Training promises
Business data should not flow into public model training.
The plan choice does not solve everything. But it does shape rights, retention, and admin effort.
For many teams, Business is enough. Enterprise becomes relevant when identity management, retention, and stronger governance requirements come into play.
Short answer: ChatGPT Enterprise or Business for GDPR?
Both tiers exclude training on customer data; Enterprise adds data-residency options, SSO and admin controls for larger teams.
According to the Bitkom 2026 study, 41% of companies in Germany use AI, up from 17% a year earlier; another 48% are planning to.
Weekly AI live calls are now embedded across the site.
Every Saturday at 11:00 Europe/Berlin, the format gives a compact mix of market filtering, practical cases, questions, and clear next steps.
Saturday, September 12, 2026 at 11:00 · Europe/Berlin1x per weekLive Q&A
Next session: Saturday, September 12, 2026 at 11:00 · Europe/Berlin. The series then continues on a weekly rhythm.
Decision axes that really matter
This is not only about models. It is about operational reality.
Admin control
SSO, user management, and retention need to fit the company setup.
DPA and transfers
The contract structure and data transfers need review and documentation.
Shadow AI
Often the bigger risk is not the paid plan, but uncontrolled free usage.
Pragmatic recommendation
Smaller teams can often start with Business, as long as processes, data types, and user administration stay manageable.
Enterprise becomes worthwhile when retention policy, identity sync, or stronger control requirements are the deciding factors.
The facts on Business and Enterprise (as of September 2026)
Since the price cut of 2 April 2026, ChatGPT Business costs $20 per user per month billed annually ($25 monthly), with a two-seat minimum and self-serve sign-up. Enterprise is negotiated with sales; reports cite roughly 150 minimum seats and $45 to $75 per user per month.
Both tiers exclude business data from model training by default and offer SSO plus SOC 2 reports. Enterprise adds SCIM provisioning, data residency in ten regions (including the EU), Enterprise Key Management, a compliance API, IP allow-listing and SLA-backed support. Prices and features change; verify against OpenAI's pricing page before signing.
GDPR checklist for choosing a plan
Four points to settle before the first team rollout.
Data processing agreement
Sign a DPA with OpenAI and document the standard contractual clauses for third-country transfers.
Data residency
Anyone who must store content in the EU needs Enterprise; Business has no residency option.
Retention
Define retention rules for chats and files and record them in the data protection impact assessment.
Shadow AI
Block private Free and Plus accounts for business data; there, training exclusion only applies after a manual opt-out.
Frequently asked questions on choosing a plan
Does OpenAI train on our data?
Not in Business and Enterprise; exclusion applies by default. In Free and Plus, users must actively opt out of training, which makes those accounts unsuitable for business data.
Do we need Enterprise for GDPR?
Not necessarily. Business with a DPA is enough for many teams; Enterprise becomes necessary when EU data residency, SCIM, audit logs via the compliance API or an SLA are required.
What does Enterprise cost?
The price is negotiated. 2026 reports cite $45 to $75 per user per month with roughly 150 minimum seats and annual prepayment, i.e. a floor near $108,000 per year.
Start potential analysis
If you want to prioritize a real process, a few clear inputs are enough for a strong first assessment.