We re-check published residency, subprocessor and certification pages and log every change. One email when something we track changes — nothing else.
Email only. Unsubscribe in one click from any email. We never share the list with vendors.
“your customer content (as defined in your services agreement) for that project will be stored at rest in the selected region”developers.openai.com
“If you select a region that supports regional processing, as specifically identified below, the services will perform inference for your Customer Content in the selected region as well.”developers.openai.com
“use GPT-5.6 Sol, our flagship model for complex reasoning and coding”developers.openai.com
“data sent to the OpenAI API is not used to train or improve OpenAI models (unless you explicitly opt in to share data with us)”developers.openai.com
“Our products are also ISO 27001, 27017, 27018, and 27701 certified.”trust.openai.com
“your customer content (as defined in your services agreement) for that project will be stored at rest in the selected region”developers.openai.com
Answered only from what the vendor publishes on its own public pages, as at the check date shown. Not an assessment, audit, certification or endorsement.
“If you select a region that supports regional processing, as specifically identified below, the services will perform inference for your Customer Content in the selected region as well.”developers.openai.com
Answered only from what the vendor publishes on its own public pages, as at the check date shown. Not an assessment, audit, certification or endorsement.
“use GPT-5.6 Sol, our flagship model for complex reasoning and coding”developers.openai.com
Answered only from what the vendor publishes on its own public pages, as at the check date shown. Not an assessment, audit, certification or endorsement.
“data sent to the OpenAI API is not used to train or improve OpenAI models (unless you explicitly opt in to share data with us)”developers.openai.com
“Our products are also ISO 27001, 27017, 27018, and 27701 certified.”trust.openai.com
Answered only from what the vendor publishes on its own public pages, as at the check date shown. Not an assessment, audit, certification or endorsement.
The public tracker stays free — it always will. For organisations that need more, we’re building a professional tier: monitoring of your vendor list, change alerts with the evidence attached, audit-ready packs formatted for privacy impact assessments and automated-decision disclosures, and a quarterly analyst briefing.
From December 2026, the Privacy Act requires organisations to disclose automated decision-making in their privacy policies (Privacy and Other Legislation Amendment Act 2024, ADM transparency provisions) — which means knowing, on an ongoing basis, exactly what your AI vendors run and where. That’s what this register is for.
Founding membership is limited to the first 20 organisations and locks founding pricing permanently. Register interest now — founding members get first access and shape what we build.
Registering interest is not a purchase or commitment. The free public tracker is unchanged.
Are we missing something, or has this changed? Vendors and their representatives can submit a correction and we will update the entry, note the change and credit the source. Corrections are typically actioned within 2 business days.
Submit a correction