Security Portal

The GPT-4o and OpenAI o1 System Cards detail our safety work on recently released models and are now available on our Trust Portal for our customers’ reference.


The GPT-4o System Card outlines the safety work carried out prior to releasing GPT-4o including external red teaming, frontier risk evaluations according to our Preparedness Framework, and an overview of the mitigations we built in to address key risk areas.



The OpenAI o1 System Card outlines the safety work carried out prior to releasing OpenAI o1-preview and o1-mini, including external red teaming and frontier risk evaluations according to our Preparedness Framework.

We are delighted to share the most recent SOC 2 Type 2 report, covering our ChatGPT and API products over January 1, 2024, to June 30, 2024. SOC 2 Type 2 compliance demonstrates our continued commitment to robust security and privacy practices. We have uploaded our latest SOC 2 Type 2 report to our trust portal for our customers' reference.

We are proud and excited to announce that the OpenAI API has achieved SOC 2 Type 2 compliance. SOC 2 Type 2 compliance requires an ongoing commitment to security and privacy practices and demonstrates our dedication to protecting our customers' data. We have uploaded the SOC 2 Type 2 report to our trust portal for our customers' reference.

We are delighted to announce that the OpenAI API, ChatGPT Enterprise/Teams and DALL·E have achieved a CSA STAR Level 1 listing! CSA’s Security, Trust & Assurance Registry Level 1 demonstrates an organization’s commitment to securing cloud infrastructure and customer data, some of our foremost priorities at OpenAI. Our CSA STAR Registry listing is available in the Documents section of the OpenAI Trust Portal for our customers’ reference.