OpenAI ChatGPT
high riskGenAI Assistantchatgpt.com, openai.com, chat.openai.com
Data-handling profile
- Trains on input
- Yes, on the consumer tier (enterprise tier excluded)
- Retention
- 30 days (API); chat history used for training on Free/Plus unless opted out
- Data region
- US
- Certifications
- SOC 2 Type II
- DPA available
- Yes
- Breach history
- 2023 Redis bug exposed some chat titles
- EU AI Act
- GPAI provider; transparency obligations apply
Sources
Every fact above is drawn from the vendor's public documentation, reviewed by a human, and version-stamped. Monitored daily for changes.
Change history
No material changes recorded since monitoring began.