CapitalGuard Observatory · Tool record

ChatGPT

OpenAI · connected assistant

ChatGPT can work with prompts, uploads, memory, projects, and optional apps that search connected services or take actions, depending on plan and settings.

Public-Control Score

Substantial public control coverage

Measures publicly documented control coverage as of the review date. It is not a breach rate, penetration test, endorsement, or guarantee of safety.

Scored dimensions

The documented control surface.

This record is reviewed against the same five-dimension rubric used across every scored product.

Read Methodology

Access and scope transparency

17/20

Official material provides extensive operational detail for access and scope transparency.

Data and retention controls

17/20

Official material provides extensive operational detail for data and retention controls.

Connector and permission controls

16/20

Official material names concrete controls and meaningful boundaries for connector and permission controls.

Action, approval, and isolation controls

13/20

Official material documents user-facing controls, with some enforcement or audit detail still limited.

Audit and administrative evidence

13/20

Official material documents user-facing controls, with some enforcement or audit detail still limited.

Documented access points

prompts and uploaded files

projects, history, and memory

apps with retrieval, sync, or write actions

Settings to verify now

Data Controls and model-improvement choice

Memory, projects, and shared links

Apps, granted scopes, and action approval mode

Primary sources

Inspect the evidence directly.

OpenAI ChatGPT Data Controls FAQ Official controls for training choice, Temporary Chat, export, and deletion.OpenAI Apps in ChatGPT Official description of app retrieval, sync, write actions, permissions, and connected data.

Linked evidence

Ten practical ChatGPT checks.

All 100 Guides

Private file access

ChatGPT Private File Access: What to Check

Credential exposure

ChatGPT API Key Exposure: Check Before You Share

Client confidentiality

ChatGPT Client Data Safety for Freelancers

Prompt injection

ChatGPT Prompt Injection: A Practical Defense

Connector permissions

ChatGPT Connector Permissions: Review the Real Scope

Command execution

ChatGPT Command Execution: Keep Control

Unsafe generated code

ChatGPT Generated Code Risks: Review Before You Run

History and sharing

ChatGPT Chat History and Shared Links: Privacy Check

Accidental oversharing

ChatGPT Sensitive Data: What Not to Paste

Autonomous actions

ChatGPT Autonomous Actions: Approval Safety Guide