OpenAI has released its Sub-Processor List, effective January 9, 2025, detailing the third-party entities engaged to handle customer data. This initiative aims to enhance transparency and trust in data processing activities associated with OpenAI’s products and services.
Key Takeaways
- OpenAI collaborates with various third-party sub-processors to manage customer data.
- The list includes notable companies like Microsoft, Cloudflare, and Snowflake.
- The purpose of engaging these sub-processors ranges from content delivery to customer support and data warehousing.
Overview of Sub-Processors
OpenAI’s Sub-Processor List outlines the entities involved in processing customer data, categorized by their respective services and locations. Here’s a summary of the key sub-processors:
| Entity Name | OpenAI Product or Service | Location of Processing | Purpose of Processing |
|---|---|---|---|
| Cloudflare, Ltd. | API | Data center closest to the End User | Content delivery network provider |
| Microsoft Corporation | API | Australia, Canada, France, Germany, Norway, Poland, South Africa, Sweden, Switzerland, UAE, UK, US | Cloud infrastructure |
| Snowflake, Inc. | API* | United States | Data warehousing |
| TaskUs, LLC | API | Philippines | Customer support, content moderation |
| Intercom, Inc. | API | United States | Customer support |
| Accenture International Limited | API | Canada, Philippines | Customer support |
| Fivetran, Inc. | Assistants API | United States | ETL provider |
| Confluent | API* | United States | Infrastructure management |
| Cinder Technologies, Inc. | API* | United States | Content moderation platform |
| WorkOS, Inc.** | ChatGPT Enterprise | United States | Cross-domain identity management |
| Okta, Inc. | API | United States | User authentication services |
*Except where Zero Data Retention (ZDR) is used
**At election of customer
Purpose of Data Processing
The sub-processors are engaged for various purposes, including:
- Customer Support: Data is processed only when customers share it during support interactions.
- Moderation: OpenAI may share flagged content samples with sub-processors for review and enforcement of policies.
- Infrastructure Management: Ensures the smooth operation of OpenAI’s services and products.
OpenAI Entities Involved
In addition to third-party sub-processors, OpenAI operates through several affiliate companies that provide technical and operational support. These include:
- OpenAI, OpCo, LLC (United States)
- OpenAI, LLC (United States)
- OpenAI Ireland Ltd. (Ireland)
- OpenAI UK Ltd. (United Kingdom)
- OpenAI Japan Ltd. (Japan)
Conclusion
The release of the Sub-Processor List marks a significant step towards transparency in data management practices at OpenAI. By clearly outlining the entities involved and their respective roles, OpenAI aims to foster trust and ensure compliance with data protection standards. This initiative not only enhances customer confidence but also aligns with global data privacy regulations, paving the way for responsible AI usage.
