OpenAI Sub-processor List
OpenAI engages the following entities to provide processing activities for Customer Data (as defined in the OpenAI Data Processing Agreement).
Third Party Sub-processors
Entity Name | OpenAI Product or Service | Location of Processing | Purpose of Processing |
Cloudflare, Ltd. | API | Processing is performed at the data center (opens in a new window)that is closest to the End User | Content delivery network provider |
Microsoft Corporation | API | Australia | Cloud infrastructure |
CoreWeave, Inc. | API | Norway | Cloud infrastructure |
Oracle Cloud Infrastructure | API | Brazil | Cloud infrastructure |
Google Cloud Platform | API | Japan | Cloud infrastructure |
Snowflake, Inc. | API* | United States | Data warehousing |
TaskUs, LLC | API | Philippines | All Services: API & ChatGPT Team: ChatGPT Enterprise, Edu & ChatGPT Team: |
Intercom, Inc. | API | United States | Customer support |
Salesforce | API | Australia | Customer support |
Accenture International Limited | API | Canada | Customer support |
Fivetran, Inc. | Assistants API | United States | ETL provider |
Confluent | API* | United States | Infrastructure management |
Cinder Technologies, Inc. | API* | United States | API & ChatGPT Team: ChatGPT Enterprise, Edu & ChatGPT Team: |
WorkOS, Inc.** | ChatGPT Enterprise | United States | Cross-domain identity management |
Okta, Inc. | API | United States | User authentication services (via Auth0) |
Merge API, Inc.** | ChatGPT Enterprise | Australia | Infrastructure management |
* Except where Zero Data Retention (ZDR) is used
** At election of customer
Detail about Processing Purposes:
Customer Support: Customer Support services are initiated by the Customer, and Customer Data is only processed to the extent Customer explicitly elects to share such data in the course of the support case.
Moderation: For content that OpenAI’s models flag as being in violation of OpenAI’s policies, OpenAI may share samples of the flagged Customer Content with relevant Sub-processors to assist OpenAI in its review and enforcement. Sharing with the Sub-processor platform only occurs when content is flagged, the Sub-processor platform only retains samples of content for the period of review, and OpenAI’s Sub-processors only process the content to assist OpenAI in its review.
For GPTs that are kept private to an individual or workspace, moderation activities must be initiated by the Customer, for instance if a user within the Customer’s workspace reports the GPT or appeals an action taken on the GPT. For GPTs published to the public, moderation may also be conducted if OpenAI determines the GPT may violate our policies.
Infrastructure management: Merge API is only used when the Customer chooses to enable Connectors in ChatGPT(opens in a new window).
OpenAI Entities
The following OpenAI affiliate companies provide technical and operational support for the Services. We use the Standard Contractual Clauses as a valid transfer mechanism among affiliates.
Entity Name | OpenAI Product or Service | Location of Processing | Parent Company |
OpenAI, OpCo, LLC | API | United States | OpenAI Global, LLC |
OpenAI, LLC | API | United States | OpenAI, OpCo, LLC |
OpenAI Ireland Ltd. | API | Ireland | OpenAI, LLC |
OpenAI UK Ltd. | API | United Kingdom | OpenAI, LLC |
OpenAI Japan Ltd. | API | Japan | OpenAI, LLC |
Subscribe to new Sub-processor notifications
Sign up to receive notification of new third party Sub-processors by filling out this form.
Please contact privacy@openai.com with any questions or concerns.