI-generated content law in the customer's jurisdiction.
Under this provision, customers are assigned ownership of outputs under the agreement, but the qualification 'to the extent permitted by law' means that the enforceability of that ownership claim depends on how applicable copyright law in the relevant jurisdiction treats AI-generated content. OpenAI retains a license to use inputs and outputs for service provision, legal compliance, and policy enforcement.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by OpenAI.