ChatGPT
OpenAI's flagship conversational AI assistant powered by GPT models; writes, codes, reasons, browses, runs agents, and creates images/video across web, mobile, and desktop.
Risk score
Assessment across data handling, compliance, security and transparency.
Overview
ChatGPT is OpenAI's consumer and enterprise chat assistant built on the GPT family of models. It handles writing, research, code generation, image and video creation (Sora), voice chat, file analysis, Deep Research, and agentic task execution via Agent Mode. It is the most widely adopted generative-AI product in the enterprise, available in Free, Go, Plus, Pro, Business, Enterprise, and Edu tiers. Business and Enterprise plans add SSO, admin controls, a signed DPA, SOC 2 Type II scope, and a contractual no-training default, while consumer tiers train on user data unless the user toggles it off.
Risk by subscription tier
3The same vendor often carries very different risk depending on the plan. Free tiers typically allow training on prompts, paid tiers usually do not.
| Plan | Risk | Pricing | SOC 2 | GDPR | HIPAA |
|---|---|---|---|---|---|
| Team | 4/10·Medium | $25 / user / month (annual) or $30 / user / month | |||
| Plus | 7/10·High | $20 / user / month | |||
| Free | 9/10·Critical | Free |
Risk factors
2- Consumer tiers train on user data unless toggled off
- Complexity in understanding data usage policies
Recommendations
2- Enhance user education on data privacy settings
- Provide clearer documentation on data handling
Data handling
- Storage
- Stored in OpenAI-managed infrastructure (primarily AWS/Azure US); ChatGPT Enterprise and API offer regional data residency in the EU, UK, Japan, Korea, Singapore, India, Canada, and Australia.
- Retention
- Consumer tiers retain chat history until user deletes it (with 30-day soft delete), subject to ongoing legal hold. Business/Enterprise admins set retention. API Zero Data Retention is available for eligible endpoints and is required for the BAA.
- Training on inputs
- Consumer Free/Plus/Pro/Go default to training on user inputs unless opted out. ChatGPT Business, Enterprise, Edu, Healthcare, and the API do not train on customer data by default.
More Chatbots tools
See all →01.AI Yi
Chinese AI lab offering Yi series of open and proprietary models.
AI21 Jurassic
Large language model chat and text generation by AI21 Labs.
ARC Search
AI-enhanced mobile browser with smart page summarization.
Abacus AI
Enterprise AI platform for building custom LLM-powered applications.
Ada AI
AI-powered customer service automation platform.
Andi Search
AI-powered search engine that provides direct conversational answers.
See the AI tools in use across your organisation.
Connect your tool research to the employee AI activity and data security questions that matter to your team.