OpenAI announced an expansion of its global data-residency options for business customers, enabling eligible organizations worldwide to store their data in region.
OpenAI now offers regional data-residency for customers using ChatGPT Enterprise, ChatGPT Edu, and its API Platform. Customers in many global markets may choose to have their content stored at rest in-region – supporting compliance with local regulations and data-protection requirements.
Data-residency is currently available in Europe, the United Kingdom, the United States, Canada, Japan, South Korea, Singapore, India, Australia, and the United Arab Emirates. OpenAI plans to expand availability to additional regions over time.
Under the new offering, eligible customers may set up ChatGPT Enterprise and Edu workspaces with data residency, ensuring that customer content – including conversations, uploaded files, custom GPTs, and image-generation artifacts – remains stored in the selected region. For API-based customers with advanced data controls, a new Project can be created via the API Platform dashboard to enable regional data-residency; model requests and responses are then processed in-region and not stored at rest.
Also Read: OpenText Deepens Strategic Tie-Up with Google Cloud to Accelerate AI Innovation and Data Sovereignty
OpenAI continues to build on its existing data privacy, security, and compliance infrastructure. The company uses AES-256 encryption for data at rest and TLS 1.2+ for data in transit, supports Enterprise Key Management (EKM) for customer-managed encryption keys, and adheres to recognized compliance standards including CSA STAR, SOC 2 Type II, ISO/IEC 27001, 27017, 27018, and 27701. By default, customer data from ChatGPT business plans or API usage is not used by OpenAI for model training unless the customer opts in.
With this expanded data-residency capability, OpenAI aims to offer enterprises and educational institutions greater control over data location, security and compliance — facilitating broader adoption of its AI products across regions with stringent data-sovereignty regulations.
SORUCE: OpenAI