Product compliance status

Page version 1.0 Updated July 28, 2026

OpenAI products are protected by security and privacy controls that independent auditors assess against applicable compliance frameworks. A product is included within a framework’s scope when it is covered by the controls assessed under that framework. The matrix below identifies the products currently in scope for each framework.

Enterprise products and programs

8 products · 3 audit programs

Product	SOC 2 Type 2	ISO/IEC 27701:2019	ISO/IEC 27001:2022
ChatGPT Business A shared ChatGPT workspace for work, with admin controls and apps for company tools.	✓		✓
ChatGPT Enterprise Enterprise-grade ChatGPT connected to company data, powered by OpenAI’s models, products, and expertise.	✓	✓	✓
ChatGPT for Education A campus-scale ChatGPT offering for students, faculty, researchers, and campus operations.	✓	✓	✓
ChatGPT for Healthcare A secure AI workspace for healthcare that supports HIPAA-compliant use with trusted clinical search.	✓	✓	✓
ChatGPT for Teachers A secure ChatGPT workspace for K–12 teachers and school leaders to personalize lessons, prep, and collaborate.	✓	✓	✓
API Platform OpenAI’s developer platform for building applications with OpenAI models and APIs.	✓	✓	✓
Codex OpenAI’s AI assistant for work and code, used across tasks, projects, and developer workflows.	✓	✓	✓
OpenAI Presence OpenAI’s managed enterprise platform for deploying and continuously improving governed voice and chat agents across customer and internal workflows.	✓		✓

Government products and programs

2 products · 3 audit programs

Product

TX-RAMP Level 2

FedRAMP Low

FedRAMP Moderate

ChatGPT FedRAMP

An OpenAI-managed SaaS version of ChatGPT Enterprise with additional accredited FedRAMP compliance.

✓

OpenAI API FedRAMP

A FedRAMP-compliant version of the OpenAI API Platform for supported methods and models via the designated government endpoint.

✓

✓ = publicly supported or in scope. Blank = not in scope or not applicable.