// Trust & Security Report
ChatGPT Edu
by OpenAI Global, LLC
ChatGPT Edu - OpenAI's dedicated ChatGPT variant for colleges and universities, part of the broader ChatGPT business product suite (Enterprise, Team, Edu, for Healthcare, for Teachers).
Certifications held
13
Maturity
Enterprise
Trains on your data
No
Trust center
Yes
// Certification ledger
Each held certification is backed by a verbatim quote from the vendor's own trust or security page. “Not confirmed” means we could not verify it publicly, not that the vendor lacks it.
Verify on trust.openai.com“Request access to our SOC 2 Report below to learn more about our security controls and compliance activities.”
Verify on trust.openai.com“OpenAI's ISO/IEC 27001 Certificate is now available at trust.”
Verify on trust.openai.com“Our products are also ISO 27001, 27017, 27018, and 27701 certified.”
Verify on trust.openai.com“Our products are also ISO 27001, 27017, 27018, and 27701 certified.”
Verify on openai.com“OpenAI maintains ISO/IEC 27001:2022 and ISO/IEC 27701:2019 certifications for the information security and privacy management systems supporting the OpenAI API, ChatGPT Enterprise, and ChatGPT Edu services.”
Verify on openai.com“ystems supporting the OpenAI API, ChatGPT Enterprise, and ChatGPT Edu services. ISO 42001 OpenAI maintains an ISO/IEC 42001:2023 AI Management System covering OpenAI’s consumer and business AI products and mod”
Verify on openai.com“OpenAI supports our customers’ compliance with privacy laws, including the GDPR, CCPA, HIPAA, and FERPA, and offers a Data Processing Addendum and Business Associate Agreement for customers.”
Verify on openai.com“OpenAI supports our customers’ compliance with privacy laws, including the GDPR, CCPA, HIPAA, and FERPA, and offers a Data Processing Addendum and Business Associate Agreement for customers.”
Verify on trust.openai.com“.com accounts can access the latest report under "Compliance" > "SOC 2 Type 2." PCI DSS Compliance March 9, 2026 OpenAI now maintains PCI-DSS compliance for the components of ChatGPT that support delegated p”
Verify on openai.com“liance for the components of ChatGPT that support delegated payment processing. CSA Star Level 1 ChatGPT business product services and the API Platform have been evaluated by the Cloud Security Alliance Secur”
Verify on trust.openai.com“Party Dependence Yes Hosting Major Cloud Provider Reports Data Flow Diagram SOC 3 Report Network Diagram View more Access Control Access Log Management Bring Your Own Device (BYOD) Data Access View”
// Privacy & AI training
Trains on customer data
No
Data processing agreement
Offered
Data region
Multiple options: US, Europe, UK, Japan, Canada, South Korea, Singapore, Australia, India, UAE
OpenAI does not use data from ChatGPT Edu, including inputs or outputs, for training or improving models by default. Your organization's data always remains confidential, secure, and entirely owned by you. Opt-in is available if organizations wish to help improve models, but requires explicit consent.
// Security controls
// Products & data scope
Data it handles: Conversations and generated content; not used for model training by default
Designed for colleges and universities. Includes latest flagship model, advanced tools (data analysis, web browsing, file uploads), ability to build custom GPTs, higher message limits, SSO, SCIM, group permissions, multilingual support (50+ languages)
// At a glance
Pricing model
Per-seat subscription model for institutions; volume-based pricing
Self-hostable
No
// How we verified this
Every certification marked HELD is confirmed against a verbatim quote on OpenAI Global, LLC's own trust, security, or privacy pages. We reject certifications claimed only on third-party aggregators, on a cloud host's behalf, or by a similarly named company.
Last verified 2026-07-06. Compliance changes over time. Always confirm directly with the vendor before relying on any certification for a purchasing or compliance decision.
trust.openai.com// Trust reports for comparable tools
Other tools in the same category, each with its own sourced report.