AI TOOLSafety Ratings

Chat assistants

Compare Chat assistants

Verdicts and the data-handling fields already on each tool page, from the vendor's published pages. Unknown means that page did not answer.

Tick two to four tools in this category.

Share this comparison: /categories/chat/compare?tools=chatgpt,chatgpt-business,chatgpt-enterprise,claude

Side-by-side data handling
FieldChatGPTOpenAIChatGPT BusinessOpenAIChatGPT EnterpriseOpenAIClaudeAnthropic
VerdictCarefulCarefulSafeCareful
Trains on your data by defaultYesNoNoUnknown
Training detailOpenAI's data-controls help page says that on personal workspaces with ChatGPT Free, Plus, or Pro, data sharing is enabled by default. Its model-performance page says content from individual services such as ChatGPT may be used to train models unless you opt out.OpenAI's Business help page says OpenAI will not train on your workspace's data and that business data is excluded from training by default. The same no-training default is stated for ChatGPT Team on the March 13, 2026 model-performance page.The Enterprise privacy page says OpenAI does not use business data, including ChatGPT Enterprise, to train models by default unless the customer explicitly opts in, for example through a feedback mechanism.The privacy center says Anthropic will use consumer chats and coding sessions to improve models if you choose to allow it. The privacy policy says Anthropic may use inputs and outputs to train models unless you opt out, and that safety-flagged conversations may still be used. We did not find a single sentence that says the setting ships on or off.
How to opt outIn ChatGPT, open Settings, then Data controls, and turn off Improve the model for everyone. OpenAI also says you can choose Do not train on my content in its privacy portal, and that either option is enough for new conversations. Temporary Chat is not used to train models. Feedback on a response can still be used for training after you opt out.No opt-out is required for training. It is already off. OpenAI says response feedback on Business does not permit training on the conversation unless a separate agreement says otherwise. Admins can turn response feedback on or off.Training is off unless the organization opts in. Admins control response feedback from workspace settings.On claude.ai, open Settings, then Privacy, and turn off Help improve our AI models. Turning it off stops future training use of new and previously stored chats, but data already in a training run or a finished model stays there. Incognito chats are not used to improve Claude. Thumbs feedback can be stored for up to 5 years.
Data retentionUnknown. The pages we read describe training choices and say deleted content is handled under the privacy policy, but they do not state one retention period for ordinary personal chats.Unknown. The Enterprise privacy page describes admin-controlled retention for Enterprise, Healthcare, and Edu, and does not give the same sentence for Business.Workspace admins control how long data is retained. OpenAI says any deleted conversations are removed from its systems within 30 days, unless it is legally required to retain them.Deleting a chat removes it from history immediately and from back-end storage within 30 days. If you allow model improvement, Anthropic may keep de-identified data for up to 5 years. Safety-flagged inputs and outputs can be kept up to 2 years, and classification scores up to 7 years.
BAA / HIPAANoNoEnterprise onlyNo
BAA detailOpenAI's HIPAA guide says consumer ChatGPT plans, including Free, Plus, and Pro, are not eligible services under its business associate agreement.OpenAI's HIPAA guide says ChatGPT Business is not an eligible service. Consumer plans are not eligible either.OpenAI offers a BAA for listed products, including ChatGPT Enterprise with Regulated Workspace and ChatGPT for Healthcare. The HIPAA guide says a BAA must expressly include Enterprise or Edu before PHI is allowed, and it tells customers to disable features that have not been evaluated, including Codex.Anthropic's BAA article is about commercial customers. It does not offer a BAA for Claude Free, Pro, or Max.
CertificationsUnknown for the consumer planSOC 2 Type 2 (the trust portal says the report covered ChatGPT Team)SOC 2 Type 2; ISO/IEC 27001:2022; ISO/IEC 27017:2015; ISO/IEC 27018:2019; ISO/IEC 27701:2019; ISO/IEC 42001:2023Unknown for consumer plans
Enterprise and admin controlsThis is a personal account. Workspace admin controls apply to Business, Enterprise, and other managed plans, not to a lone consumer login.Each user has their own chat and Codex history. Other members do not automatically see those chats. Admins can allow or disable response feedback. Finer retention controls are described for Enterprise, not in the Business page we read.Admins control retention and which internal sources are connected. The HIPAA guide also points at workspace permissions for apps and connectors. You own inputs and outputs where the law allows.These are individual accounts. Organization controls are described for Claude for Work, not for consumer plans. The privacy-center certification article points commercial customers to a separate page.
Last checked10 Nov 202610 Nov 202610 Nov 202610 Nov 2026