Data

ChatGPT data terms by plan: AI training, data location and DPA

Business: Doesn't train on your data. EU hosting only on higher plans · DPA in the terms.

Vendor: OpenAIAssistantsChecked on How we check

Verdict

What does ChatGPT do with your data?

Free

Free

Trains on your data unless you switch it off

No EU hosting · no DPA

Price: Free

Plus

Personal

Trains on your data unless you switch it off

No EU hosting · no DPA

Price: €23 / mo

Business

Business

Doesn't train on your data

EU hosting only on higher plans · DPA in the terms

Price: €21 / user / mo

No tool is GDPR compliant on its own: that depends on how your business uses it. This page shows the vendor's side, from its own pages. It is not legal advice.

Related article: ChatGPT and the GDPR: which plan a business can use
Plans

Which ChatGPT plan stops the AI training?

Training stops on Business. Free, Plus train on your data.

Training

Does ChatGPT train on your data?

Trains on your data by default? · Free

Checked

Trains on your data unless you switch it off.

Yes. OpenAI may use conversations on Free, Plus and Pro to train its models unless the user opts out; feedback (thumbs up/down) can still put a whole conversation into training after an opt-out

Source: help.openai.comSection 'Services for individuals' (updated 18 Oct 2026) and FAQ on feedback after opting outSecond source: help.openai.comChecked on

Trains on your data by default? · Plus

Checked

Trains on your data unless you switch it off.

Yes. OpenAI may use conversations on Free, Plus and Pro to train its models unless the user opts out; feedback (thumbs up/down) can still put a whole conversation into training after an opt-out

Source: help.openai.comSection 'Services for individuals' (updated 18 Oct 2026) and FAQ on feedback after opting outSecond source: help.openai.comChecked on

Trains on your data by default? · Business

Checked

Doesn't train on your data.

No. Business prompts, responses and files are used to improve models only if the organisation signs a separate agreement; thumbs-up/down feedback does not permit training on the conversation

Source: help.openai.comSections 'Business services and managed workspaces' and FAQ 'What if I submit feedback after opting out?' (updated 17 Oct 2026)Second source: openai.comChecked on

Switch-off

How do you turn off AI training in ChatGPT?

How to switch training off · Free

Checked

You can switch the training off.

The user turns off 'Improve the model for everyone' under Settings > Data controls, or selects 'Do not train on my content' in OpenAI's Privacy Portal. Only new conversations are affected, and thumbs-up/down feedback still allows training on that conversation

Source: help.openai.comSection 'Services for individuals'Second source: help.openai.comChecked on

How to switch training off · Plus

Checked

You can switch the training off.

The user turns off 'Improve the model for everyone' under Settings > Data controls, or selects 'Do not train on my content' in OpenAI's Privacy Portal. Only new conversations are affected, and thumbs-up/down feedback still allows training on that conversation

Source: help.openai.comSection 'Services for individuals'Second source: help.openai.comChecked on

Location

Where does ChatGPT store your data?

Where data is stored by default · Free

Checked

Outside the EU: OpenAI processes and stores personal data on servers in the United States and in countries where its affiliates and vendors are, using EU Standard Contractual Clauses

Source: openai.comSection on international transfers (EU privacy policy updated 24 Aug 2026)Checked on

EU hosting on this plan · Free

Checked

No EU hosting.

No. Data residency in Europe is offered only to eligible API customers and new Enterprise and Edu workspaces

Source: help.openai.comEligibility sectionSecond source: chatgpt.comChecked on

Where data is stored by default · Plus

Checked

Outside the EU: OpenAI processes and stores personal data on servers in the United States and in countries where its affiliates and vendors are, using EU Standard Contractual Clauses

Source: openai.comSection on international transfers (EU privacy policy updated 24 Aug 2026)Checked on

EU hosting on this plan · Plus

Checked

No EU hosting.

No. Data residency in Europe is offered only to eligible API customers and new Enterprise and Edu workspaces

Source: help.openai.comEligibility sectionSecond source: chatgpt.comChecked on

EU hosting on this plan · Business

Checked

EU hosting only on higher plans.

Not on Business. Enterprise/Edu: storage at rest in Europe (EEA + Switzerland) and in-region inference for Europe

Source: chatgpt.comComparison row 'Data residency in US, EU, UK, ...': Business = No, Enterprise = YesSecond source: help.openai.comChecked on

Contract

Does ChatGPT sign a data processing agreement?

Data processing agreement (DPA) · Free

Checked

No DPA.

No. On personal plans OpenAI is the controller under its consumer terms; its DPA attaches only to the business OpenAI Services Agreement

Source: openai.comPreamble ('supplements, and is incorporated into, the OpenAI Services Agreement')Second source: openai.comChecked on

Data processing agreement (DPA) · Plus

Checked

No DPA.

No. On personal plans OpenAI is the controller under its consumer terms; its DPA attaches only to the business OpenAI Services Agreement

Source: openai.comPreamble ('supplements, and is incorporated into, the OpenAI Services Agreement')Second source: openai.comChecked on

Data processing agreement (DPA) · Business

Checked

DPA in the terms.

Yes. DPA (effective 1 Jan 2026) is incorporated into the Services Agreement; EEA and Swiss customers contract with OpenAI Ireland Ltd.

Source: openai.comPreamble (updated 1 Dec 2025, effective 1 Jan 2026)Second source: openai.comChecked on

Processors

Who else handles ChatGPT data?

Sub-processors (companies that handle the data for them) · Free

Checked

Published.

No list for personal plans. OpenAI's sub-processor list covers only the API and ChatGPT Business, Enterprise and Edu; the EU privacy policy names categories of vendors (hosting, cloud, payments, analytics, safety, age verification)

Source: openai.comColumn 'OpenAI Product or Service' in both tablesSecond source: openai.comChecked on

EU–US Data Privacy Framework · Free

Checked

Not listed.

No listing found for search term 'OpenAI'

Source: dataprivacyframework.govSearch 'OpenAI' (same result as for ChatGPT Business, checked 16 Oct 2026)Checked on

Sub-processors (companies that handle the data for them) · Plus

Checked

Published.

No list for personal plans. OpenAI's sub-processor list covers only the API and ChatGPT Business, Enterprise and Edu; the EU privacy policy names categories of vendors (hosting, cloud, payments, analytics, safety, age verification)

Source: openai.comColumn 'OpenAI Product or Service' in both tablesSecond source: openai.comChecked on

EU–US Data Privacy Framework · Plus

Checked

Not listed.

No listing found for search term 'OpenAI'

Source: dataprivacyframework.govSearch 'OpenAI' (same result as for ChatGPT Business, checked 16 Oct 2026)Checked on

Sub-processors (companies that handle the data for them) · Business

Checked

16 listed.

Public. 16 third-party entities, 15 of which cover ChatGPT Business; list updated 14 Oct 2026; sign-up form for notices of new sub-processors

Source: openai.comThird Party Sub-processors table; 'Last updated: October 14, 2026'Checked on

EU–US Data Privacy Framework · Business

Checked

Not listed.

No listing found for search term 'OpenAI'

Source: dataprivacyframework.govSearch 'OpenAI' returned 'Query returned no results' (3,683 participants in total)Checked on

Retention

How long does ChatGPT keep your data?

How long data is kept · Free

Checked

Chats stay until the user deletes them; deleted chats and accounts leave OpenAI's systems within 30 days, unless kept longer for legal, safety or abuse reasons. Temporary chats are deleted within 30 days

Source: openai.comSection 4 'Retention'Second source: help.openai.comChecked on

How long data is kept · Plus

Checked

Chats stay until the user deletes them; deleted chats and accounts leave OpenAI's systems within 30 days, unless kept longer for legal, safety or abuse reasons. Temporary chats are deleted within 30 days

Source: openai.comSection 4 'Retention'Second source: help.openai.comChecked on

How long data is kept · Business

Checked

Workspace admins can set how long data is kept; deleted or unsaved conversations are removed from OpenAI's systems within 30 days unless the law or harm prevention requires longer

Source: openai.comFAQ 'What is OpenAI's policy on data retention for ChatGPT Business?' (page updated 8 Jan 2026)Checked on

Security

Which certifications and admin controls does ChatGPT have?

Security certifications · Free

Checked

None listed for personal plans. OpenAI's product compliance matrix covers ChatGPT Business, Enterprise, Edu, Healthcare, Teachers, the API, Codex and Presence, not Free, Go, Plus or Pro

Source: openai.comMatrix 'Enterprise products and programs' (page version 1.1, 4 Aug 2026)Checked on

Admin controls for AI · Free

Checked

Not offered: a personal plan has no admin. The user controls training, memory and chat history in their own settings

Source: chatgpt.comFAQ 'How many users are supported on each subscription plan?' ('designed to be used by individuals')Second source: help.openai.comChecked on

Security certifications · Plus

Checked

None listed for personal plans. OpenAI's product compliance matrix covers ChatGPT Business, Enterprise, Edu, Healthcare, Teachers, the API, Codex and Presence, not Free, Go, Plus or Pro

Source: openai.comMatrix 'Enterprise products and programs' (page version 1.1, 4 Aug 2026)Checked on

Admin controls for AI · Plus

Checked

Not offered: a personal plan has no admin. The user controls training, memory and chat history in their own settings

Source: chatgpt.comFAQ 'How many users are supported on each subscription plan?' ('designed to be used by individuals')Second source: help.openai.comChecked on

Security certifications · Business

Checked

SOC 2 Type 2 only. ISO/IEC 27001 and 27701 cover ChatGPT Enterprise, Edu and the API, but not ChatGPT Business

Source: openai.comMatrix 'Enterprise products and programs', row 'ChatGPT Business' (page version 1.1, 4 Aug 2026)Second source: trust.openai.comChecked on

Admin controls for AI · Business

Checked

Partly. Admins choose which apps (connected tools) are enabled and can turn response feedback off; they cannot switch off shared links for everyone, which is an Enterprise-only setting

Source: openai.comSection on apps: 'Your workspace admins can control which apps are enabled'Second source: help.openai.comChecked on

Price

What does ChatGPT cost?

Price, as shown in Germany · Free

Checked

Free.

EUR 0 per month

Source: chatgpt.comPersonal plans: Free, Go, Plus, Pro cardsChecked on

Price, as shown in Germany · Plus

Checked

€23 / mo.

EUR 23 per month (monthly billing; VAT basis not stated on the page)

Source: chatgpt.comPersonal plans: Free, Go, Plus, Pro cardsChecked on

Price, as shown in Germany · Business

Checked

€21 / user / mo.

EUR 21 per user/month billed annually; EUR 26 billed monthly (premium seat EUR 105 / 130)

Source: chatgpt.comBusiness & Enterprise tab, Business cardChecked on

Alternatives

ChatGPT alternatives that don't train on your data

Other assistants tools whose business plan doesn't train on your data and includes a DPA.

The five marks, in order: No AI training · EU hosting · DPA · Sub-processors listed · DPF or EU vendor. ✓ meets it, ✕ doesn't, – partly, ? not stated.

Tool · PlanVerdictYour five rules
  • Langdock

    Business · €29.00 / user / mo

    Says it doesn't train on your dataData in the EU by default · DPA in the terms

    ✓✓✓✓✓

  • Microsoft 365 Copilot

    Business add-on · €18.20 / user / mo

    Doesn't train on your dataData in the EU by default · DPA in the terms

    ✓✓✓✓✓

  • nele.ai

    usage-based credit subscription · See details

    Doesn't train on your dataEU hosting available · DPA on request

    ✓✓✓✓✓

  • Proton Lumo

    Professional · €11.99 / user / mo

    Says it doesn't train on your dataData in the EU (vendor says) · DPA on request

    ✓✓✓✓✓

  • Gemini in Google Workspace

    Business Standard · €13.60 / user / mo

    Doesn't train on your dataLimited EU hosting · DPA in the terms

    ✓–✓✓✓

Need something your tools can't do?

We design and build what your team is missing, around the way you already work and the data rules you set.

Book a callServices