OpenAI

openai.com · facts updated 1 hour ago

Privacy facts at a glance

Jurisdictions: US · AU · BR · CA · FR · DE · IN · ID · IE · IT · JP · MX · NL · NO · PL · SG · ZA · KR · ES · SE · CH · AE · GB · FI · MY · PH
Subprocessors: 19
Retention: The policy has a dedicated Retention section but no specific number of days is stated in the excerpts provided.
Breach notification: OpenAI will notify Customer without undue delay after becoming aware of any Personal Data Breach.
Transfer mechanism: Standard Contractual Clauses used among OpenAI affiliate entities for cross-border transfers.
DPA available: Yes
Certifications: SOC 2 Type 2 · ISO 27001 · ISO 27017 · ISO 27018 · ISO 27701 · ISO 42001 · PCI-DSS · CSA STAR Level 1
GDPR addressed: Yes
CCPA addressed: Yes

Named subprocessors

Cloudflare, Ltd. Microsoft Corporation CoreWeave, Inc. Oracle Cloud Infrastructure Google Cloud Platform Amazon Web Services, Inc. Cerebras Snowflake, Inc. TaskUs, LLC Intercom, Inc. Salesforce Pylon Labs Accenture International Limited Fivetran, Inc. Confluent Cinder Technologies, Inc. WorkOS, Inc. Okta, Inc. Merge API, Inc.

Tracked documents

https://openai.com/policies/privacy-policy/ checked 2 hours ago

https://openai.com/policies/terms-of-use/ checked 1 hour ago

Data processing agreement

https://openai.com/policies/data-processing-addendum/ checked 1 hour ago

Subprocessor list

https://openai.com/policies/sub-processor-list/ checked 2 hours ago

Security / trust page

https://openai.com/security-and-privacy/ checked 1 hour ago

Recent changes

minor Security / trust page 1 hour ago

OpenAI's security/trust page shows only minor navigation and title text changes, with no substantive policy or security content added or removed.

minor Security / trust page 2 hours ago

OpenAI's security/trust page shows only navigation element changes, with the page title updated to 'Security and privacy at OpenAI | OpenAI' and removal of 'Try ChatGPT' and 'Login' navigation links.

Public summary; per-account review history visible to subscribers tracking this vendor.

Track OpenAI in your workspace.

Get notified when OpenAI adds a subprocessor, changes retention, updates their DPA, or quietly amends their privacy posture.

Start tracking — 14-day trial

No card required.