---
title: "ChatGPT Business (OpenAI, OpCo, LLC)"
url: "https://ailawframework.com/software/chatgpt-business"
type: "software_profile"
site: "AI Law Framework"
id: "chatgpt-business"
vendor: "OpenAI, OpCo, LLC"
category: "General-purpose"
segment: "General-purpose assistants"
confidence: "medium"
last_reviewed: "2026-09-21"
---

# ChatGPT Business (OpenAI, OpCo, LLC)

> Managed general-purpose assistant for teams. No training by default. Optional storage residency is a gradual rollout and does not constrain inference; US abuse-monitoring copies still apply.

Canonical page: https://ailawframework.com/software/chatgpt-business  
Last reviewed: 2026-09-21

Site index for agents: https://ailawframework.com/llms.txt

Plan covered: ChatGPT Business workspace (formerly Team). Standard and Premium seats. Not Enterprise, Edu, Healthcare, consumer ChatGPT or the API. Enterprise/Edu residency and SCIM do not automatically apply.

## Capabilities

- Document summarisation
- Contract drafting
- Knowledge search
- Agentic workflows

## Key facts

| Fact | Value |
| --- | --- |
| Deployment | SaaS |
| Hosting regions | United States, Unknown |
| Australian region | Unknown |
| Model providers | OpenAI |
| Assurance | SOC 2 Type II, ISO 27001, ISO 27017, ISO 27018, ISO 27701, CSA STAR |
| Training on customer content | No |
| Retention | Workspace retention is not the same as Enterprise custom windows. Storage residency (where offered) covers prompts and responses at rest in the chosen region. A copy of every prompt and response is still stored in the United States for a limited time for safety and abuse monitoring. Inference is not tied to the storage region. |
| Integrations | plugins and apps (many enabled by default), ChatGPT Work, Codex, SAML SSO |
| Legal content coverage | None as a licensed citator. Astra for Law is described as Enterprise Trusted Access, not as a Business SKU. |
| Pricing | Self-serve Try ChatGPT Business plus contact-sales. Mix Standard and Premium seats (Premium advertised as 5× usage, no five-hour limit). List price was not on the Business marketing page extract. |
| Australian presence | Unknown. Business data residency is rolling out gradually and is not yet available to all customers. The Business help article does not name Australia as a selectable region. Enterprise/Edu Australian storage is a different product path. |
| Website | https://chatgpt.com/business/ |

## What the research found

| Topic | Status | Finding | Open question | Sources |
| --- | --- | --- | --- | --- |
| Formerly Team | Public claim only | ChatGPT Business is the managed team workspace (marketing still uses team-sign-up URLs). It is not ChatGPT Enterprise. Need Enterprise for SCIM, role-based access controls and data residency as advertised on the Business page CTA. | Confirm the workspace is Business not Enterprise, and whether Standard or Premium seats are on the order. | [ChatGPT Business (formerly Team) product page](https://openai.com/chatgpt/team/); [OpenAI — Business data privacy, security, and compliance](https://openai.com/business-data/) |
| Storage vs inference | Public claim only | Business data residency is rolling out gradually. Selecting a non-US storage region does not provide inference residency. Abuse-monitoring logs stay in the United States; a copy of every prompt and response is also stored in the US for a limited time even if primary content is stored elsewhere. Shopping is unavailable when residency is on. | Is residency enabled for our Business workspace, which region, and do we accept US abuse-monitoring copies? | [OpenAI Help — Where your ChatGPT Business content is stored](https://help.openai.com/en/articles/20001418-where-your-chatgpt-business-content-is-stored) |
| Features | Public claim only | Shared company context, plugins, ChatGPT Work and Codex. Mix Standard and Premium seats. Many apps are enabled by default; admins can change workspace access. | Which apps, Work and Codex are enabled? | [ChatGPT Business (formerly Team) product page](https://openai.com/chatgpt/team/); [OpenAI Help — Apps / connectors in ChatGPT](https://help.openai.com/en/articles/11487775-connectors-in-chatgpt) |
| Australia | Not confirmed | The Business storage article does not list Australia as a checkout region. Enterprise/Edu residency (which does list Australia) is expressly not this product. | Can an Australian firm obtain Business storage residency, or must we buy Enterprise? | [OpenAI Help — Where your ChatGPT Business content is stored](https://help.openai.com/en/articles/20001418-where-your-chatgpt-business-content-is-stored) |
| Pricing | Not confirmed | No public per-seat list price on the Business page extract. Flexible seats; optional credits for power users. | Itemised Standard vs Premium seat price, credits, renewal and notice. | [ChatGPT Business (formerly Team) product page](https://openai.com/chatgpt/team/) |
| SSO not SCIM | Public claim only | Business includes SAML SSO and MFA. SCIM, RBAC and data residency are listed as Enterprise (contact sales). Apps: many enabled by default on Business. | Demonstrate SAML SSO and admin disable of apps; confirm SCIM is not required or that we must upgrade. | [OpenAI — Business data privacy, security, and compliance](https://openai.com/business-data/); [OpenAI Help — Apps / connectors in ChatGPT](https://help.openai.com/en/articles/11487775-connectors-in-chatgpt) |
| Support | Not confirmed | No public Business SLA. Enterprise-grade support subprocessors sit on the shared business-data / subprocessor story, not a Business-specific SLA page. | What support tier is on the Business order? | [OpenAI — Business data privacy, security, and compliance](https://openai.com/business-data/) |
| Quality | Not confirmed | No Business-specific legal benchmark. Astra for Law Vals AI figures are an Enterprise Trusted Access announcement, not this SKU. | Do not apply Astra for Law scores to Business. | [ChatGPT Business (formerly Team) product page](https://openai.com/chatgpt/team/) |
| Task fit | Not confirmed | General-purpose team assistant. Web search, apps and Work can send data outside the workspace region. Not a substitute for a licensed citator. | Which tasks, if any, will run in Business vs a legal-specific tool? | [ChatGPT Business (formerly Team) product page](https://openai.com/chatgpt/team/); [OpenAI Help — Apps / connectors in ChatGPT](https://help.openai.com/en/articles/11487775-connectors-in-chatgpt) |
| Client data | Not confirmed | Business is a processor-style workspace with no-training-by-default, but US abuse-monitoring copies and default-on apps remain. Not Healthcare/BAA unless a separate product. | What client types may be processed here, and are apps/Work off for those matters? | [OpenAI — Business data privacy, security, and compliance](https://openai.com/business-data/); [OpenAI Help — Where your ChatGPT Business content is stored](https://help.openai.com/en/articles/20001418-where-your-chatgpt-business-content-is-stored) |
| Models | Public claim only | OpenAI is the model provider. Cloud infrastructure subprocessors (Microsoft, AWS, GCP, Oracle, CoreWeave, Cerebras) are hosting, not substitute model vendors. | Which model IDs are enabled, and is GPT-6 Astra Law (Enterprise Trusted Access) absent? | [OpenAI — Business data privacy, security, and compliance](https://openai.com/business-data/); [OpenAI sub-processor list](https://openai.com/policies/sub-processor-list/) |
| Subprocessors | Public claim only | Shared OpenAI sub-processor list (updated 9 July 2026 on the Enterprise sibling scrape; this review re-read the same URL). Includes Microsoft (including Australia), AWS, GCP, Cloudflare, TaskUs (Philippines — GPT moderation on Enterprise/Edu/Business), Intercom, Salesforce, WorkOS. Subscribe for new subprocessors. | Notice/objection rights for Business, and whether TaskUs will see our chats. | [OpenAI sub-processor list](https://openai.com/policies/sub-processor-list/); [OpenAI — Business data privacy, security, and compliance](https://openai.com/business-data/) |
| No training by default | Public claim only | Business-data page and training FAQ: by default OpenAI does not use ChatGPT Business inputs or outputs to train or improve models. Explicit opt-in (feedback/evals/API dashboard) is the exception. Marketing line: 'Your data is never used for training our models.' | Confirm no workspace-level training opt-in is enabled, including feedback sharing. | [OpenAI — Business data privacy, security, and compliance](https://openai.com/business-data/); [OpenAI Help — How your data is used to improve model performance](https://help.openai.com/en/articles/5722486-how-your-data-is-used-to-improve-model-performance) |
| Feedback | Public claim only | Default off for business data. Explicit opt-in through feedback mechanisms can share data for training. | Disable training-related feedback for the Business workspace. | [OpenAI — Business data privacy, security, and compliance](https://openai.com/business-data/); [OpenAI Help — How your data is used to improve model performance](https://help.openai.com/en/articles/5722486-how-your-data-is-used-to-improve-model-performance) |
| Retention | Public claim only | Business storage article: primary prompts/responses at rest in the selected region if residency is on. US abuse-monitoring copy of every prompt and response for a limited time. Enterprise custom retention windows are a different product. Deleted-chat 30-day purge is documented on the general ChatGPT retention article, which also discusses workspace policies. | What is the Business workspace retention setting, including US monitoring copies and backups? | [OpenAI Help — Where your ChatGPT Business content is stored](https://help.openai.com/en/articles/20001418-where-your-chatgpt-business-content-is-stored) |
| Deletion | Not confirmed | No Business-specific deletion certificate. Member-removal behaviour is a separate help article not scraped in this pass. DPA deletion terms need the signed copy. | Matter-level deletion, backup lag, and offboarding when a lawyer leaves the workspace? | [OpenAI — Business data privacy, security, and compliance](https://openai.com/business-data/) |
| Vendor access | Public claim only | US abuse-monitoring copies imply automated and possibly human review of flagged content. TaskUs is listed for GPT moderation on Business. Support tickets go to Intercom/Salesforce. | When can OpenAI or TaskUs read our Business chats, from which countries? | [OpenAI Help — Where your ChatGPT Business content is stored](https://help.openai.com/en/articles/20001418-where-your-chatgpt-business-content-is-stored); [OpenAI sub-processor list](https://openai.com/policies/sub-processor-list/) |
| Admin | Public claim only | SAML SSO and MFA. Admins control users, usage and billing and can disable apps. SCIM and RBAC are sold as Enterprise. Many apps start enabled. | Show least-privilege roles and that unused apps are disabled. | [OpenAI — Business data privacy, security, and compliance](https://openai.com/business-data/); [OpenAI Help — Apps / connectors in ChatGPT](https://help.openai.com/en/articles/11487775-connectors-in-chatgpt) |
| Encryption | Public claim only | Business-data / Edu marketing: encryption at rest AES-256 and in transit TLS 1.2+ is stated on the Edu page and the shared business-data trust story. Confirm it applies to Business in the signed DPA. | Confirm AES-256/TLS 1.2+ and key management for Business in the DPA. | [OpenAI — Business data privacy, security, and compliance](https://openai.com/business-data/) |
| Assurance | Public claim only | Business-data page: CSA STAR, SOC 2 Type 2, ISO 27001/27017/27018/27701, with links into trust.openai.com. Reports were not inspected. BAA is a Healthcare add-on, not Business. | Current SOC 2/ISO reports scoped to ChatGPT Business. | [OpenAI — Business data privacy, security, and compliance](https://openai.com/business-data/) |
| Contract | Public claim only | Organisation data is described under the business-data commitments. The public Services Agreement and DPA are the Enterprise/API-style documents; confirm they are incorporated for self-serve Business. Do not assume Enterprise order-form terms. | Provide the signed Business terms, DPA, liability cap and governing law. | [OpenAI — Business data privacy, security, and compliance](https://openai.com/business-data/) |
| US monitoring copies | Public claim only | Even with non-US storage, a copy of every prompt and response is stored in the United States for safety and abuse monitoring. Inference is not confined to the storage region. | APP 8 assessment of US monitoring copies and out-of-region inference. | [OpenAI Help — Where your ChatGPT Business content is stored](https://help.openai.com/en/articles/20001418-where-your-chatgpt-business-content-is-stored) |
| Incidents | Not confirmed | DPA 'without undue delay' language is on the OpenAI DPA used by Enterprise; confirm it is signed for Business. No numbered hours on the Business pages. | Breach notice clock and NDB cooperation for Business. | [OpenAI — Business data privacy, security, and compliance](https://openai.com/business-data/) |
| Changes | Not confirmed | Subprocessor subscribe form exists. No Business-specific notice period for model or residency changes was extracted. | Notice before model, app-default or residency changes? | [OpenAI sub-processor list](https://openai.com/policies/sub-processor-list/) |
| Exit | Not confirmed | Seat add/remove is marketed. Export/offboarding of workspace content was not on the Business storage article. | How do we export then delete the workspace, including US monitoring copies? | [OpenAI Help — Where your ChatGPT Business content is stored](https://help.openai.com/en/articles/20001418-where-your-chatgpt-business-content-is-stored); [ChatGPT Business (formerly Team) product page](https://openai.com/chatgpt/team/) |
| Apps default on | Public claim only | In ChatGPT Business, many apps are enabled by default; administrators can change workspace access. App calls are logged. Data sent to an app follows the provider's terms and may leave the storage region. | Disable all apps except those we approve, and record that list. | [OpenAI Help — Apps / connectors in ChatGPT](https://help.openai.com/en/articles/11487775-connectors-in-chatgpt) |
| Web search | Not confirmed | Browsing/deep research are available unless workspace search controls or Lockdown Mode disable them (Lockdown is documented on the Enterprise/Edu residency article, not confirmed for Business). | Can web search be disabled on Business, and is it off? | [OpenAI Help — Apps / connectors in ChatGPT](https://help.openai.com/en/articles/11487775-connectors-in-chatgpt) |
| Work and Codex | Not confirmed | ChatGPT Work and Codex can take actions across apps. Tasks pause if an action requires approval. Healthcare turns event-triggered tasks off by default; that is not the Business default. | Which agentic features are on, and is approval required before external actions? | [ChatGPT Business (formerly Team) product page](https://openai.com/chatgpt/team/); [OpenAI Help — Apps / connectors in ChatGPT](https://help.openai.com/en/articles/11487775-connectors-in-chatgpt) |
| Oversight | Not confirmed | No product-enforced lawyer review. Admin logs exist for app calls. Compliance API is an Enterprise feature in sibling documentation. | What audit log can we export on Business without upgrading to Enterprise? | [OpenAI Help — Apps / connectors in ChatGPT](https://help.openai.com/en/articles/11487775-connectors-in-chatgpt) |

## Notes

Formerly Team. No training by default. Do not inherit Enterprise SCIM, custom retention, AU storage or Astra for Law. Business residency is a gradual rollout; US abuse-monitoring copies apply even with non-US storage. Sibling: chatgpt-enterprise.

## Sources

- [OpenAI — Business data privacy, security, and compliance](https://openai.com/business-data/) (checked 2026-09-21)
- [OpenAI Help — Where your ChatGPT Business content is stored](https://help.openai.com/en/articles/20001418-where-your-chatgpt-business-content-is-stored) (checked 2026-09-21)
- [ChatGPT Business (formerly Team) product page](https://openai.com/chatgpt/team/) (checked 2026-09-21)
- [OpenAI Help — Apps / connectors in ChatGPT](https://help.openai.com/en/articles/11487775-connectors-in-chatgpt) (checked 2026-09-21)
- [OpenAI sub-processor list](https://openai.com/policies/sub-processor-list/) (checked 2026-09-21)
- [OpenAI Help — How your data is used to improve model performance](https://help.openai.com/en/articles/5722486-how-your-data-is-used-to-improve-model-performance) (checked 2026-09-21)

A product profile is research to support questions. It does not approve a product for any firm. Public product information supports questions; it does not approve a product for your firm. Verify the exact plan, settings and signed terms.