Skip to content

OpenAICompliance, certifications and attestations

Certifications held, by family9 held
Founded
2015
Website
openai.com
Trust center Company profile
9
Certifications held
2
Backed by a registry
9
Pieces of evidence
Sep 24, 2026
Last captured
Across fru.devAcquisitionsPaydaysReleasesConferences

SOC reports

ISO standards

AI governance

US government

Health

Payments

Privacy

Cloud security

Regional

From public trust centers and registries on the date shown. Confirm scope with the vendor. Logos via logo.dev; trademarks belong to their owners.

History

Added or renewedUpgradedIn process or ReadyLapsed or removed
  1. AddedFedRAMP ModerateChatGPT Enterprise and API Platform
  2. In processFedRAMP ModerateChatGPT Enterprise and API Platform
  3. AddedCSA STARFirst listed in the CSA STAR Registry

Evidence

Every source, what it says and when it was read.

SOC 21 source

Held · Type IIVendor compliance page
...Visit Trust Portal (opens in a new window) View product compliance status Our accreditations SOC 2 Type 2 OpenAI has undergone an independent SOC 2 Type 2 examination of controls relevant to Security, Availability,...
Captured Sep 24, 2026Open source

ISO/IEC 270011 source

HeldVendor compliance page
...Availability, Confidentiality, and Privacy for its API and ChatGPT business product services. ISO 27001, 27017, 27018, and 27701 OpenAI maintains ISO/IEC 27001:2022 and ISO/IEC 27701:2019 certifications for the information...
Captured Sep 24, 2026Open source

ISO/IEC 277011 source

HeldVendor compliance page
...product services. ISO 27001, 27017, 27018, and 27701 OpenAI maintains ISO/IEC 27001:2022 and ISO/IEC 27701:2019 certifications for the information security and privacy management systems supporting the OpenAI API, ChatGPT...
Captured Sep 24, 2026Open source

ISO/IEC 420011 source

HeldVendor compliance page
...management systems supporting the OpenAI API, ChatGPT Enterprise, and ChatGPT Edu services. ISO 42001 OpenAI maintains an ISO/IEC 42001:2023 AI Management System covering OpenAI’s consumer and business AI products...
Captured Sep 24, 2026Open source

FedRAMP1 source

Held · ModerateFedRAMP Marketplace

ChatGPT Enterprise and API Platform (FedRAMP 20x)

FedRAMP Authorized, 20x Moderate impact; authorized 2026-01-09 (Program); assessor Schellman Compliance, LLC; 3 agency authorizations
Captured Sep 23, 2026Since Jan 9, 2026Open source

HIPAA (BAA)1 source

HeldVendor compliance page
...accreditation OpenAI supports our customers’ compliance with privacy laws, including the GDPR, CCPA, HIPAA, and FERPA, and offers a Data Processing Addendum and Business Associate Agreement for customers. The infrastructure...
Captured Sep 24, 2026Open source

PCI DSS1 source

HeldVendor compliance page
...consumer and business AI products and models in its role as an AI producer and AI provider. PCI-DSS OpenAI maintains PCI-DSS compliance for the components of ChatGPT that support delegated payment processing. CSA...
Captured Sep 24, 2026Open source

CSA STAR1 source

Held · Level 1CSA STAR Registry

CAIQ

Listed as OpenAI since 2024-04-09; Level 1 (self-assessment)
Captured Sep 23, 2026Since Apr 9, 2024Open source

Compare with

Weekly: vendors that gained or lost a certification, Wednesdays.