OpenAI launches Private Intelligence security architecture for enterprise AI

As enterprise deployments shift from isolated chat prompts to autonomous coding and browser agents, security teams must govern not only where prompts are stored but also which external systems agents can modify. OpenAI’s Private Intelligence packages existing enterprise encryption and non-training commitments with new runtime isolation and policy enforcement across ChatGPT Enterprise, ChatGPT Business, Codex, and API workloads.

At the infrastructure layer, eligible API endpoints support Zero Data Retention (ZDR) so prompts and completions are never written to persistent storage, paired with a preview of Private Inference running inside hardware-attested confidential computing enclaves. At the workspace layer, administrators configure role-based access controls, audit logs, and action-level browser and connector policies. As shown in the policy prompt below, workspace rules can let an agent browse approved SaaS tools while blocking file uploads to unapproved storage providers such as Dropbox. OpenAI backs the stack with SOC 2 Type 2, ISO certifications, HIPAA Business Associate Agreements, and FedRAMP authorisations, though general availability dates and standalone pricing for Private Inference have not been published.