Enterprise AI assistant data controls, by plan
Retention, training, SSO, audit, certifications and more, for 9 plans. Sourced only from official vendor pages.
| Plan | Retention (default) | Retention configurable | Trains on customer data | Zero data retention option | Data residency | SSO | SCIM | Audit logs / compliance API | Customer-managed keys | Admin connector controls | SOC 2 | ISO 27001 | HIPAA / BAA | Encryption | DPA available | Feedback used for training | Vendor human review | AI mgmt cert (ISO 42001) | FedRAMP | Pricing note |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| ChatGPT Business | Admin-controlled; deleted/unsaved chats removed within 30 days source · 2026-10-15 | Yes (workspace admins) source · 2026-10-15 | No by default (unless opted in via feedback) source · 2026-10-15 | Not documented on public pages reviewed (ZDR is API-only) source · 2026-10-15 | No – data residency not on Business source · 2026-10-15 | SAML SSO (enterprise-level authentication) source · 2026-10-15 | No (standalone Business) source · 2026-10-15 | No Compliance API (Business); admins can view/export conversations source · 2026-10-15 | No – EKM not on Business source · 2026-10-15 | Yes – admins control which apps are enabled source · 2026-10-15 | Yes – SOC 2 Type 2 source · 2026-10-15 | No – ISO 27001 scope covers Enterprise, Edu, API only source · 2026-10-15 | Not offered on Business (BAA is API / ChatGPT for Healthcare) source · 2026-10-15 | AES-256 at rest, TLS 1.2+ in transit source · 2026-10-15 | Yes source · 2026-10-15 | Yes, if user opts in via feedback source · 2026-10-15 | Authorized staff + contracted reviewers for abuse source · 2026-10-15 | Yes – ISO 42001 (OpenAI products) source · 2026-10-15 | No – FedRAMP listing covers Enterprise & API source · 2026-10-15 | $20/seat/mo annual ($25 monthly); Premium $100/$125; 2–200 users source · 2026-10-15 |
| ChatGPT Enterprise | Admin-controlled; deleted chats removed within 30 days source · 2026-10-15 | Yes (workspace admins) source · 2026-10-15 | No by default (unless opted in via feedback) source · 2026-10-15 | Not documented for ChatGPT (ZDR is API-only, eligible endpoints) source · 2026-10-15 | Yes – storage at rest in US, EU (EEA+CH), UK, JP, CA, KR, SG, IN, AU, UAE; inference residency in EU, US, UAE source · 2026-10-15 | SAML SSO source · 2026-10-15 | Yes – workspace or tenant-wide SCIM source · 2026-10-15 | Yes – Compliance API / Compliance Logs Platform source · 2026-10-15 | Yes – EKM (AWS KMS, GCP, Azure Key Vault); needs named account rep source · 2026-10-15 | Yes – admins control which apps are enabled source · 2026-10-15 | Yes – SOC 2 Type 2 source · 2026-10-15 | Yes – ISO 27001:2022 & 27701 (Enterprise, Edu, API) source · 2026-10-15 | BAA offered for API; ChatGPT for Healthcare is the HIPAA offering source · 2026-10-15 | AES-256 at rest, TLS 1.2+ in transit source · 2026-10-15 | Yes source · 2026-10-15 | Yes, if user opts in via feedback source · 2026-10-15 | Only for incidents, with permission, or legal need source · 2026-10-15 | Yes – ISO 42001 (OpenAI products) source · 2026-10-15 | FedRAMP 20x Moderate (ChatGPT Enterprise & API) source · 2026-10-15 | Contact sales; credit- or token-based options source · 2026-10-15 |
| Claude Team | Unknown | No custom retention (Enterprise-only feature) source · 2026-10-15 | No by default (commercial terms) source · 2026-10-15 | Unknown | Unknown | Yes – SSO + domain capture, JIT source · 2026-10-15 | No – Enterprise only source · 2026-10-15 | No – audit logs listed as Enterprise-only source · 2026-10-15 | Unknown | Unknown | Yes (business plans) source · 2026-10-15 | Yes (business plans) source · 2026-10-15 | HIPAA-ready config listed for Enterprise/Platform only source · 2026-10-15 | Unknown | Yes – incorporated into Commercial Terms source · 2026-10-15 | Yes – thumbs feedback stored up to 5 yrs, may train; owners can disable source · 2026-10-15 | Unknown | Yes – ISO 42001 (Anthropic) source · 2026-10-15 | No (FedRAMP High via Claude for Government/Bedrock/Vertex) source · 2026-10-15 | $20/seat/mo annual ($25 monthly); Premium $100/$125; 2–150 seats source · 2026-10-15 |
| Claude Enterprise | Indefinite unless custom period set source · 2026-10-15 | Yes – min 30 days (chats/projects; excludes some Claude Code-based features) source · 2026-10-15 | No by default (commercial terms) source · 2026-10-15 | ZDR referenced as compatible config for Claude Enterprise (contact sales) source · 2026-10-15 | US-only inference option source · 2026-10-15 | Yes – SSO/SAML + domain capture source · 2026-10-15 | Yes source · 2026-10-15 | Yes – audit logs, Compliance API, OpenTelemetry source · 2026-10-15 | Yes – CMEK (AWS KMS, GCP KMS, Azure Key Vault); new data only source · 2026-10-15 | Yes – admins approve connectors org-wide, per-tool permissions source · 2026-10-15 | Yes source · 2026-10-15 | Yes source · 2026-10-15 | Yes – HIPAA-ready config with BAA source · 2026-10-15 | Unknown | Yes – incorporated into Commercial Terms source · 2026-10-15 | Yes – thumbs feedback stored up to 5 yrs, may train; owners can disable source · 2026-10-15 | Unknown | Yes – ISO 42001 (Anthropic) source · 2026-10-15 | No – not FedRAMP High (use Claude for Government/Bedrock/Vertex) source · 2026-10-15 | $20/seat/mo annual + usage at API rates; min 20 seats source · 2026-10-15 |
| Microsoft (365) Copilot Copilot license (add-on) | Stored with M365 content per contractual commitments source · 2026-10-15 | Yes – Microsoft Purview retention policies source · 2026-10-15 | No – prompts, responses, Graph data not used to train foundation LLMs source · 2026-10-15 | Unknown | EU Data Boundary; ADR & Multi-Geo commitments (Anthropic models excluded from EUDB) source · 2026-10-15 | Microsoft Entra ID (M365 identity) source · 2026-10-15 | N/A – identities come from Microsoft Entra ID source · 2026-10-15 | Yes – Content search / Microsoft Purview source · 2026-10-15 | Customer Key/BYOK-encrypted items supported and can be returned by Copilot source · 2026-10-15 | Yes – admins allow/block agents; Graph connectors source · 2026-10-15 | Unverified: M365 SOC 2 Type II reports on Service Trust Portal (NDA) source (could not open) | Yes source · 2026-10-15 | Yes (listed compliance offering) source · 2026-10-15 | At rest and in transit (BitLocker, per-file, TLS, IPsec) source · 2026-10-15 | Yes – Microsoft Products and Services DPA source · 2026-10-15 | Feedback not used to train foundation LLMs source · 2026-10-15 | Opted out of Azure OpenAI abuse monitoring (incl. human review) source · 2026-10-15 | Yes – ISO 42001 source · 2026-10-15 | Available in GCC High (inherits FedRAMP High) source · 2026-10-15 | $30/user/mo annual; requires qualifying M365 plan (Copilot Chat included at no cost) source · 2026-10-15 |
| Gemini in Google Workspace Workspace business editions | Gemini app: 18 months default; Workspace side panel: admin-set source · 2026-10-15 | Yes – Workspace: 90 days to indefinite; app: 3/18/36 months source · 2026-10-15 | No – without customer permission (Training Restriction in Service Specific Terms) source · 2026-10-15 | Unknown | Data regions (US/EU) for Gemini app on Enterprise Plus/Frontline Plus (processing+storage) source · 2026-10-15 | Yes – SAML/OIDC with third-party IdP source · 2026-10-15 | Yes – inbound SCIM source · 2026-10-15 | Yes – Gemini audit logs via Reporting API source · 2026-10-15 | Partial – client-side encryption (customer keys) blocks Gemini from CSE content; no CMK for Gemini data documented source · 2026-10-15 | Yes – admins toggle Workspace sources & Google apps in Gemini source · 2026-10-15 | Yes – SOC 1/2/3 source · 2026-10-15 | Yes source · 2026-10-15 | Yes – supports HIPAA workloads (Notebook & Chrome excluded) source · 2026-10-15 | Same Workspace protections; CSE available source · 2026-10-15 | Yes – Cloud Data Processing Addendum source · 2026-10-15 | Feedback not used to train models; kept up to 18 months source · 2026-10-15 | No, without permission source · 2026-10-15 | Yes – ISO 42001 source · 2026-10-15 | Yes – FedRAMP High source · 2026-10-15 | Gemini included in Workspace subscriptions source · 2026-10-15 |
| Glean Enterprise | Unknown | Yes – chat history Off/30d/90d/6mo/1yr source · 2026-10-15 | Unknown | Unknown | Glean-hosted single-tenant with alternative regions, or customer-hosted in your AWS/GCP source · 2026-10-15 | Yes – verifies identity via your SSO provider source · 2026-10-15 | SCIM 2.0 deprovisioning (Okta) source · 2026-10-15 | Yes – end-to-end audit trail, SIEM streaming source · 2026-10-15 | Supported on customer-hosted AWS (Glean recommends AWS-managed keys) source · 2026-10-15 | Yes – source-system permissions enforced source · 2026-10-15 | Yes – SOC 2 Type II source · 2026-10-15 | Yes source · 2026-10-15 | HIPAA listed source · 2026-10-15 | AES-256 at rest, TLS in transit; key rotation source · 2026-10-15 | Yes – DPA listed on legal page source · 2026-10-15 | Unknown | Unknown | Yes – ISO 42001 source · 2026-10-15 | Unknown | Unknown |
| Perplexity Enterprise Pro Coming soon / unverified | Unverified: Thread files deleted after 7 days; others until deleted source (could not open) | Unverified: Yes, with 50+ seats or ≥1 Max seat source (could not open) | Unverified: No – never used for training source (could not open) | Unknown | Unknown | Unverified: Yes source (could not open) | Unverified: Only with 50+ seats or ≥1 Enterprise Max seat source (could not open) | Unverified: Only with 50+ seats or ≥1 Enterprise Max seat source (could not open) | Unknown | Unverified: Centrally governed file connectors source (could not open) | Unverified: Yes – SOC 2 Type II source (could not open) | Unknown | Unverified: HIPAA listed on pricing page source (could not open) | Unverified: At rest and in transit source (could not open) | Unknown | Unknown | Unverified: Access only in business-critical cases with security approval source (could not open) | Unknown | Unknown | Unverified: $40/seat/mo or $400/yr; Max $325/mo source (could not open) |
| Sana Agents Enterprise | Unknown | Yes – custom retention & auto-deletion (Enterprise) source · 2026-10-15 | No source · 2026-10-15 | Yes – workspace-wide Enforce ZDR (Enterprise), can be contract-locked source · 2026-10-15 | Single-tenant architecture (no region list published) source · 2026-10-15 | SAML SSO source · 2026-10-15 | Yes (Enterprise) source · 2026-10-15 | Event logging, critical logs ≥2 months (vendor-side) source · 2026-10-15 | Unknown | Unknown | SOC 2 Type I & II source · 2026-10-15 | Yes – ISO 27001:2022 source · 2026-10-15 | HITRUST claimed; HIPAA BAA not documented source · 2026-10-15 | AES-256 at rest, TLS 1.2+ source · 2026-10-15 | Yes – published DPA source · 2026-10-15 | Unknown | Unknown | Unknown | Unknown | Enterprise: custom pricing source · 2026-10-15 |
Get the change log by email
Newsletter coming soon: we'll email you when a vendor changes its data terms.