OpenAI · Conversational AI
ChatGPT
Allow Enterprise Enterprise tier: Available DPA: Yes
Network signatures
Domains: chat.openai.com, chatgpt.com, auth.openai.com, auth0.openai.com
API endpoints: api.openai.com, platform.openai.com
SNI patterns: *.openai.com, *.chatgpt.com, *.openaiusercontent.com
Client signatures
Process names: ChatGPT.app (macOS), ChatGPT.exe (Windows)
Browser extensions: ChatGPT for Google (risk: elevated)
Mobile apps: ChatGPT iOS; ChatGPT Android
Risk profile (1–5)
- Data exfiltration: 5
- IP loss: 5
- Output quality (hallucination / legal): 3
- Integration risk (OAuth, extensions, agentic): 3
Data egress concerns
- Customer PII pasted into prompts
- Code containing proprietary algorithms or secrets
- Internal documents uploaded for summarization
- Meeting transcripts containing confidential discussion
- Customer support transcripts containing customer data
Training-use default
Free and Plus tiers: data may be used for training unless user opts out. Team/Enterprise tiers: data is not used for training by default and is contractually excluded.