UncoverAIFollow
AI Platforms

Model API

OpenAI (API & Enterprise)

OpenAI's API data page says that as of 1 March 2023, data sent to the API is not used to train or improve OpenAI models unless the customer explicitly opts in. The trust portal says products are covered by a SOC 2 Type 2 report, and that the report for 1 July 2025 through 30 June 2026 includes the API Platform, ChatGPT Enterprise, ChatGPT Edu, and ChatGPT Team. The API BAA article says an enterprise agreement is not required to sign a BAA for API services, and that PHI requires the BAA. The DPA effective 1 January 2026 says OpenAI acts as a Data Processor, and that EEA and Swiss transfers use SCCs or an Article 45 adequacy decision. Scale Tier, for Enterprise customers, states a 99.9% uptime SLA. A general API uptime percentage is not on that page.

Checked 21 Oct 2026https://developers.openai.com/api/docs/guides/your-data

Strengths

  • API data is not used to train models unless the customer opts in.
  • Abuse monitoring logs are retained for up to 30 days by default, and Zero Data Retention is described as an eligible exception.

Checked 21 Oct 2026https://developers.openai.com/api/docs/guides/your-data

Lock-in risk

  • Scale Tier token units are purchased for a minimum of 30 days.
  • A general API uptime percentage: Not published on the Scale Tier page.

Checked 21 Oct 2026https://openai.com/api-scale-tier/

SOC 2

SOC 2 Type 2. The 1 July 2025–30 June 2026 report includes the API Platform, ChatGPT Enterprise, Edu, and Team.

Checked 21 Oct 2026https://trust.openai.com/

Data-training terms

As of March 1, 2023, data sent to the OpenAI API is not used to train or improve OpenAI models unless the customer explicitly opts in. Abuse monitoring logs are retained for up to 30 days by default. Zero Data Retention is described as an eligible exception.

Checked 21 Oct 2026https://developers.openai.com/api/docs/guides/your-data

Native models

  • GPT-6 Astra (gpt-6-astra). The models page says to start here for complex reasoning and coding.
  • GPT-6.1 Sol. The page says it balances intelligence and cost.
  • GPT-6 Luna. The page says it is for cost-sensitive, high-volume workloads.
  • Models beyond that starting list: Not published in the choosing-a-model section.

Checked 21 Oct 2026https://developers.openai.com/api/docs/models

Inference SLA

Scale Tier, for Enterprise customers, offers a 99.9% uptime SLA on the models in that table. Each token unit is purchased for a minimum of 30 days. A general API uptime percentage: Not published.

Checked 21 Oct 2026https://openai.com/api-scale-tier/

Core sub-processor scope

API cloud infrastructure named on the list: Microsoft Corporation; CoreWeave, Inc.; Oracle Cloud Infrastructure; Google Cloud Platform; Amazon Web Services, Inc.; Cerebras.|Cloudflare, Ltd. is the content delivery network for the API, including Regional Services for us.api.openai.com and eu.api.openai.com. A separate Cloudflare web-hosting row covers ChatGPT Enterprise, Edu, and Business only.|API support or moderation rows: TaskUs, LLC; Salesforce; Accenture International Limited; Cinder Technologies, Inc. (API except where Zero Data Retention is used); Pylon Labs for premium support at the customer’s election.|Snowflake, Inc. is listed for data warehousing on the API except where Zero Data Retention is used. Fivetran, Inc. is the ETL provider.

Checked 21 Oct 2026https://openai.com/policies/sub-processor-list/

Sub-processor notes

The DPA points at https://platform.openai.com/subprocessors. That URL was not readable on 21 Oct 2026. The registry link is the public list that was readable, last updated on the page’s own fetch as the current list.|WorkOS, Inc. and Merge API, Inc. are listed for ChatGPT Enterprise, Edu, and Business, at the customer’s election, not as API rows.|Affiliates listed for technical and operational support: OpenAI, OpCo, LLC; OAI International, Inc.; OpenAI Ireland Ltd.; OpenAI UK Ltd.; OpenAI Japan Ltd.

Checked 21 Oct 2026https://openai.com/policies/sub-processor-list/

Notice and objection

OpenAI will notify Customer of any changes to the Sub-Processor List via blog post, notification within the Services or other reasonable means, or via email if Customer subscribes to email notifications on the Sub-Processor List site. Customer may object to the use of such additional Sub-processor within 30 days of receiving notice of the change by following the instructions set forth in the Sub-Processor List or by contacting privacy@openai.com.

Checked 21 Oct 2026https://openai.com/policies/data-processing-addendum/