Home › Answers › Data, privacy and GDPR
Does ChatGPT Business train on my data?
Short answer
No, not by default. OpenAI says it doesn't train its models on ChatGPT Business, Enterprise or API data unless you explicitly opt in, for example by sending feedback. Your workspace admins can see, export and delete members' conversations, and OpenAI will sign a Data Processing Addendum to support UK GDPR compliance.
What OpenAI commits to for Business
| Question | OpenAI's answer (Enterprise privacy page, updated 8 January 2026) |
|---|---|
| Is my data used for training? | Not by default. Only if you opt in, for example through feedback |
| Who owns inputs and outputs? | You do, where the law allows |
| Who can read chats in my workspace? | The member, and workspace admins, who can view, export and delete conversations |
| Can OpenAI staff see them? | Only authorised staff for support, abuse investigations and legal compliance, plus contracted reviewers checking for misuse |
| How long is data kept? | Admins control retention; deleted or unsaved chats are removed within 30 days unless the law requires longer |
| Security | SOC 2 Type 2 audit; AES-256 encryption at rest, TLS 1.2+ in transit |
| GDPR | OpenAI will sign a Data Processing Addendum (DPA) |
What to do as a UK business
- Sign the DPA. It's a form on OpenAI's site, and it's part of meeting your UK GDPR duties when staff paste in personal data.
- Tell staff about thumbs up and thumbs down. Feedback can count as opting in to share that conversation.
- Set a retention period that matches your own data policy.
- Update your privacy notice if customer data goes into ChatGPT. See can I put customer data into ChatGPT?
Personal plans are different
On Free, Go, Plus and Pro, OpenAI may use your chats for training unless you turn off "Improve the model for everyone". See does ChatGPT use my data for training?
Related questions
How much is ChatGPT Business?
See how much does ChatGPT Business cost?
Is ChatGPT Business GDPR compliant?
OpenAI offers the DPA and security controls, but compliance also depends on how you use it. See is ChatGPT GDPR compliant?
Can I keep data in the UK?
OpenAI's pricing page lists data residency in regions including the UK as a business feature, not on personal plans. Ask OpenAI whether your plan includes it.
Sources
- OpenAI: Enterprise privacy
- OpenAI Help: data controls in ChatGPT
- OpenAI: ChatGPT pricing (data residency)
Checked 17 October 2026. Rules and prices change, so check the source before you rely on it. This is general information, not legal, tax or financial advice.
More on data, privacy and gdpr
- Are AI detection tools accurate?
- Are AI tools secure for business?
- Are ChatGPT chats private? Can OpenAI read them?
- Are Microsoft Copilot chats private?
- Can AI agents be trusted?
- Can AI read my WhatsApp messages?
All data, privacy and gdpr answers · All answers · Guides · AI tools directory
Get one useful AI tool in your inbox each weekday
Free, plain English, five minutes to read. Unsubscribe any time.
See our privacy notice.