For global businesses navigating complex data regulations, OpenAI has announced a significant expansion of its data residency options. This move directly addresses the critical need for organizations to control where their sensitive information is stored, ensuring compliance with regional laws like GDPR and CCPA.
With over one million business customers worldwide, OpenAI is now offering eligible users of ChatGPT Enterprise, ChatGPT Edu, and the API Platform the ability to choose local data residency. This means customer content—including conversations, uploaded files, and custom GPTs—can be stored at rest within specific geographic regions.
Currently available regions include:
* Europe
* United Kingdom
* United States
* Canada
* Japan
* South Korea
* Singapore
* India
* Australia
* United Arab Emirates
The company has plans to expand this availability to more regions in the future.
How It Works for Different Products
For ChatGPT Enterprise and Edu, new workspaces can be configured from the start with data residency, pinning all customer content to the selected region.
For the API Platform, enterprise customers with approved advanced data controls can enable regional residency by creating a new Project in their dashboard and selecting their preferred location. Crucially, model requests and responses processed through these projects are handled in-region and are not stored at rest on OpenAI’s servers.
Built on a Foundation of Security
This new data control layer is built upon OpenAI’s established suite of privacy and security features, designed to give organizations confidence:
- Advanced Encryption: Utilizing AES-256 for data at rest and TLS 1.2+ for data in transit. The optional Enterprise Key Management (EKM) allows customers to bring their own encryption keys.
- No Training on Your Data: By default, OpenAI does not train its models on data from ChatGPT business plans or the API unless a customer explicitly opts in.
- Comprehensive Certifications: Adherence to major standards including ISO/IEC 27001, 27017, 27018, 27701, SOC 2 Type II, and CSA STAR.
- Data Processing Addendum (DPA): A comprehensive DPA is provided to clarify roles and responsibilities under global privacy regulations.
For businesses, the core principle remains: your data is confidential, secure, and entirely owned by you. Data residency provides an enhanced level of geographical control to meet stringent compliance obligations.
Organizations interested in learning more about eligibility are encouraged to visit the OpenAI Help Center or contact their team directly to discuss enabling data residency.
Explore More from OpenAI
Introducing GPT-5.2-Codex | Product | Dec 18, 2025
Developers can now submit apps to ChatGPT | Product | Dec 17, 2025
The new ChatGPT Images is here | Product | Dec 16, 2025