OpenAI API
From AI API data terms: training, retention and zero retention: What does each AI provider say happens to data sent to its commercial API: is it used for training, how long is it kept, and can zero retention be had?
Provider: OpenAI
The company offering the API, as named on its own page.
data sent to the OpenAI API is not used to train or improve OpenAI models
Source: https://developers.openai.com/api/docs/guides/your-data. Read 2026-11-01. Checked by a second reader.
Offering: OpenAI API
The API, tier or platform the row covers, in the provider's words.
data sent to the OpenAI API is not used to train or improve OpenAI models
Source: https://developers.openai.com/api/docs/guides/your-data. Read 2026-11-01. Checked by a second reader.
Trains on API data by default: No
True or false only where the text plainly says what happens to this offering's API data with no opt-in or opt-out by the customer. An opt-out with no stated default is left blank. Where pages differ: legal or privacy page first, then help or trust pages, then developer docs, with the other in conflicts.
As of March 1, 2023, data sent to the OpenAI API is not used to train or improve OpenAI models (unless you explicitly opt in to share data with us).
Source: https://developers.openai.com/api/docs/guides/your-data. Read 2026-11-01. Checked by a second reader.
Default retention: Abuse monitoring logs are generated for all API feature usage and retained for up to 30 days
How long prompts and outputs are kept by default, in the provider's words. Where pages differ: legal or privacy page first, then help or trust pages, then developer docs, with the other in conflicts. A page that's only less specific isn't a conflict: the more specific statement is the value.
By default, abuse monitoring logs are generated for all API feature usage and retained for up to 30 days, unless longer retention is required by law, or is reasonably necessary to protect our services or any third party from harm.
Source: https://developers.openai.com/api/docs/guides/your-data. Read 2026-11-01. Checked by a second reader.
Exceptions: We reserve the right to make models ineligible for zero data retention or modified abuse monitoring for specific customers
The main case with different retention, in the provider's words: first a model carved out of the general promise, then a feature, then a case such as flagged content. Pages rank as for Default retention; between pages of equal rank, the one naming the models. One passage only, so others may exist.
For customers approved for Zero Data Retention or Modified Abuse Monitoring, we reserve the right to make models ineligible for Zero Data Retention or Modified Abuse Monitoring for specific customers, as notified in advance to the impacted customers in writing.
Source: https://developers.openai.com/api/docs/guides/your-data. Read 2026-11-01. Read once.
Zero retention offered: Yes
True only where the provider plainly offers zero data retention by that name for this offering; false only where it plainly excludes it. A similar control under another name is left blank here and described in How to get it.
Eligible customers may have their customer content excluded from these abuse monitoring logs, subject to the limitations below, by getting approved for the Zero Data Retention or Modified Abuse Monitoring controls.
Source: https://developers.openai.com/api/docs/guides/your-data. Read 2026-11-01. Checked by a second reader.
How to get it: Prior approval by OpenAI and acceptance of additional requirements
What the provider says is needed for zero retention. Where it has no offer by that name, its nearest named control or pointer, in its own words. Where pages differ: legal or privacy page first, then help or trust pages, then developer docs, with the other in conflicts.
Currently, these controls are subject to prior approval by OpenAI and acceptance of additional requirements.
Source: https://developers.openai.com/api/docs/guides/your-data. Read 2026-11-01. Checked by a second reader.
BAA available: Yes
True where the provider says it signs or offers a HIPAA Business Associate Agreement, or sets terms for use under one, for this offering. A general cloud BAA that the page doesn't tie to this offering, or an invitation to ask, is left blank.
For customers who have executed an OpenAI Business Associate and Healthcare Addendum, once your org ID is provisioned with Safety Retention, BAA-eligible endpoints can be used for processing PHI, even if data is retained.
Source: https://developers.openai.com/api/docs/guides/your-data. Read 2026-11-01. Checked by a second reader.
Data location: Data residency controls are a project configuration option; contact our sales team to see if you're eligible
Where the provider states data is processed or stored, in its words. Where pages differ: legal or privacy page first, then help or trust pages, then developer docs, with the other in conflicts.
Data residency controls are a project configuration option that allow you to configure the location of infrastructure OpenAI uses to provide services. Contact our sales team to see if you’re eligible for using data residency controls.
Source: https://developers.openai.com/api/docs/guides/your-data. Read 2026-11-01. Checked by a second reader.