OpenAI logo

OpenAI

openai.com ResearchSan Francisco, United StatesLast updated: 10 Sep 2026

Risk Score

64/ 100
B

Bottom Line

US AI lab and model provider. Mature posture and disciplined AI data handling; a sustained incident run holds the breach score down.

Security questionnaire

Public evidence mapped to 52 security questions for OpenAI. Questions without a supported answer are marked Undisclosed.

Questions answered45/52

AI Posture

AI-Native
AI posture score90/100

LLM providers

OpenAIProprietary

Data handling & training

Training policyTrains on data · Opt-out available
Training scopeAnonymized before training
Third-party sharingNo third-party sharing
AI data retentionZero retention

Customer controls

Disable AICannot disable AI
Granular controlsPartial opt-out available
Training opt-outOpt-out available

AI security & compliance

Compliance frameworksEU AI Act, ISO 42001

See how Shift helps you understand your organization's AI exposure.

Understand your exposure to OpenAI.

Shift connects vendor security information to your organization's access and integrations to help you understand what is exposed.

Score breakdown

How the five categories combine into the overall risk grade.

Risk Score
64/ 100

Category contributions, sorted by weight.

External Exposure40%
What attackers can see
47/ 100
C
Company Posture30%
Structural readiness
91/ 100
A
Breach History15%
Time-decayed recency
20/ 100
D
Certificates10%
Verifiable attestations
100/ 100
A
Supply Chain5%
Direct-dependency health
95/ 100
A

Understand your vendor exposure

Connect vendor security information to your organization's access and integrations with Shift.

Shift for enterprise

Breaches

Disclosed incidents and active campaigns targeting OpenAI.

Breach History score20/ 100

Showing 5 of 6 disclosed incidents, most recent first.

Sep 9, 2026

ChatGPT Targeted in Cross-Account Data Exposure Vulnerability

www.csoonline.com
Aug 4, 2026

OpenAI Inc. Targeted in Expansive Cyberattack

www.13newsnow.com
Jul 22, 2026

openai inc. Targeted in Data Breach

www.infomagazine.ma
Jul 19, 2026

openai Targeted in Data Breach

cybernews.com
Jun 1, 2026

ChatGPT Targeted in Phishing Campaign via Shared Content Abuse

www.infosecurity-magazine.com