We’re launching Lyria 3.5 in Google Flow Music, with advances across musicality, lyrics, vocals, and creative control
deepmind.google·6d ago
AI Engineering
OpenAI Blog·Nov 25·5 min read
Expanding data residency access to business customers worldwide
TL;DR
Many businesses using OpenAI's services faced regulatory and compliance challenges because customer data was stored in centralized locations rather than in customers' home regions. OpenAI expanded data residency options—the ability to store data at rest in specific geographic regions—across ChatGPT Enterprise, ChatGPT Edu, and the API Platform.
✦ Why It Matters
Engineers can now build compliant applications for regulated markets using OpenAI services without custom data residency infrastructure.
Key Takeaways
- Verify your customer base's data residency requirements before selecting OpenAI product tier.
- Confirm eligibility for in-region storage; not all customers or regions may qualify initially.
- Update compliance documentation to reflect OpenAI's regional data storage capabilities.
- Test data handling workflows in target regions to validate latency and performance impact.
Full Summary
Organizations using OpenAI's commercial products previously lacked control over where their data physically resided, creating friction with data sovereignty requirements—regulations mandating data storage within specific countries or regions. OpenAI extended data residency capabilities across three product lines: ChatGPT Enterprise (business-grade chat interface), ChatGPT Edu (education-focused variant), and the API Platform (programmatic access to models).
Data residency means customer inputs and outputs remain stored within chosen geographic regions rather than centralized servers. This expansion addresses compliance needs for regulated industries and regions with strict data localization laws.
The change enables eligible customers to meet requirements from frameworks like GDPR, HIPAA, and regional privacy standards without architectural workarounds. Engineers can now design applications serving regulated markets with native compliance support rather than building custom data handling layers.