This analysis describes what OpenAI's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
Zero data retention is available but not automatic — it requires both a qualifying use-case and is limited to eligible endpoints, meaning not all users or endpoints are covered.
Interpretive note: The clause does not define what constitutes a 'qualifying use-case' or which endpoints are 'eligible,' leaving material conditions undefined within this excerpt.
The updated terms establish that workspace admins, rather than individual end users, control how long workspace conversation data is retained and authorize admins to view, access, export, and delete end user conversations. Previously, the policy stated that each user controlled whether their conversations were retained and that only end users could view their own conversations. The revised terms also permit OpenAI to retain deleted or unsaved conversations beyond the standard 30-day deletion window if retention is required by law or reasonably necessary to protect OpenAI's services or third parties from harm. Workspace users should review their organization's data governance policies to understand what access and retention practices their admins have implemented.
View change record →If you have a qualifying use-case, you may request that OpenAI retain no data for eligible endpoints, but this option is not universally available.
How other platforms handle this
We collect and keep personal data only as needed or allowed for the purposes set out in this Statement, based on the reason we collected the personal data in the first instance and what is permitted under the laws that apply to the processing.
we will only retain your personal information for as long as is necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements...
Affirm will retain your information in accordance with our Privacy Policy and any applicable state or federal law, rule or regulation.
Monitoring
OpenAI has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
"You can also request zero data retention (ZDR) for eligible endpoints if you have a qualifying use-case.— Excerpt from OpenAI's OpenAI API Data Usage Policies
Compliance Governance Intelligence
Need to monitor specific governance provisions?
Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
Zero data retention is available but not automatic — it requires both a qualifying use-case and is limited to eligible endpoints, meaning not all users or endpoints are covered.
If you have a qualifying use-case, you may request that OpenAI retain no data for eligible endpoints, but this option is not universally available.
ConductAtlas has identified this type of provision across 275 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by OpenAI.