AI Vendor Directory · AI assistants (SaaS)
Does ChatGPT Team / Enterprise train on your data?
No — does not train on your data by default. Vendor-stated default: no (Team, Business, Enterprise, Edu). OpenAI's Enterprise Privacy page states that by default it does not train on any inputs or outputs from its products for business users, including ChatGPT Team, ChatGPT Enterprise, and the API; training use requires explicit opt-in (e.g., data-sharing/feedback programs). Enterprise offers admin-controlled retention and data residency at no extra cost. Contrast: consumer ChatGPT Free/Plus/Pro trains by default unless the user turns off 'improve the model for everyone.' Note: openai.com blocks automated fetchers (HTTP 403); page content was verified live via search index of the vendor page on 2026-07-29.
By the Shieldra Compliance Team · Last updated 2026-07-29
What is ChatGPT Team / Enterprise?
OpenAI's workspace ChatGPT plans (Team, Business, Enterprise, Edu) with admin controls, SSO, and workspace data boundaries. SMBs use them as a general-purpose staff assistant.
Key facts
- Vendor: OpenAI — https://openai.com/chatgpt/enterprise/
- Trains on customer data by default: no (Team, Business, Enterprise, Edu)
- Source for the training answer: https://openai.com/enterprise-privacy/
- Data residency: US; EU (EEA+CH); UK; CA; JP; IN; SG; KR; AU; AE (Enterprise/Edu data residency; per OpenAI help article 9903489)
- Last verified: 2026-07-29
What certifications does ChatGPT Team / Enterprise hold?
- SOC 2 Type 2
- ISO/IEC 27001:2022
- ISO/IEC 27017
- ISO/IEC 27018
- ISO/IEC 27701:2019
- ISO/IEC 42001:2023
- CSA STAR
Security, DPA, and subprocessor links
- Security / trust page: https://trust.openai.com/
- Data processing agreement (DPA): https://openai.com/policies/data-processing-addendum/
- Subprocessor list: https://openai.com/policies/sub-processor-list/
What is your EU AI Act role when you build on ChatGPT Team / Enterprise?
Using ChatGPT Enterprise/Team as an internal assistant typically makes you a deployer under the EU AI Act; inform staff when AI-generated output is used in ways covered by Article 50, and disclose AI interaction if you expose it to customers.
What to record in your AI registry
- Provider: OpenAI
- Model type: third party api
- Data typically flowing to the vendor: employee prompts, uploaded files, custom GPT content, connected app data
Sources
- https://openai.com/enterprise-privacy/
- https://help.openai.com/en/articles/9903489-data-residency-and-inference-residency-for-chatgpt
- https://openai.com/security-and-privacy/
- https://openai.com/index/expanding-data-residency-access-to-business-customers-worldwide/
- https://trust.openai.com/
Disclaimer
Curated from vendor-published pages on the date above. Vendor terms change - verify against the cited sources before relying on a profile for a procurement decision. Last verified 2026-07-29.
Frequently asked questions
Does ChatGPT Team / Enterprise train AI models on your data?
No — does not train on your data by default. Vendor-stated default: no (Team, Business, Enterprise, Edu). OpenAI's Enterprise Privacy page states that by default it does not train on any inputs or outputs from its products for business users, including ChatGPT Team, ChatGPT Enterprise, and the API; training use requires explicit opt-in (e.g., data-sharing/feedback programs). Enterprise offers admin-controlled retention and data residency at no extra cost. Contrast: consumer ChatGPT Free/Plus/Pro trains by default unless the user turns off 'improve the model for everyone.' Note: openai.com blocks automated fetchers (HTTP 403); page content was verified live via search index of the vendor page on 2026-07-29.
What certifications does ChatGPT Team / Enterprise hold?
Per the vendor's published pages as of 2026-07-29: SOC 2 Type 2; ISO/IEC 27001:2022; ISO/IEC 27017; ISO/IEC 27018; ISO/IEC 27701:2019; ISO/IEC 42001:2023; CSA STAR.
Where does ChatGPT Team / Enterprise store your data?
Vendor-listed data residency options as of 2026-07-29: US; EU (EEA+CH); UK; CA; JP; IN; SG; KR; AU; AE (Enterprise/Edu data residency; per OpenAI help article 9903489).
What is your EU AI Act role when you build on ChatGPT Team / Enterprise?
Using ChatGPT Enterprise/Team as an internal assistant typically makes you a deployer under the EU AI Act; inform staff when AI-generated output is used in ways covered by Article 50, and disclose AI interaction if you expose it to customers.
