OpenAI compliance, certifications and attestations

AI labs · 9 certifications held · 2 from public registries · read Sep 24, 2026

Certification	Status	Source	Evidence
SOC reports
SOC 2 Type II Vendor page	Type II	Vendor page	Sep 24, 2026
ISO standards
ISO/IEC 27001 Held Vendor page	Held	Vendor page	Sep 24, 2026
ISO/IEC 27701 Held Vendor page	Held	Vendor page	Sep 24, 2026
AI governance
ISO/IEC 42001 Held Vendor page	Held	Vendor page	Sep 24, 2026
US government
FedRAMP Moderate ChatGPT Enterprise and API Platform (FedRAMP 20x) FedRAMP Marketplace	Moderate	FedRAMP Marketplace	Sep 23, 2026
Finance
PCI DSS Held Vendor page	Held	Vendor page	Sep 24, 2026
Health
HIPAA (BAA) Held Vendor page	Held	Vendor page	Sep 24, 2026
Privacy and cloud
CSA STAR Level 1 CAIQ CSA STAR Registry	Level 1	CSA STAR Registry	Sep 23, 2026
Education
FERPA Held Vendor pageUnverified	Held	Vendor pageUnverified	Sep 24, 2026

From public trust centers and registries on the date shown. Confirm scope with the vendor. Logos via logo.dev; trademarks belong to their owners.

History

Date	Change	Source
Jan 9, 2026	Added FedRAMP Moderate ChatGPT Enterprise and API Platform	FedRAMP Marketplace
Sep 2, 2025	In process FedRAMP Moderate ChatGPT Enterprise and API Platform	FedRAMP Marketplace
Apr 9, 2024	Added CSA STAR First listed in the CSA STAR Registry	CSA STAR Registry

About OpenAI

ChatGPT Enterprise and the OpenAI API platform.

No public evidence found for

SOC reports: SOC 1, SOC 3
ISO standards: ISO 27017, ISO 27018, ISO 9001, ISO 22301, ISO 20000, ISO 27799
AI governance: STAR AI
US government: DoD IL, GovRAMP, TX-RAMP, CMMC, 800-171, 800-53, FIPS 140, ITAR, CJIS, IRS 1075, 508/VPAT
Finance: PCI 3DS, SWIFT, 17a-4, GLBA, SOX, FFIEC, MAS TRM, APRA, OSFI, FISC, DORA
Health: HITRUST, HDS, NHS DSPT, PHIPA
Life sciences (GxP): GxP, Part 11, Annex 11, CSV
Privacy and cloud: DPF, CBPR, EU CoC
Regional programs: Cyber Ess., G-Cloud, C5, ENS, SecNum, IRAP, ISMAP, MTCS, K-ISMS, TISAX
Education: HECVAT, COPPA