ChatGPT Enterprise: price, security, EU storage

The question usually arrives in an email from the data protection officer, a few months after ChatGPT Business went live, and it asks where all those chats are actually stored. Someone searches and lands on ChatGPT Enterprise, where a "Contact sales" button sits in the spot the price should fill.¹

We sell ChatGPT Business through satori-chatgpt, our managed service on one invoice in euros, and this guide is the walk-through we give a customer who asks whether to move up.

What is ChatGPT Enterprise, and how does it differ from Business?

ChatGPT Enterprise is OpenAI's plan for organisations that want to govern AI the way they already govern email and files, and it runs the same models as ChatGPT Business.¹ Both plans get single sign-on, meaning staff log in with their company account, along with domain verification and no training on your business data by default.¹ The difference sits in the controls that OpenAI's pricing page marks for Enterprise alone, and five of them matter most.

Daily work shows one difference, since the instant model's context window, meaning the text it can hold at once, is 128K on Enterprise against 54K on Business, about 250 pages against 40.¹

ChatGPT Enterprise in plain words: the five additions that matter

• SCIM: the System for Cross-domain Identity Management opens and closes accounts from your staff directory, so leavers lose access the same day.¹²
• EU storage: chats, files, memory and custom GPTs rest in Europe, within limits set out below.³
• Compliance API: admins export an audit log of conversations and GPTs for auditors.⁴
• Enterprise Key Management (EKM): you hold the key to stored data, which guards the disk but not what the model reads.¹
• Custom retention: the pricing page lists it under Enterprise, and deleted chats leave OpenAI's systems within 30 days unless the law says otherwise.¹⁴

ChatGPT Enterprise certificates on 4 November 2026

OpenAI's product compliance page puts ChatGPT Business in scope for SOC 2 Type 2 only, meaning an auditor's report on whether security controls worked across a whole period.⁵ ChatGPT Enterprise adds ISO/IEC 27001:2022 and 27701:2019, meaning certified systems for running security and privacy, and the trust portal adds the ISO 27017 and 27018 control sets.⁵⁶ A tender that asks for ISO 27001 by name therefore rules out Business.

What does ChatGPT Enterprise cost in Europe?

Nobody knows the exact figure until the quote arrives, because OpenAI publishes no price for Enterprise and its pricing page says custom pricing instead.¹ The same page mentions invoicing, volume discounts and both credit-based and token-based pricing, meaning usage beyond the seats is drawn from workspace credits or billed in US dollars.¹² OpenAI's pages name no seat minimum for Enterprise, while Business is pitched at teams of 2 to 200 employees.¹

The floor is known, since a ChatGPT Business Standard seat costs $20 per user per month billed annually or $25 billed monthly, about €18 or €22.¹ Enterprise is sold on annual plans through OpenAI's sales team, which offers invoicing, while Business takes a card only.¹⁷

Take 150 users on Business Standard with annual billing as a worked example of our own: 150 × $20 × 12 comes to $36,000 a year, about €31,571. An Enterprise quote for the same people is worth reading against that number, because the gap per person is what EU storage and SCIM cost you.

Three things usually move the Enterprise quote:

1. Seats. Volume discounts exist without a published threshold, so ask at which seat count the price per user changes, and nonprofits can get up to 75% off.¹
2. Usage beyond the seats. The rate for credits or token-based billing is a point to settle before anyone signs.²
3. Contract terms. Custom legal terms and service level agreements go to eligible customers, so brief your legal team early.¹

How does EU storage work in ChatGPT Enterprise?

New Enterprise and Edu workspaces can store customer content at rest in Europe, meaning the European Economic Area plus Switzerland, at no extra cost.³ Eligible customers can add inference residency, meaning the chips that run the model also sit in Europe.³ It needs EU storage first and covers only conversations started after the change.³

ChatGPT Business works differently, because the workspace owner picks a storage region at checkout and that choice covers stored content only, not where requests are processed.⁸ When the region is outside the US, a copy of every prompt and response still stays in the US for a limited time for abuse monitoring.⁸ OpenAI says the option is still rolling out, so check the setting before you plan around it.

Before: a 40-page tender pack in a Business workspace with Europe chosen rests in Europe, while a copy sits in the US and nothing fixes where the model runs. After: the same 40-page tender pack in an Enterprise workspace with EU storage and inference residency rests in Europe with its backups, and the model that reads it runs in Europe too.³⁸ Someone still checks the residency fields under Workspace settings > General after setup, because they only display the region.³

Four kinds of data can still sit or run outside the region:³

• Workspace name, metadata, billing details and logins
• Data sent to connected apps or web search, under their own terms
• Processing outside the model, such as reading uploaded PDF files
• Third-party GPTs, beta features and Codex on the web

OpenAI ties residency to the moment when a new workspace is provisioned, so put the region in the Enterprise quote from day one rather than planning a switch later.³

The Data Processing Addendum, meaning the contract that makes OpenAI your processor under GDPR Article 28, covers both Business and Enterprise.⁴⁹ Customers in the European Economic Area or Switzerland sign it with OpenAI Ireland Limited, which transfers data under Standard Contractual Clauses or an adequacy decision.⁹ The Data Privacy Framework list, which names US companies certified for EU transfers, showed no OpenAI entry on 4 November 2026.¹⁰ Our guide to whether ChatGPT is GDPR compliant walks through the transfer assessment your data protection officer signs off.

ChatGPT Enterprise vs Business: when is Business enough?

The models are the same and neither plan trains on your business data by default, which means Enterprise adds control and paperwork.¹⁴

Business is usually enough when all three of these hold:

• Your data protection assessment accepts processing outside Europe under the clauses
• An admin can still close accounts by hand when someone leaves
• No auditor or customer contract asks for logs from the AI tool

Enterprise earns its price when any of these describes you:

• You handle sensitive personal data and want it stored and processed in Europe
• You already run hundreds of accounts through a central staff directory
• Your sector, such as finance or health, must show who did what in every system

One task stays human on both plans, deciding what data goes into the tool at all, and that rule belongs in an AI policy staff have actually read.

When does Claude Enterprise fit better?

Claude Enterprise costs $20 per seat per month billed annually, about €18, with a 20-seat minimum and all usage billed on top at API rates.¹¹ We sell Claude and ChatGPT on the same fees, so we gain nothing by tilting this section.

Anthropic stores commercial data in the US and runs no EU-only processing on its own platform, and Claude Team has no location setting at all.¹²¹³ EU processing for Claude runs through EU cross-region inference on Amazon Bedrock or the EU multi-region endpoint on Google Cloud, which are API routes for developers rather than a chat window for staff.¹⁴¹⁵ A team that wants a chat app with inference in Europe today can get it from ChatGPT Enterprise, and that point goes to OpenAI.

Claude Enterprise is the closer fit for a team of at least 20 whose usage swings from month to month, since the seat stays at $20 and the bill follows the work. Anthropic's audits and admin controls are in our Claude Enterprise security guide, and the quality question in our Claude and ChatGPT comparison.

What should you do now?

ChatGPT Enterprise is the same ChatGPT with locks, logs and an address in Europe, and four checks settle whether your business needs the locks:

• Step 1: Ask your data protection officer whether your assessment accepts content processed outside Europe.
• Step 2: Count the ChatGPT accounts created and closed in the last six months, since more than five a month points to SCIM.
• Step 3: Check whether a customer contract or an auditor requires logs from your AI tools.
• Step 4: Read the European Data Protection Board's Recommendations 01/2020 to see what a transfer assessment has to contain.¹⁶

If the first three checks all come back no, Business is the right plan, and the seat maths sits in what ChatGPT Business costs per seat. When one of them comes back yes, ask OpenAI for an Enterprise quote.

Teams that stay on Business can buy through our managed ChatGPT Business service, where we run the seats and the workspace and send one invoice in euros every month. The price is €490 setup, then €14 per user per month plus the licence at €22 Standard or €110 Premium, excl. VAT. EU business customers with a valid VAT number are invoiced without Swedish VAT under the reverse charge. Customers in Sweden pay Swedish VAT. Our guide to buying ChatGPT Business licences compares that route with buying direct, and you can book a free 30-minute call for a second reader on a quote.

ChatGPT Enterprise in short

ChatGPT Enterprise adds SCIM, key control, compliance logs, custom retention and EU storage with in-region inference for eligible customers, at a price that only OpenAI's sales team can give you. Business at $20 per seat, about €18, already covers single sign-on and a storage region at checkout.

Open openai.com/business/pricing, scroll to Security & Administration and copy the 12 rows marked No under Business into a list, then mark each one yes or no for your company. After fifteen minutes you hold twelve controls with your own answer beside each, and every yes is a line for the Enterprise quote.

---

Sources

Footnotes

1. OpenAI (2026). Business Pricing: compare features across plans, checked 4 November 2026. https://openai.com/business/pricing/ ↩ ↩² ↩³ ↩⁴ ↩⁵ ↩⁶ ↩⁷ ↩⁸ ↩⁹ ↩¹⁰ ↩¹¹ ↩¹² ↩¹³ ↩¹⁴ ↩¹⁵

2. OpenAI Help Center (2026). What is ChatGPT Enterprise? https://help.openai.com/en/articles/8265053-what-is-chatgpt-enterprise ↩ ↩² ↩³

3. OpenAI Help Center (2026). Data residency and inference residency for ChatGPT. https://help.openai.com/en/articles/9903489-data-residency-and-inference-residency-for-chatgpt ↩ ↩² ↩³ ↩⁴ ↩⁵ ↩⁶ ↩⁷ ↩⁸

4. OpenAI (2026). Enterprise privacy at OpenAI, updated 8 January 2026. https://openai.com/enterprise-privacy/ ↩ ↩² ↩³ ↩⁴

5. OpenAI (2026). Product compliance status, version 1.1, updated 4 August 2026. https://openai.com/product-compliance-status/ ↩ ↩²

6. OpenAI (2026). OpenAI Trust Portal, checked 4 November 2026. https://trust.openai.com/ ↩

7. OpenAI Help Center (2026). Managing billing and seats in ChatGPT Business. https://help.openai.com/en/articles/8792536-managing-billing-and-seats-in-chatgpt-business ↩

8. OpenAI Help Center (2026). Where your ChatGPT Business content is stored. https://help.openai.com/en/articles/20001418-where-your-chatgpt-business-content-is-stored ↩ ↩² ↩³

9. OpenAI (2025). OpenAI Data Processing Addendum, updated 1 December 2025, effective 1 January 2026. https://openai.com/policies/data-processing-addendum/ ↩ ↩²

10. International Trade Administration, US Department of Commerce (2026). Data Privacy Framework List, searched 4 November 2026. https://www.dataprivacyframework.gov/list ↩

11. Anthropic (2026). Plans and Pricing, checked 4 November 2026. https://claude.com/pricing ↩

12. Anthropic (2026). Where are your servers located? Do you host your models on EU servers? Anthropic Privacy Center. https://privacy.claude.com/en/articles/7996890-where-are-your-servers-located-do-you-host-your-models-on-eu-servers ↩

13. Anthropic (2026). Enable US-only inference for your organization. Claude Help Center. https://support.claude.com/en/articles/15422948-enable-us-only-inference-for-your-organization ↩

14. Amazon Web Services (2026). Regional availability of models in Amazon Bedrock. https://docs.aws.amazon.com/bedrock/latest/userguide/models-region-compatibility.html ↩

15. Google Cloud (2026). Data residency. Gemini Enterprise Agent Platform documentation. https://docs.cloud.google.com/gemini-enterprise-agent-platform/resources/data-residency ↩

16. European Data Protection Board (2021). Recommendations 01/2020 on measures that supplement transfer tools to ensure compliance with the EU level of protection of personal data, version 2.0, 18 June 2021. https://www.edpb.europa.eu/documents/recommendation/recommendations-012020-on-measures-that-supplement-transfer-tools-to_en ↩