OpenAI
OpenAI is the main capability and procurement benchmark for a private-AI venture. Its enterprise products and API are viable components for lower-risk work when a customer accepts a contractual cloud-inference boundary.
Privacy model
OpenAI says business inputs and outputs are not used for training by default. Enterprise products offer retention controls, and eligible API customers can request Zero Data Retention or modified abuse monitoring.
Those controls require plan-by-plan review. Default API abuse monitoring can retain content for up to 30 days, and stateful features, files, prompt caching, Code Interpreter, remote MCP tools, and endpoints can have distinct storage rules.
Lesson for the venture
OpenAI can be an explicit external or contractual route, not the silent default for a sensitive prompt. The workbench should show the chosen plan, retention category, tools, and data path before a request leaves local mode. Private AI buyer alternatives puts this in context.