SOC 2 company profile

OpenAI SOC 2 status and provider evidence

Review OpenAI’s public SOC 2 statement, report type, evidence source, and freshness.

SOC 2 statusself attested
Report typeType II
Providers found0
Last checked2026-10-18
Providers

OpenAI’s SOC 2 stack

No provider is named on the current source.

We will update this page if the company publishes more detail.

Compliance coverage

Frameworks named by OpenAI

ISO 27001

ted by an independent third-party auditor to confirm that our controls align with industry standards for security, confidentiality, privacy and availability. Our products are also ISO 27001, 27017, 27018, and 27701 certified. Request access to our SOC 2 Report below to learn more about our security controls and compliance activities. OpenAI invites security researchers, ethical hackers, and technology enthusiasts to report security issues via ou

Checked 2026-10-18
View source ↗
PCI DSS

nd services in scope at the OpenAI Product Compliance Status page. Customers with active trust.openai.com accounts can access the latest report under "Compliance" > "SOC 2 Type 2."PCI DSSComplianceOpenAI now maintains PCI-DSS compliance for the components of ChatGPT that support delegated payment processing, ensuring secure handling of payment information for supported merchant transactions. Customers may view relevant documentation at tru

Checked 2026-10-18
View source ↗
SOC 2

mers, and this portal is designed to provide you with the information and assurance you need to feel confident in our ability to protect your data. Our products are covered in our SOC 2 Type 2 report and have been evaluated by an independent third-party auditor to confirm that our controls align with industry standards for security, confidentiality, privacy and availability. Our products are also ISO 27001, 27017, 27018, and 27701 certified.

Checked 2026-10-18
View source ↗

Primary compliance evidence

OpenAI public statement

mers, and this portal is designed to provide you with the information and assurance you need to feel confident in our ability to protect your data. Our products are covered in our SOC 2 Type 2 report and have been evaluated by an independent third-party auditor to confirm that our controls align with industry standards for security, confidentiality, privacy and availability. Our products are also ISO 27001, 27017, 27018, and 27701 certified. Reques

Classification: self attested · checked 2026-10-18
Open source ↗
SOC 1✦SOC 2✦SOC 3✦Type I✦Type II✦Audit readiness✦Trust centers✦Vendor risk✦Security evidence✦Procurement✦