Question 1

Where does OpenAI store patient data?

Accepted Answer

Configurable via data residency controls (eligibility-gated): customer content stored at rest in selected region; listed regions include United States, Europe (EEA + Switzerland), Australia, Canada; default region not stated Published statement: "your customer content (as defined in your services agreement) for that project will be stored at rest in the selected region" (source: https://developers.openai.com/api/docs/guides/your-data, checked 2026-08-13). Answered from what the vendor publishes on its own public pages, or from an official register where noted, as at the check date shown. Not an assessment, audit, certification or endorsement.

Question 2

Where does OpenAI process data?

Accepted Answer

Default processing location not stated; with data residency controls, inference runs in the selected region where regional processing is supported (per docs table: United States yes, Europe (EEA + Switzerland) yes; Australia storage only, processing no) Published statement: "If you select a region that supports regional processing, as specifically identified below, the services will perform inference for your Customer Content in the selected region as well." (source: https://developers.openai.com/api/docs/guides/your-data, checked 2026-08-13). Answered from what the vendor publishes on its own public pages, or from an official register where noted, as at the check date shown. Not an assessment, audit, certification or endorsement.

Question 3

Which AI models does OpenAI use?

Accepted Answer

OpenAI's own GPT model family (current flagship GPT-5.6 line: Sol, Terra, Luna) Published statement: "use GPT-5.6 Sol, our flagship model for complex reasoning and coding" (source: https://developers.openai.com/api/docs/models, checked 2026-08-13). OpenAI states data sent to its API is not used to train or improve its models unless the customer explicitly opts in Published statement: "data sent to the OpenAI API is not used to train or improve OpenAI models (unless you explicitly opt in to share data with us)" (source: https://developers.openai.com/api/docs/guides/your-data, checked 2026-08-13). Answered from what the vendor publishes on its own public pages, or from an official register where noted, as at the check date shown. Not an assessment, audit, certification or endorsement.

Question 4

What certifications does OpenAI publish?

Accepted Answer

SOC 2 Type 2 report; ISO 27001, 27017, 27018 and 27701 certified (per OpenAI Trust Portal) Published statement: "Our products are also ISO 27001, 27017, 27018, and 27701 certified." (source: https://trust.openai.com/, checked 2026-09-25). Answered from what the vendor publishes on its own public pages, or from an official register where noted, as at the check date shown. Not an assessment, audit, certification or endorsement.

Question 5

Which subprocessors does OpenAI name?

Accepted Answer

Not found on public pages. We could not find this on the vendor's public pages as at the check date. This is not a statement that the vendor lacks the capability or has not disclosed it elsewhere. Answered from what the vendor publishes on its own public pages, or from an official register where noted, as at the check date shown. Not an assessment, audit, certification or endorsement.

Question 6

What does OpenAI publish about TGA status?

Accepted Answer

Not found on public pages. We could not find this on the vendor's public pages as at the check date. This is not a statement that the vendor lacks the capability or has not disclosed it elsewhere. Answered from what the vendor publishes on its own public pages, or from an official register where noted, as at the check date shown. Not an assessment, audit, certification or endorsement.

Question 7

Which practice management systems does OpenAI list as integrations?

Accepted Answer

Not found on public pages. We could not find this on the vendor's public pages as at the check date. This is not a statement that the vendor lacks the capability or has not disclosed it elsewhere. Answered from what the vendor publishes on its own public pages, or from an official register where noted, as at the check date shown. Not an assessment, audit, certification or endorsement.

Question 8

Which Australian or New Zealand entity does OpenAI contract through?

Accepted Answer

Not found on public pages. We could not find this on the vendor's public pages as at the check date. This is not a statement that the vendor lacks the capability or has not disclosed it elsewhere. Answered from what the vendor publishes on its own public pages, or from an official register where noted, as at the check date shown. Not an assessment, audit, certification or endorsement.

Question 9

What support hours does OpenAI publish?

Accepted Answer

Not found on public pages. We could not find this on the vendor's public pages as at the check date. This is not a statement that the vendor lacks the capability or has not disclosed it elsewhere. Answered from what the vendor publishes on its own public pages, or from an official register where noted, as at the check date shown. Not an assessment, audit, certification or endorsement.

OpenAI

Data storage region

Data processing region

Model provenance

Subprocessors

Certifications

TGA status

PMS integrations

ANZ entity

Support hours

What OpenAI publishes — answered from the record

Something wrong or out of date?