Compliance: ISO/IEC 27001:2022; ISO/IEC 27701:2019; HIPAA BAA (“Private Retention with PSP”); FedRAMP 20x Moderate (under a conditionThe mark holds only under a setting or an agreement the line names.); DPA (company-wideThe mark rests on a sentence that names no product, so check on the page whether it covers this one.).
Data: Training use, zero-retention option and data residency stated on the maker's pageA sentence on the maker's page answers it for this product.; default retention page could not be readA page that could answer returned no readable text..
Model and where it runs: Hosted by the maker; model provider stated on the maker's pageA sentence on the maker's page answers it for this product.; where it can run not stated on the pages readWe read a page that could answer and found no sentence that does. It says nothing about what the maker does..
Details: What the maker's own pages state, not a compliance determination, unverified after 2026-12-23: trust page, trust.openai.com.
What the maker's own pages said on the dates shown, not a compliance determination.
Our reading of vendors' pages, as of the dates shown. Confirm on the vendor's page before relying on any line that cites it. To report an error write to report@crinaro.ai