ChatGPT at work: what your employer can see in Enterprise, Business and Edu

Checked November 2026. Part of the guide what your employer can see in your AI chats. Facts below link to OpenAI help pages, and the Sources list at the bottom quotes them. OpenAI’s help center currently names the self-serve team plan ChatGPT Business.

The short answer

On ChatGPT Enterprise and Edu, OpenAI documents a Compliance Platform through which a company can pull conversation messages into its own eDiscovery, DLP or SIEM tools, but only a workspace owner can grant that access. On ChatGPT Business, OpenAI’s pages say admins and owners cannot see all private member chats by default, but another page is broader, so this guide treats Business as unclear. A personal ChatGPT account that your employer has not claimed is managed by you.

Question	Enterprise and Edu	Business
Can admins read chat content?	Yes, with the Conversation messages permission, granted only by a workspace owner.	Help pages conflict.
Metadata and logs	Audit, authentication and app logs in the Compliance Platform.	Usage analytics exist but do not give access to chat transcripts.
Retention	Workspace retention policy: indefinite or time-bound. Compliance logs: 30 days.	Removed-member article says chats are retained indefinitely.
Export	Compliance Platform; workspace owner controls.	Owner can export a member’s data when the option is available; members cannot.
Personal vs work	Personal workspace is yours unless claimed.	Same page applies to managed Business accounts.

What admins can see: content versus metadata

Enterprise and Edu. OpenAI says the Compliance Platform is available to ChatGPT Enterprise and Edu workspaces and provides “access to logs and metadata from your ChatGPT workspace that you can connect with your eDiscovery, DLP, or SIEM tools”. Access works through a workspace-scoped Admin key. OpenAI says only a workspace owner can grant broad compliance access or the Conversation messages permission, while a workspace owner or admin can grant access to individual log categories such as audit, authentication or app logs. An admin role alone does not get the sensitive permissions, according to OpenAI’s page on managed accounts.

Two details worth knowing from the same pages:

• Locked chats are included. OpenAI says messages from locked chats are included in conversation message logs and that an account PIN “does not prevent authorized access through the Compliance Platform”.
• Library files are available through Library-specific Compliance API endpoints while they are active.

Managed accounts in general. OpenAI’s page on administrator-managed accounts says an administrator may be able to access, export, audit, retain, delete and opt in to share data tied to the account. It lists content you submit (prompts, uploaded files and outputs), conversation history and shared workspace content, and usage and activity metadata such as sign-in activity, device or session info and feature usage, “where enabled by your organization’s configuration and applicable law”. It names Enterprise, Edu, Healthcare, Business and Teachers accounts.

Where OpenAI’s pages disagree

For ChatGPT Business, OpenAI’s pages give two different pictures.

• The Business general FAQ says: by default, admins and owners cannot see all private member chats. The Business privacy page adds that usage analytics and spend controls are separate from chat transcript access and that users cannot automatically view other members’ private chat history.
• The managed-account page lists Business among account types where an administrator may be able to access, export, audit, retain and delete conversation content, “where enabled by your organization’s configuration”.
• Admin keys, the route to the Compliance Platform, are described as available for Enterprise, Edu and Healthcare workspaces, not Business.

We read those as “no routine view of private chats, but do not assume admins have no access”. OpenAI’s Enterprise privacy page has a Business section we could not read in full, so we do not rely on it. If you use a Business workspace, ask the owner what they can access.

How long it is kept

• Workspace policy. For Enterprise and Edu, OpenAI says a removed member’s chats follow the workspace’s configured retention policy: if retention is indefinite, they persist indefinitely; if time-bound, content is retained only for the configured duration (the page gives 90 or 180 days as examples).
• Business. The same page says Business workspace chats, files and canvas documents are retained indefinitely when a member is removed.
• Compliance logs. The Compliance Logs Platform retains data for 30 days, so a company that wants longer has to download and store the logs itself.
• When you delete a chat. OpenAI says deleting a saved chat removes it from your account view immediately and schedules permanent deletion within 30 days, unless it was already de-identified or OpenAI must keep it longer for security or legal obligations. For Enterprise, Edu and Healthcare workspaces, saved files follow the workspace retention policy. The page does not say whether an employer’s earlier log pulls are affected by your deletion.
• Temporary chats. OpenAI says it may keep a copy for up to 30 days for safety purposes.
• Files. Some transient files in Enterprise workspaces can expire after 48 hours unless another retention period applies.

Search, hold and export

OpenAI describes the Compliance Platform as built to connect to eDiscovery, DLP and SIEM tools, with two patterns: an immutable, append-only Compliance Logs Platform and a stateful Compliance API for querying state. The old stateful route was removed on June 5, 2026, so integrations now use the new logs source. Microsoft also documents a Purview connector for ChatGPT Enterprise that brings prompts and responses into Purview auditing, eDiscovery and retention, with setup and pay-as-you-go requirements on Microsoft’s side.

For Business, members cannot export their own workspace data from Data controls; workspace owners can export a member’s data when the Export data option is available.

Personal account versus work account

• OpenAI says: unless your personal workspace has been verified or claimed by a ChatGPT Enterprise or Edu workspace, you manage your personal workspace, not an admin.
• Account switching lets you stay signed in to a personal and a work account. OpenAI says they remain separate, and data created in the managed account is governed by your organization’s controls. Switching does not move chats between them.
• OpenAI’s page also says that if your account is self-managed or team-managed, it may later become managed if your organization claims or verifies its domain, and then the administrator may gain the access described above.
• OpenAI’s Terms of Use and Privacy Policy do not apply while you are signed in to a managed account; your organization’s agreement does.

Browser and network monitoring

OpenAI’s pages describe what the workspace logs; they do not describe what an employer’s own device or network tools can capture. Microsoft documents that Purview can detect ChatGPT use in a browser and warn or block pasting sensitive information, and can capture prompts and responses for ChatGPT with specific prerequisites (a collection policy, onboarded devices and browser extension, or a network integration). Whether your employer uses any of this is a question for IT.

What to do

Short checklists, built only from the pages cited on this page. Where a step is plain advice rather than a vendor statement, it has no link.

Other tools

• Microsoft 365 Copilot
• Claude Team and Enterprise
• Gemini for Google Workspace
• All four compared
• Can my employer see my AI chats (short answer)
• Does your company need an AI policy?

Sources

All pages checked November 2026.

• OpenAI Help Center, OpenAI Compliance Platform for Enterprise and Edu customers: “The Compliance Platform is available to ChatGPT Enterprise and Edu workspaces.” “Only a workspace owner can grant broad compliance access or the Conversation messages permission.” “The Compliance Logs Platform retains data for 30 days.” “An account PIN controls access within ChatGPT; it does not prevent authorized access through the Compliance Platform.”
• OpenAI Help Center, Data access for your managed ChatGPT account: “Unless your personal workspace has been verified or claimed by a ChatGPT Enterprise or Edu workspace, you manage your personal workspace, not an admin.”
• OpenAI Help Center, Managing Admin keys in Admin Console: “Admin keys are available for eligible managed ChatGPT workspaces, including ChatGPT Enterprise, ChatGPT Edu, and ChatGPT for Healthcare workspaces.”
• OpenAI Help Center, ChatGPT Business: General FAQ: “By default, admins and owners cannot see all private member chats.”
• OpenAI Help Center, Managing data, sharing, and privacy in ChatGPT Business: “No. Usage analytics and spend controls are separate from chat transcript access.” “Members cannot export their own ChatGPT Business workspace data through Settings > Data controls.”
• OpenAI Help Center, Data retention when a member is removed from a workspace: “Removing or deprovisioning a member, either manually or via SCIM, follows the workspace’s configured data-retention policy.” For Business: “Chats, files, and canvas documents are retained indefinitely.”
• OpenAI Help Center, Chat and file retention in ChatGPT: “OpenAI schedules it for permanent deletion from its systems within 30 days”.
• Microsoft Learn, Purview for ChatGPT Enterprise and Purview for other AI apps: “Windows computers that are onboarded to Microsoft Purview can be configured for Endpoint data loss prevention (DLP) policies that warn or block users from sharing sensitive information with third-party generative AI sites that are accessed via a browser.”