30 Days Gen AI Risk Trial -Start Now
Book a demo
Chatbots·$25 / user / month (annual) or $30 / user / month·chatgpt.com

ChatGPT

OpenAI's flagship conversational AI assistant powered by GPT models; writes, codes, reasons, browses, runs agents, and creates images/video across web, mobile, and desktop.

Risk Score
Medium
4/10

Independent assessment across data handling, compliance, security and transparency.

Overview

ChatGPT is OpenAI's consumer and enterprise chat assistant built on the GPT family of models. It handles writing, research, code generation, image and video creation (Sora), voice chat, file analysis, Deep Research, and agentic task execution via Agent Mode. It is the most widely adopted generative-AI product in the enterprise, available in Free, Go, Plus, Pro, Business, Enterprise, and Edu tiers. Business and Enterprise plans add SSO, admin controls, a signed DPA, SOC 2 Type II scope, and a contractual no-training default, while consumer tiers train on user data unless the user toggles it off.

Risk factors

2
  • Conversations stored on OpenAI infrastructure
  • No HIPAA BAA available

Recommendations

2
  • Standard for general business use
  • For PHI / regulated data, use Enterprise with DPA + zero data retention

Data handling

Storage
Stored in OpenAI-managed infrastructure (primarily AWS/Azure US); ChatGPT Enterprise and API offer regional data residency in the EU, UK, Japan, Korea, Singapore, India, Canada, and Australia.
Retention
30 days; admin-controlled
Training on inputs
Off by default; not used for model training