Not legal advice · Summaries of vendors' public pages, which change often. Verify with the vendor and your contract before relying on anything here.
AI Terms Tracker
Get weekly changes

Does ChatGPT Enterprise / Business train on your data?

Business plan OpenAI · Assistant · Last verified

Doesn't train by default

Doesn't train on business data by default.

Short answer: No

"By default, we do not use your business data for training our models." Feedback you explicitly share may be used.

Source: openai.com/enterprise-privacy/

Why this matters: A "no" keeps your prompts and files out of OpenAI's models, where they couldn't be removed later. Confirm it covers the plan you use. Why training matters →

6/7 assurances found·8 of 9 fields confirmed from vendor pages

Below: retention, SOC 2, ISO 27001/42001, DPA, BAA, data residency and zero-retention for ChatGPT Enterprise / Business, each linked to OpenAI's own page.

Personal plan Using the free or personal version? ChatGPT (Free / Plus / Pro) has different terms: Trains by default · Compare personal vs business
Summary of OpenAI's public pages as of Oct 17, 2026. Not legal advice: terms vary by plan and contract and can change. Confirm with OpenAI before relying on it.

Trains on your data by default

No

"By default, we do not use your business data for training our models." Feedback you explicitly share may be used.

Source:

Data retention

Admin-configurable

Workspace admins control how long data is retained (Enterprise, Edu, Healthcare).

Source:

SOC 2 Type II

Yes

SOC 2 Type 2 examination covering API and ChatGPT business products.

Source:

ISO/IEC 27001

Yes

ISO/IEC 27001:2022 (plus 27017, 27018, 27701).

Source:

ISO/IEC 42001

Yes

ISO/IEC 42001:2023 AI Management System covering consumer and business products.

Source:

DPA available

Yes

DPA available for ChatGPT Business, Enterprise and the API.

Source:

BAA / HIPAA

Yes

OpenAI offers a BAA; ChatGPT for Healthcare is the HIPAA-oriented workspace.

Source:

Data residency options

Yes

Data residency at rest for eligible Enterprise/Edu/Healthcare customers in multiple regions; optional in-region GPU inference (US/Europe).

Source:

Zero-retention option

Unknown

Zero data retention is described for the API platform; not stated for ChatGPT workspaces.

Source:

Vendor pages we monitor for this tool

We save a fingerprint (SHA-256 of the page's visible text) on every check so we can spot when a vendor edits its terms.

PageCheckedFingerprint
https://openai.com/enterprise-privacy/Oct 17, 2026b50caa51b47e…
https://openai.com/security-and-privacy/Oct 17, 2026b04c7dfd4c50…
https://openai.com/business-data/Oct 17, 2026fb229c11e769…

Compare with

See all Assistant tools · Why AI training on your data matters · How we source and verify this