{"id":"FR2533155773","name":"ChatGPT Enterprise and API Platform","provider":"OpenAI","providerSlug":"openai","status":"FedRAMP Authorized","impact":"20x Moderate","authType":"Program","authDate":"2026-01-09","serviceModel":["SaaS"],"deployment":"Public Cloud","businessFunctions":["Analytics","Communication","Data Management","Design & Multimedia","Grant Management","Legal & Policy","Operations Management","Research"],"assessor":"Schellman Compliance, LLC","assessorId":"136571","smallBusiness":false,"website":"https://openai.com","description":"OpenAI's ChatGPT services allow users to interact with OpenAI's models through a conversational interface.  Users can request the models to analyze or generate text.  OpenAI's API Platform enables developers to integrate the capabilities of our models into their own applications.  The API can be utilized for a wide range of tasks involving the understanding or generation of natural language, code, and other content.  Business services include robust security controls such as SAML SSO, enhanced administrative controls, and priority support.  ","logo":"https://www.fedramp.gov/assets/img/logos/CSP_logos/OpenAI%20Logo.png","inMarketplace":true,"agencies":["22-036","22-092","22-069"],"reuseCount":2,"leverages":[],"leveragedBy":[],"timeline":[{"date":"2025-09-02","to":"Initial Program Review","certType":"20x Pilot"},{"date":"2026-01-09","to":"FedRAMP Certified","certType":"20x Pilot"}],"cr26":{"type":"Rev5","ocrOverdue":false,"valid":true,"findings":[{"level":"warning","message":"no UEI number; include it if you have one","rule":"CDS-CSO-PUB"},{"level":"warning","message":"no business category listed","rule":"CDS-CSO-PUB"},{"level":"warning","message":"no trust center link; CR26 requires one with access instructions","rule":"CDS-CSO-UTC"},{"level":"warning","message":"no link to secure configuration guidance","rule":"SCG-CSO-RSC"},{"level":"warning","message":"no next Ongoing Certification Report date","rule":"CDS-CSO-PUB"},{"level":"warning","message":"no service list; CR26 requires the services in scope","rule":"CDS-CSO-SVC"},{"level":"warning","message":"no documentation overview (repositories) listed","rule":"CDS-CSO-PUB"}],"assessor":"Schellman Compliance, LLC"},"sponsor":"22-092","trustCenterCheck":null}