New Compliance and Management Tools for ChatGPT Enterprise

OpenAI has launched new compliance and management tools to support data security and regulatory compliance for ChatGPT Enterprise users.

The new Enterprise Compliance API helps regulated industries such as finance, healthcare, and law meet logging and auditing requirements. Through this API, workspace owners can efficiently audit and manage time-stamped interaction records, including conversation content, uploaded files, GPT settings, and metadata.

In particular, through integrations with 8 major security companies including Forcepoint, Microsoft Purview, Palo Alto Networks, and Zscaler, the following features are supported:

• Compliance programs: Support for regulatory compliance such as FINRA, HIPAA, and GDPR
• eDiscovery and legal hold: Preparing and maintaining data for legal proceedings
• Data loss prevention (DLP): Monitoring and deletion of sensitive information such as personal information (PII) and financial data

SCIM functionality has also been introduced to automate user management, allowing administrators to programmatically create or delete user accounts by syncing their internal employee directory with the workspace.

Through a recent update, the ChatGPT Compliance API has been integrated into the OpenAI Compliance Logs Platform. This platform provides a unified environment for exporting observability and compliance data through immutable JSONL log files, including admin audits, user authentication, and Codex usage logs.