OpenAI's enterprise privacy page indicates that data submitted through ChatGPT Enterprise and the API is not used by default to train OpenAI's AI models, distinguishing these tiers from the standard consumer ChatGPT product.
This analysis describes what OpenAI's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This distinction is material for businesses processing employee or customer data through OpenAI products, as it affects whether submitted inputs could be incorporated into future model outputs accessible to other users.
Interpretive note: The substantive policy text was not available in the provided HTML; this provision is inferred from the document's stated subject matter and OpenAI's publicly known enterprise privacy posture rather than verbatim clause language.
The updated policy now states that workspace admins 'can control' data retention rather than 'control' it, introducing subtle ambiguity about whether retention control is a guaranteed right or a permitted option. Additionally, the removal of the word 'workspace' before 'data' broadens the scope of data potentially subject to admin control beyond workspace-specific information. These changes could affect how enterprise customers understand the extent of their administrative authority over data retention practices.
View change record →The updated terms establish that workspace admins, rather than individual end users, control how long workspace conversation data is retained and authorize admins to view, access, export, and delete end user conversations. Previously, the policy stated that each user controlled whether their conversations were retained and that only end users could view their own conversations. The revised terms also permit OpenAI to retain deleted or unsaved conversations beyond the standard 30-day deletion window if retention is required by law or reasonably necessary to protect OpenAI's services or third parties from harm. Workspace users should review their organization's data governance policies to understand what access and retention practices their admins have implemented.
View change record →Businesses using ChatGPT Enterprise or the OpenAI API operate under data handling terms that the document states exclude their inputs from AI model training by default, providing a degree of data separation not present in the standard consumer ChatGPT tier.
How other platforms handle this
to request that your data be transferred to a third party (data portability)
Your organization may allow you to access and export your data in order to back it up or transfer it to a service outside of Google.
Further, you may take legal actions in relation to any potential breach of your rights regarding the processing of your Personal Information, as well as to lodge complaints before the competent data prot...
(1) REGULATORY LANDSCAPE: This provision engages GDPR Article 28 obligations where OpenAI acts as a data processor and the enterprise customer acts as a data controller; under GDPR, processors are restricted from using personal data …
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This distinction is material for businesses processing employee or customer data through OpenAI products, as it affects whether submitted inputs could be incorporated into future model outputs accessible to other users.
Businesses using ChatGPT Enterprise or the OpenAI API operate under data handling terms that the document states exclude their inputs from AI model training by default, providing a degree of data separation not present in the standard consumer ChatGPT tier.
ConductAtlas has identified this type of provision across 290 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by OpenAI.