Admin guide
Nightschool AI: ChatGPT audit logs and the Compliance Platform, for admins
Admin activity and conversation records live in different places. Know both before legal asks.
Admin activity is reviewed in audit logs: tenant-wide in Admin Console under Global settings and Security, and per workspace for eligible owners or admins. Conversation and app records go through OpenAI's Compliance Platform, which OpenAI says is only for eligible Enterprise and Edu workspaces.
Published
Key Takeaways
- Tenant audit logs are under Global settings, then Audit logs under Security.
- Workspace audit logs are separate and only for eligible workspace owners or admins.
- The Compliance Platform is only for eligible Enterprise and Edu workspaces.
- OpenAI says locked chats stay in conversation message logs on the Compliance Platform.
The full guide
Tap any section to open it.
About this guide
This page is for the admin asked by security or legal where ChatGPT records are kept. It separates admin activity, in audit logs, from conversation and app records, in OpenAI's Compliance Platform. It does not teach endpoint names, because they change; read OpenAI's current guide for those.
Audit logsWhere admin activity is recorded
OpenAI's Admin Console page says a global admin can open Global settings, then Audit logs under Security, to review tenant-wide administrative activity.
It also says workspace audit logs are separate and available only to eligible workspace owners or admins. If Audit logs is missing, check the selected tenant or workspace, your role and feature availability.
RecordsThe Compliance Platform today
OpenAI's Enterprise and Edu release notes for 11 December 2025 say the ChatGPT Compliance API is now part of the OpenAI Compliance Logs Platform, which exports data as immutable, time-windowed JSONL log files. The same note lists audit, authentication and Codex logs.
OpenAI's guide, OpenAI Compliance Platform for Enterprise and Edu Customers (help article 9261474), carries a deprecation notice: on 5 March 2026 a new conversation logs system was released, deprecating the old stateful route. That route was removed on 5 June 2026; OpenAI tells integrators to follow its API Documentation and move to the new source.
If you inherited scripts written for that old stateful route, they stopped working on 5 June 2026. This page does not teach endpoint names, because they change, so follow that guide's own API Documentation to move to the new conversation logs source.
The 20 October 2026 release note says locked chats remain included in conversation message logs available through the OpenAI Compliance Platform.
CautionsCheck coverage and network rules
OpenAI's apps admin page says Compliance API and app-log availability depend on the app, product and workspace configuration, and to confirm the supported export coverage for each app before relying on logs for compliance.
OpenAI's IP allowlisting note says that for Compliance API traffic, IP allowlisting is always enforced and cannot be turned off. Plan the addresses your log collector uses before go-live.
On Business, OpenAI says administrators do not automatically gain access to members' ordinary private conversations.
ChecklistLogging plan you can copy
Answer each line before legal needs it.
1. Tenant audit logs
Global settings, then Audit logs under Security. Owner: global admin.
2. Workspace audit logs
Separate, for eligible workspace owners or admins.
3. Your plan
Compliance Platform only on eligible Enterprise and Edu.
4. App coverage
Confirm export coverage for each app you enabled.
5. Collector IPs
IP allowlisting is always enforced for Compliance API traffic.
6. Old scripts
Stateful route deprecated 5 Mar 2026, removed 5 Jun 2026; use the new conversation logs source (help article 9261474).
SourcesWhere each fact comes from
OpenAI help pages: "Managing your tenant in Admin Console": help.openai.com/en/articles/12289294-managing-your-tenant-in-admin-console; "ChatGPT Enterprise and Edu release notes": help.openai.com/en/articles/10128477-chatgpt-enterprise-and-edu-release-notes; "Admin controls, security, and compliance for plugins and apps": help.openai.com/en/articles/11509118-admin-controls-security-and-compliance-for-plugins-and-apps; "OpenAI Compliance Platform for Enterprise and Edu Customers": help.openai.com/en/articles/9261474-openai-compliance-platform-for-enterprise-and-edu-customers, for the stateful-route deprecation notice (5 Mar 2026, removed 5 Jun 2026).
Each fact on this page was read on that OpenAI page on 2026-11-08. Help pages change, so open the source and your own agreement before you rely on a detail here.
Train the admins, then the people they support
This page covers one admin task. The Nightschool AI admin and governance course walks the whole setup of OpenAI's ChatGPT Business and Enterprise in order: plan differences, data use, domain verification and SSO, provisioning and roles, apps, audit logs and the Compliance Platform, and retention, residency and HIPAA, with every step checked against OpenAI's own documentation.
Frequently Asked Questions
Where are ChatGPT audit logs?
OpenAI says a global admin reviews tenant-wide administrative activity in Admin Console under Global settings, then Audit logs under Security. Workspace audit logs are separate.
Does ChatGPT Business have the Compliance Platform?
No. OpenAI says the Compliance Platform is available only to eligible Enterprise and Edu workspaces, subject to configuration and the administrator's permissions.
Is the Compliance API still a separate product?
No. OpenAI's release notes say the ChatGPT Compliance API is now part of the OpenAI Compliance Logs Platform, and OpenAI's guide for that platform (help article 9261474) says a new conversation logs system replaced the old stateful route on 5 March 2026; that stateful route was removed on 5 June 2026. Move any integration still calling it to the new source.
Can a member hide a chat from compliance exports by locking it?
No. OpenAI says locked chats remain included in conversation message logs available through the Compliance Platform.
Does IP allowlisting affect log collection?
Yes. OpenAI says IP allowlisting is always enforced for Compliance API traffic and cannot be turned off.
Are all apps covered by the logs?
Not necessarily. OpenAI says coverage depends on the app, product and workspace configuration, so confirm it for each app.
Keep going
Related Guides and Courses
Set it up once, write it down, then teach it
Write down where each record lives and who can open it, before the first request arrives.
Nightschool AI is independent and not affiliated with, sponsored by or endorsed by OpenAI. ChatGPT, ChatGPT Business and ChatGPT Enterprise are OpenAI's products, named here only to describe them. Facts checked against OpenAI's public help pages on 2026-11-08; confirm in your own admin console before you change a setting.