OpenAI API
OpenAI · USA
EU data residency via Azure, but US jurisdiction means CLOUD Act exposure. Blocking for defence and regulated sectors.
Sovereignty
Hosting: EU via AzureGDPR: DPAJurisdiction: USAAI Act: Compliant
Operational facts
- Data residency
- EU via Azure
- Sub-processors
- Microsoft Azure
- Training opt-out
- Default on API
- DPA
- Yes
- Audit rights
- Enterprise tier
Compliance & certifications
SOC 2 type IIISO 27001CSA STAR
Reviewed by Ali Madjaji · Last reviewed 2026-04-15· Reviewed 68 days agoSuggest a correction