Get the weekly research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean. No account.
The document states that customer support sub-processors (Intercom, Salesforce, TaskUs, Accenture, Pylon Labs) only process Customer Data to the extent the customer explicitly elects to share it during a support interaction. Processing is not automatic and is conditioned on customer-initiated disclosure.
This analysis describes what OpenAI's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes that customer support data processing is conditional on customer action, limiting the default exposure of Customer Data to support sub-processors. Enterprise customers should communicate this condition to internal teams managing support interactions to avoid inadvertent disclosure of sensitive data.
Under this clause, Customer Data is shared with customer support sub-processors including TaskUs, Accenture, Intercom, Salesforce, and Pylon Labs only when the customer explicitly provides it during a support case. The document does not authorize automatic or background sharing of Customer Data for support purposes.
Cross-platform context
See how other platforms handle Customer Support Data Processing Scope and similar clauses.
Compare across platforms →Monitoring
OpenAI has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
"Customer Support services are initiated by the Customer, and Customer Data is only processed to the extent Customer explicitly elects to share such data in the course of the support case.Excerpt from OpenAI's Sub-Processor List
1. REGULATORY LANDSCAPE: This provision is relevant to GDPR data minimization and purpose limitation principles, as it limits support sub-processor access to customer-initiated disclosures. CCPA service provider obligations are also relevant for California enterprise customers. The FTC Act's unfair or deceptive practices provisions apply to representations about data sharing scope. 2. GOVERNANCE EXPOSURE: Low. The explicit customer-initiation requirement constrains the support data sharing pathway and aligns with data minimization principles. However, customers should assess whether their support workflows result in inadvertent sharing of sensitive or regulated data categories. 3. JURISDICTION FLAGS: EU/EEA customers should confirm that support sub-processors (particularly TaskUs and Accenture in the Philippines and US) are covered by appropriate transfer mechanisms for any data shared during support cases. Salesforce processes in multiple jurisdictions; customers should verify which region is active for their account. 4. CONTRACT AND VENDOR IMPLICATIONS: Enterprise customers should review internal support escalation procedures to ensure that only appropriate data is shared with OpenAI during support cases, given that such data will be processed by the named sub-processors. Procurement teams may wish to confirm the contractual basis under which Pylon Labs and Intercom handle support data. 5. COMPLIANCE CONSIDERATIONS: Customers with strict data classification policies should develop internal guidelines for what Customer Data categories may be included in support communications with OpenAI. Training for teams interacting with OpenAI support may be warranted to align with the customer-initiation principle stated in this document.
This provision establishes that customer support data processing is conditional on customer action, limiting the default exposure of Customer Data to support sub-processors. Enterprise customers should communicate this condition to internal teams managing support interactions to avoid inadvertent disclosure of sensitive data.
Under this clause, Customer Data is shared with customer support sub-processors including TaskUs, Accenture, Intercom, Salesforce, and Pylon Labs only when the customer explicitly provides it during a support case. The document does not authorize automatic or background sharing of Customer Data for support purposes.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by OpenAI.