Skip to content
Zrico
Menu

For every firm

ChatGPT Business vs Enterprise for Law and CPA Firms

ChatGPT Business (formerly Team) vs Enterprise: seat prices, minimums, retention, SSO, SCIM, audit logs, data residency and BAAs, from OpenAI's own pages.

Updated 7 min read

If your firm has decided to use ChatGPT for client work, the next question is which business plan: ChatGPT Business or ChatGPT Enterprise. This guide compares them using only OpenAI’s own pages, as checked in October 2026. Where those pages disagree or say nothing, we say so.

It assumes you have already ruled out personal accounts. For why, see Is ChatGPT safe for client data?

First, ChatGPT Team is now ChatGPT Business

OpenAI renamed ChatGPT Team to ChatGPT Business on August 29, 2025. Its help center says the rename did not change the plan, though prices and seat options have changed since. “Team” in an older article or contract means Business.

Side by side

Feature ChatGPT Business ChatGPT Enterprise
Price per seat Standard: $20/month billed annually, $25 billed monthly. Premium: $100 annually, $125 monthly Not published. Contact sales
Minimum seats 2 (Standard, Premium or one of each) Not published
Who it is for Teams of 2 to 200; self-serve “Businesses operating at scale”; sales-led
Training on your data No, by default No, by default
Retention set by admins See note below Yes, custom retention policies
SAML SSO, domain verification Yes Yes
SCIM, role-based access controls No Yes
Compliance API audit log No Yes
Data residency No Yes, 10 storage regions (new customers)
Data Processing Addendum Yes Yes
BAA for health data No Sales-managed accounts only
SOC 2 Type 2 Yes Yes
ISO 27001, 27017, 27018, 27701 Listed as no Yes

Price

Business has two seat types. A Standard seat is $20 per user per month billed annually, or $25 billed monthly. A Premium seat is $100 billed annually, or $125 billed monthly, and OpenAI says it gives five times the usage of Standard with no 5-hour limit. You can mix seat types and buy credits for extra usage. Prices may vary by country and currency.

OpenAI does not publish an Enterprise price. The pricing page says “custom pricing” and adds that credit-based and token-based pricing are available.

Minimum seats and who each plan is for

Business needs at least 2 paid seats: 2 Standard, 2 Premium, or one of each. The pricing page says it is for teams of 2 to 200 employees, and OpenAI’s privacy page calls it “built for small and growing businesses”.

OpenAI’s pages do not state a minimum seat count for Enterprise. Third-party sites quote figures, but we found none on OpenAI’s site, so ask sales. The pricing page describes Enterprise as being for “businesses operating at scale”.

Training

Both plans have the same default. OpenAI’s enterprise privacy page says it does not train its models on business data from ChatGPT Business or ChatGPT Enterprise by default. The exception is if you explicitly opt in to share data, for example through opt-in feedback. The same page says data from apps you connect is also not used for training by default.

Retention

Enterprise. The pricing page lists “custom data retention policies”. The privacy page says workspace admins control how long data is kept, and deleted conversations are removed within 30 days unless OpenAI is legally required to keep them.

Business. Here OpenAI’s pages do not agree. The Business section of the privacy page says workspace admins “can control” how long data is kept, and that deleted or unsaved conversations are removed within 30 days unless the law or protection from harm requires longer. But the summary list at the top of the same page names only Enterprise, Healthcare and Edu for retention control. The Business help article on data and privacy does not mention a retention setting. Check the admin console yourself before you rely on it.

Admin controls and sign-in

Both plans include SAML single sign-on, domain verification, an admin console, admin roles and bulk member management. The Business plan card also lists multi-factor authentication; the Enterprise column does not mention it either way.

Enterprise adds SCIM, which lets you add and remove users from your identity provider automatically. It also adds role-based access controls, group permissions for GPTs, Enterprise Key Management, IP allowlisting and Intune for iOS.

One difference matters for confidentiality. In Business, members can share a conversation by link with others in the same workspace, and the help center says a Business workspace cannot turn shared links off for everyone. That control is in Enterprise only.

Audit logs and the Compliance API

OpenAI’s pricing table lists the “Compliance API Logs Platform” for Enterprise and not for Business. The privacy page says Enterprise admins can access an audit log of conversations and GPTs through the Enterprise Compliance API. If you need to export conversations to an eDiscovery or archiving tool, this is an Enterprise feature.

Who at OpenAI can see your data

The privacy page describes access differently for each plan.

  • Business: authorized employees who need access for engineering support, investigating possible abuse and legal compliance, plus specialized third-party contractors bound by confidentiality obligations, solely to review for abuse and misuse.
  • Enterprise: authorized employees only, to resolve incidents, to recover conversations with your explicit permission, or where the law requires.

Data residency

OpenAI’s help center says data residency is available to eligible API customers and “new ChatGPT Enterprise/Edu customers”. Business is not listed, and the pricing table marks it “no”.

For Enterprise, stored content can be kept at rest in one of ten regions: Australia, Canada, Europe (EEA and Switzerland), India, Japan, Singapore, South Korea, the UAE, the UK and the US. Inference residency, which keeps model processing on GPUs in the region, is offered in the US, Europe and the UAE, and requires data residency in the same region. Both are included at no extra cost for Enterprise.

OpenAI is clear about the limits. Workspace metadata, billing data and user logins may be stored outside the region. Even with inference residency, processing such as reading uploaded files, routing and sign-in may happen elsewhere, and data sent to a connected app follows that provider’s terms. The article does not say whether an existing Enterprise workspace can move to a region.

Connectors

Both plans can connect to Google Workspace, Slack, GitHub, Microsoft 365 and other tools. OpenAI says admins control which apps are enabled, ChatGPT respects your existing permissions in those tools, and each user signs in to a connected app before using it. Enterprise adds a connector registry. A connector can pull client documents into a chat, so review what each one can reach.

DPA and BAA

OpenAI says it can sign a Data Processing Addendum for ChatGPT Business, ChatGPT Enterprise and the API.

A Business Associate Agreement is different. OpenAI’s help center says it does not offer a BAA for ChatGPT Business; for a sales-managed Enterprise or Edu account, you contact sales. The Business overview adds that a BAA, Zero Data Retention, invoice billing or net terms need a contracted offering. This matters for firms that handle protected health information, such as personal injury practices or accountants with health care clients.

What this means for a small firm

For most small and mid-size firms, Business is the realistic choice. It is self-serve, its price is published, and it covers the basics: no training by default, single sign-on and a DPA.

Before you put client files into it, check the gaps against your duties:

  1. Retention. Confirm in the admin console what you can set, given that OpenAI’s pages disagree.
  2. Shared links. You cannot switch them off, so cover sharing in your AI policy.
  3. Audit trail. There is no Compliance API, so decide how you will answer “who saw what” if a client or court asks.
  4. Health data. No BAA is available on Business.
  5. Client consent. Lawyers should work through ABA Formal Opinion 512, and accountants through the AICPA confidentiality rule. See our ABA 512 checklist and AICPA guide.

If you need the audit log, residency or a BAA, Enterprise is the OpenAI plan that offers them, at a price you will only learn from sales. For a wider view, including Microsoft Copilot and Harvey, see how Zrico compares.

How Zrico fits

Zrico gives each firm its own private workspace, with its own application and databases. Claude is the default and is processed only in the US. GPT and Gemini are off unless the firm owner turns them on, and their processing is not limited to the US. No AI provider trains on prompts, files or answers. Sign-in is invite-only with two-factor authentication, required for admins, and the owner gets a usage and audit report and retention settings. It costs $39 per seat per month, with a 5-seat minimum and a 30-day free trial. Microsoft 365 sign-in and client-name masking are coming soon. Zrico has no SOC 2, ISO or HIPAA certification, does not make a firm compliant, and its output must be reviewed by a professional.

Sources

General information, not legal advice. Plans and prices change, so check OpenAI’s current pages before you buy.

Give your firm a private place to use AI.

$39 per seat per month after a 30-day free trial, 5-seat minimum. Your workspace is ready minutes after you sign up.

Your card is charged when the trial ends. Cancel any time before then and you pay nothing.

Start 30-day free trial