Tracker / Chat assistant

Does ChatGPT train on your data? ChatGPT admin guide

Personal plans can be used for training unless the user turns off “Improve the model for everyone”. Business and Enterprise workspaces are not used for training by default. Enterprise adds SCIM, the Compliance API and a header that blocks personal accounts on your network.

Vendor: OpenAI · Last checked Oct 22, 2026 · 3 plans tracked

Plan by plan

Free / Go / Plus / Pro (personal) consumer

Trains on your data?
Yes – opt-out Used to train unless the user turns off “Improve the model for everyone” in Settings → Data controls. Temporary chats are not used for training. Feedback (thumbs up/down) can send the whole conversation for training even after opting out. source ↗ checked Oct 22, 2026
Retention
Temporary chats: up to 30 days How long regular chat history is kept is not stated on the page we checked. source ↗ checked Oct 22, 2026
SSO
No OpenAI lists SAML SSO only as a ChatGPT Business / Enterprise workspace feature; personal plans have no SSO. source ↗ checked Oct 22, 2026
SCIM
No SCIM is listed only for ChatGPT Enterprise / Edu / Healthcare. source ↗ checked Oct 22, 2026
Audit logs
No No audit logging is listed for personal plans; audit/compliance tooling is an Enterprise feature. source ↗ checked Oct 22, 2026
Data residency
Unknown Not verified from a vendor-owned source yet.
DPA
Unknown Not verified from a vendor-owned source yet.

Self-service data export and account deletion are available on Free, Go, Plus and Pro.

Business (formerly Team) business

Trains on your data?
No Not used for training by default. Training only happens if you explicitly opt in, for example through feedback. source ↗ checked Oct 22, 2026
Retention
Admin-controlled Workspace admins control retention. Deleted or unsaved conversations are removed within 30 days unless the law requires longer. source ↗ checked Oct 22, 2026
SSO
Yes Self-serve SAML or OIDC SSO with domain verification is included. source ↗ checked Oct 22, 2026
SCIM
No Standalone Business has no SCIM, so users are added and removed by hand. It can only get tenant-wide SCIM through an eligible Enterprise workspace in the same tenant. source ↗ checked Oct 22, 2026
Audit logs
No Business features list only “basic analytics”. The Compliance/Audit Logs APIs are listed for Enterprise and the API platform. source ↗ checked Oct 22, 2026
Data residency
No Data residency is offered to eligible API and new ChatGPT Enterprise/Edu customers; Business is not listed as eligible. source ↗ checked Oct 22, 2026
DPA
Yes OpenAI will sign a DPA for ChatGPT Business, Enterprise and the API. source ↗ checked Oct 22, 2026

Enterprise / Edu enterprise

Trains on your data?
No Not used for training by default. source ↗ checked Oct 22, 2026
Retention
Admin-controlled Workspace admins control retention. Deleted conversations are removed within 30 days unless legally required. source ↗ checked Oct 22, 2026
SSO
Yes SAML SSO source ↗ checked Oct 22, 2026
SCIM
Yes SCIM is available for eligible Enterprise and Edu workspaces. source ↗ checked Oct 22, 2026
Audit logs
Yes Admins can get an audit log of conversations and GPTs through the Enterprise Compliance API. source ↗ checked Oct 22, 2026
Data residency
yes – 10 regions at rest; in-region inference in EU/US/UAE Storage at rest: Australia, Canada, Europe (EEA+CH), India, Japan, Singapore, South Korea, UAE, UK, US. Inference residency: Europe, US, UAE. New Enterprise/Edu workspaces only; included at no extra cost. Workspace metadata, logins and billing can sit outside the region. source ↗ checked Oct 22, 2026
DPA
Yes source ↗ checked Oct 22, 2026

IP allowlisting is available on Enterprise and Edu.

How to block or allow ChatGPT

  1. network

    Allow only your workspace (header injection)

    Have your TLS-inspecting proxy or SASE add ChatGPT-Allowed-Workspace-Id: <workspace-uuid> to requests for https://chatgpt.com/*. Personal workspaces and any workspace not listed are filtered out, and users with no allowed workspace get a 403. Separate multiple UUIDs with commas and no spaces. Requires ChatGPT Enterprise.

    source ↗ checked Oct 22, 2026

  2. network

    Block logged-out use

    Block URLs that start with https://chatgpt.com/backend-anon/ to stop anonymous ChatGPT use.

    source ↗ checked Oct 22, 2026

  3. admin-console

    IP allowlisting

    Workspace Settings → Identity & access → Access Restrictions. Only allowlisted IPs can load workspace data. Available on Enterprise and Edu.

    source ↗ checked Oct 22, 2026

Domains

“Primary domain only” means we haven't found a full endpoint list from the vendor, so blocking just this domain may not catch every API or desktop-app endpoint.

Change history

Sources