All Providers

OpenAI

5/10 — Medium Risk
Last updated: 15 Apr 2026

CrewCheck's Verdict

Solid choice for production if you enable zero-retention and sign the DPA. No India data residency means cross-border transfer disclosures are mandatory under DPDP.

Data Residency & Transfer

India Data ResidencyNot Available
Data DestinationsUnited States
Legal BasisStandard Contractual Clauses (SCCs)
EU/US Privacy ShieldsYes

Training & Logging

Trains on API DataNo
Training Opt-OutAvailable
Prompt Logging Retention30 days
Logging PurposeAbuse monitoring and safety
Logging Opt-OutAvailable

Compliance & Contracts

DPA AvailableYes
Sub-Processor DisclosureFull
Recommended ForProduction with PII if DPA signed and zero-retention API enabled

Certifications

SOC 2 Type IIISO 27001

Protect your prompts regardless of provider

CrewCheck redacts Indian PII before it reaches OpenAI or any other LLM.