The document asserts that customers retain ownership of the inputs they submit and the outputs they receive through the enterprise and API tiers.
This analysis describes what OpenAI's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes the ownership framework for enterprise-generated content, which is relevant to intellectual property management, downstream licensing, and data portability considerations for business customers.
Interpretive note: The practical scope of this ownership assertion depends on license grants in the full Terms of Service, which may authorize certain uses of submitted content independent of ownership status.
The updated policy now states that workspace admins 'can control' data retention rather than 'control' it, introducing subtle ambiguity about whether retention control is a guaranteed right or a permitted option. Additionally, the removal of the word 'workspace' before 'data' broadens the scope of data potentially subject to admin control beyond workspace-specific information. These changes could affect how enterprise customers understand the extent of their administrative authority over data retention practices.
View change record →The updated terms establish that workspace admins, rather than individual end users, control how long workspace conversation data is retained and authorize admins to view, access, export, and delete end user conversations. Previously, the policy stated that each user controlled whether their conversations were retained and that only end users could view their own conversations. The revised terms also permit OpenAI to retain deleted or unsaved conversations beyond the standard 30-day deletion window if retention is required by law or reasonably necessary to protect OpenAI's services or third parties from harm. Workspace users should review their organization's data governance policies to understand what access and retention practices their admins have implemented.
View change record →This provision was superseded by the more detailed 'Data Ownership and Rights Limitation' provision in the current version, which adds legal qualifications and specifies the limited rights OpenAI retains.
View full change record →This new provision explicitly clarifies that customers retain ownership of their data, addressing a critical concern about data rights in enterprise relationships.
View full change record →Under this provision, enterprise and API customers retain ownership of their conversation inputs and model-generated outputs, which affects how those organizations can use, store, and transfer that content under applicable IP and data protection frameworks.
How other platforms handle this
Microsoft reserves the right to restrict the export of data that may compromise the security of the services or Microsoft's intellectual property.
We cannot respond to Your request or provide You with the required information if We cannot: Verify Your identity or authority to make the request And confirm that the personal information relates to You
Microsoft reserves the right to restrict the export of data that may compromise the security of the services or Microsoft's intellectual property.
"Your data belongs to you. Inputs and outputs are owned by you, not OpenAI.Excerpt from OpenAI's API Data Usage Policies [RETIRED: redirects to /enterprise-privacy/ (CA-D-000825)]
1) REGULATORY LANDSCAPE: Data ownership assertions engage intellectual property law and may interact with GDPR data portability rights under Article 20 for EU users.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Buried in Robinhood's customer agreement is broad authority to close your positions, suspend your account, and force arbitration. Here is what it actually says.
Stripe's terms authorize fund reserves, payout withholding, and account termination. Here is what the agreement states and what business owners should review.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This provision establishes the ownership framework for enterprise-generated content, which is relevant to intellectual property management, downstream licensing, and data portability considerations for business customers.
Under this provision, enterprise and API customers retain ownership of their conversation inputs and model-generated outputs, which affects how those organizations can use, store, and transfer that content under applicable IP and data protection frameworks.
ConductAtlas has identified this type of provision across 263 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by OpenAI.