OpenAI brings local data residency to 10 regions worldwide

For big enterprises, the hardest part of rolling out AI rarely involves the technology itself. The real blocker is almost always the legal department, where strict privacy rules make sending corporate data across borders an absolute non-starter.

OpenAI just expanded local data residency to business customers around the world. The feature is now available across ten regions: Europe, the United Kingdom, the United States, Canada, Japan, South Korea, Singapore, India, Australia, and the United Arab Emirates, with more regions planned over time.

With over 1 million business customers now directly using OpenAI, the company is moving aggressively to clear regulatory hurdles for its biggest accounts.

Keeping chats and API calls inside the border

The update covers ChatGPT Enterprise, ChatGPT Edu, and eligible API Platform customers.

For ChatGPT Enterprise and Edu workspaces, administrators can now choose where customer content is stored at rest when setting up a new workspace. That covers team conversations, uploaded files, custom GPT configurations, and generated images.

On the API side, enterprise customers approved for advanced data controls can enable residency by picking a region inside a new project dashboard. Requests routed through these projects are processed locally, and OpenAI notes that model requests and responses are not kept at rest on its servers.

Under the hood, stored data uses AES-256 encryption, transmissions run on TLS 1.2+, and organizations can bring their own keys through Enterprise Key Management. As with existing business terms, OpenAI does not train models on customer data by default.

Why it matters

We think this is one of the most critical enterprise moves OpenAI has made this year.

For heavily regulated sectors like banking, healthcare, government, and legal services, data sovereignty is not a preference; it is the law. Until now, many risk-averse teams were forced to wait or turn to cloud partners like Microsoft Azure just to guarantee local data storage. Giving enterprise buyers direct regional storage removes a massive roadblock to signing large contracts.

It also shows OpenAI maturing into an enterprise infrastructure provider rather than just a frontier research lab. By locking in ten key international markets at once, it puts pressure on rivals who still route all enterprise traffic through US-centric data pipelines.

That said, access is not universal. Small businesses and regular API users cannot just flip a switch, and API residency requires approval for advanced controls. But if you manage an organization with strict regional compliance obligations, the pathway to adopting OpenAI natively just got much clearer.