# 10.9 The same policy on both AI vendors (/managing-ai-workers/governance-and-responsible-use/both-ai-vendors) --- type: Document title: "10.9 The same policy on both AI vendors" description: "How Anthropic's and OpenAI's own pages say you can carry out one AI policy, the three differences that change your setup, and what stays the same on both." status: stable order: 210.85 ksor: owner: team:panaversity audience: [ public ] approval: by: process:panaversity at: 2026-10-12T17:33:48Z chapter: "10" part: II expert_status: required concepts: [ "10.9" ] last_verified: 2026-10-12 review_by: 2026-11-12 sources: - id: anthropic-aup title: "Usage Policy (Anthropic, effective 12 November 2026, verified 2026-10-12)" resource: https://www.anthropic.com/legal/aup - id: anthropic-org-instructions title: "Set organization instructions (Claude Help Center, updated 31 August 2026, verified 2026-10-12)" resource: https://support.claude.com/en/articles/14546867-set-organization-instructions - id: anthropic-sso title: "Set up single sign-on (SSO) (Claude Help Center, updated 2 September 2026, verified 2026-10-12)" resource: https://support.claude.com/en/articles/13132885-set-up-single-sign-on-sso - id: anthropic-domain-claim title: "Claim and migrate accounts on your domain (Claude Help Center, updated 2 September 2026, verified 2026-10-12)" resource: https://support.claude.com/en/articles/14625619-claim-and-migrate-accounts-on-your-domain - id: anthropic-roles title: "Roles and permissions (Claude Help Center, updated 22 September 2026, verified 2026-10-12)" resource: https://support.claude.com/en/articles/9267276-roles-and-permissions - id: anthropic-custom-roles title: "Manage custom roles on Enterprise plans (Claude Help Center, updated 22 September 2026, verified 2026-10-12)" resource: https://support.claude.com/en/articles/13930452-manage-custom-roles-on-enterprise-plans - id: anthropic-cowork-team title: "Use Claude Cowork on Team and Enterprise plans (Claude Help Center, updated 5 October 2026, verified 2026-10-12)" resource: https://support.claude.com/en/articles/13455879-use-claude-cowork-on-team-and-enterprise-plans - id: anthropic-cowork title: "Get started with Claude Cowork (Claude Help Center, updated 6 October 2026, verified 2026-10-12)" resource: https://support.claude.com/en/articles/13345190-get-started-with-claude-cowork - id: anthropic-feedback title: "Manage user feedback settings on Team and Enterprise plans (Claude Help Center, updated 16 March 2026, verified 2026-10-12)" resource: https://support.claude.com/en/articles/10504844-manage-user-feedback-settings-on-team-and-enterprise-plans - id: anthropic-audit-logs title: "Access audit logs (Claude Help Center, updated 15 June 2026, verified 2026-10-12)" resource: https://support.claude.com/en/articles/9970975-access-audit-logs - id: anthropic-compliance-api title: "Access the Compliance API (Claude Help Center, updated 21 September 2026, verified 2026-10-12)" resource: https://support.claude.com/en/articles/13015708-access-the-compliance-api - id: anthropic-trust title: "Trust Center (Anthropic, verified 2026-10-12)" resource: https://trust.anthropic.com/ - id: openai-usage-policies title: "Usage policies (OpenAI, effective 29 October 2025, verified 2026-10-12)" resource: https://openai.com/policies/usage-policies/ - id: openai-workspace-settings title: "Managing workspace settings in ChatGPT Enterprise (OpenAI Help Center, verified 2026-10-12)" resource: https://help.openai.com/en/articles/8411955-managing-workspace-settings-in-chatgpt-enterprise - id: openai-identity title: "Getting started with OpenAI identity and access for managed workspaces (OpenAI Help Center, verified 2026-10-12)" resource: https://help.openai.com/en/articles/9047883-getting-started-with-openai-identity-and-access-for-managed-workspaces - id: openai-domain title: "Verifying your domain for OpenAI identity (OpenAI Help Center, verified 2026-10-12)" resource: https://help.openai.com/en/articles/8871611-verifying-your-domain-for-openai-identity - id: openai-enterprise-members title: "Managing members, workspace roles, and seats in ChatGPT Enterprise and Edu (OpenAI Help Center, verified 2026-10-12)" resource: https://help.openai.com/en/articles/8266401-managing-members-workspace-roles-and-seats-in-chatgpt-enterprise-and-edu - id: openai-rbac title: "Managing feature access with role-based access control in ChatGPT (OpenAI Help Center, verified 2026-10-12)" resource: https://help.openai.com/en/articles/11750701-managing-feature-access-with-role-based-access-control-in-chatgpt - id: openai-enterprise-privacy title: "Enterprise privacy at OpenAI (OpenAI, updated 8 January 2026, verified 2026-10-12)" resource: https://openai.com/enterprise-privacy/ - id: openai-compliance title: "OpenAI Compliance Platform for Enterprise and Edu customers (OpenAI Help Center, verified 2026-10-12)" resource: https://help.openai.com/en/articles/9261474-openai-compliance-platform-for-enterprise-and-edu-customers - id: openai-trust title: "OpenAI Trust Portal (OpenAI, verified 2026-10-12)" resource: https://trust.openai.com/ generated: at: 2026-10-12T17:33:48Z by: process:panaversity trust_tier: unverified build_id: sha256:2f1e14f2a0f11dbc37eb5856ca9b7d35b4ce4894da74c3328cf61a3c17c03861 dirty: true ksor_version: 0.0.60 --- **In everyday life.** A company gives its drivers fuel cards. The card company lets the owner block some kinds of purchases and look back at past charges. It cannot see what a driver buys with a personal card. And the rules for drivers come from the company, not from the card company. **What you will learn.** How each AI vendor's own pages say you can carry out the same AI policy, and the three differences that change your setup. You practice it in steps 3 and 8 of the lab. **Why it matters.** Your policy stays the same on both AI vendors. Which settings carry it out, who can change them and how long records last do not. So Dave, Brightline's controller, may enforce a rule on one AI vendor that he can only hope for on the other. The answers in 10.1 to 10.8 are the same on either AI vendor: Anthropic, which makes Claude, or OpenAI, which makes ChatGPT. Sections 10.3 and 10.7 gave each AI vendor's settings for training, retention, memory, connectors and apps. The two boxes below add the rest. They use the same six lines, in the same order. Team, Business and Enterprise are the AI vendors' plans for companies. > **Anthropic, as verified 12 October 2026.** > - *Usage Policy.* A new version takes effect on November 12, 2026, replacing the one 10.3 summarizes. Its high-risk rules cover recommendations about one person, such as a credit, housing or employment decision. A qualified person must review each one, with authority to change it, before it is delivered or used. The person affected must be clearly told that AI was used. Internal drafts that are not the final recommendation are excluded. So is business work that advises or decides nothing about a specific person. Users must make sure their agents' actions, through tools, browsers or connected systems, follow the policy.[^anthropic-aup] > - *Your policy in the product.* Owners on Team and Enterprise can write organization instructions, which Claude follows in every conversation. Only Owners and the Primary Owner can see them. Anthropic warns that in rare cases, when instructions directly contradict each other, behavior may vary.[^anthropic-org-instructions] > - *Work accounts.* Team and Enterprise offer single sign-on, so staff sign in with their work account.[^anthropic-sso] Once the company's email domain is verified, an Owner on either plan can stop people creating new personal accounts with it. On Enterprise, domain capture goes further. Personal accounts on the domain must move into the company's organization or close within 30 days, and the setting cannot be reversed.[^anthropic-domain-claim] > - *Who switches features on.* Of the standard roles, only Owners and the Primary Owner can turn on capabilities, such as web search, and integrations.[^anthropic-roles] On Enterprise, custom roles give features to groups. But if an Owner turns a feature off for the whole organization, no custom role can turn it back on.[^anthropic-custom-roles] Some settings start on. Members may use Cowork's "Automatically approve" mode, in which Claude checks its own actions instead of asking, unless an Owner turns it off.[^anthropic-cowork-team][^anthropic-cowork] Owners can also turn off members' thumbs-up and thumbs-down ratings, the feedback that 10.3 says can be used for training.[^anthropic-feedback] > - *Records.* On Enterprise, Owners can export the audit log for the past 180 days. It records events such as file uploads and deleted conversations, but not chat titles or content.[^anthropic-audit-logs] Only the Primary Owner can turn on the Compliance API, which can also pull chat data and files.[^anthropic-compliance-api] > - *Security documents.* The Trust Center lists Claude Team and Enterprise as covered by SOC 2 Type 2 and ISO 27001. Sensitive documents need a request form.[^anthropic-trust] > **OpenAI, as verified 12 October 2026.** > - *Usage Policies.* They still carry the date October 29, 2025, the version that 10.3 summarizes. OpenAI says its rules are no substitute for legal requirements or professional duties. A form lets you follow updates.[^openai-usage-policies] > - *Your policy in the product.* On Enterprise, a workspace can set its own AI policy. ChatGPT shows it to users in a pop-up every 30 days, and again when the policy changes.[^openai-workspace-settings] > - *Work accounts.* Business and Enterprise support single sign-on.[^openai-identity] Verifying the company's domain does not delete or merge anyone's personal workspace. Claiming the domain is only for approved use cases, by request to OpenAI.[^openai-domain] On Business, admins cannot require anyone to merge or delete a personal workspace.[^openai-identity] On Enterprise, joining can require one on the company's domain to be merged or deleted.[^openai-enterprise-members] > - *Who switches features on.* On Enterprise, only Owners create and assign custom roles, which decide who may use each feature. Roles add up. If any role a member holds grants a feature, the member has it, even when another role turns it off. A Lockdown Mode role is the exception: it can block some network features that other roles grant.[^openai-rbac] If a business opts in to share data, for example through feedback, OpenAI may use it for training.[^openai-enterprise-privacy] > - *Records.* The Compliance Platform is for Enterprise and Edu. Only a workspace Owner can grant access to conversation messages. Its logs are kept for 30 days, so a company that needs them longer should download and keep them itself.[^openai-compliance] > - *Security documents.* The Trust Portal offers its SOC 2 Type 2 report, for July 1, 2025 to June 30, 2026, to users who request access.[^openai-trust] **The comparison.** Three differences change your setup. *Personal accounts:* on Claude, an Owner can block new personal accounts on the company's email domain. On Enterprise, an Owner can also move or close the old ones. On ChatGPT, verifying the domain leaves personal workspaces in place, and claiming it needs OpenAI's approval. So on ChatGPT, more of this rule rests on your written policy. On both, these domain settings do not reach an account made with a personal email address. That is why 10.4 fixes the slow approved route, instead of relying on rules alone. *Records:* Claude's audit log export reaches back 180 days. ChatGPT's compliance logs are kept for 30 days. If a problem is found after 30 days, the platform no longer has the logs from its start, unless you kept them. So on ChatGPT Enterprise, set up a regular download before anything goes wrong. Neither AI vendor offers these logs on Claude Team or ChatGPT Business. *Where the policy shows:* Claude's organization instructions reach the AI, and members cannot see them. ChatGPT's pop-up reaches people, every 30 days. So on Claude, tell people the policy another way, such as when they join. On ChatGPT, still put the worker's rules in its brief (Chapter 5). **What stays the same.** On either AI vendor, settings carry out a policy that people wrote and approved. They do not write it. A pop-up reminds, and an instruction asks. Neither is a control (10.3). Audit records and custom roles come with Enterprise, not with Claude Team or ChatGPT Business. So a small company keeps more of its policy with named people. And each AI vendor's usage policy is an outer edge. Your own rules, such as Brightline's sign-off matrix, sit inside it. [^anthropic-aup]: Usage Policy, Anthropic. [^anthropic-org-instructions]: Set organization instructions, Claude Help Center. [^anthropic-sso]: Set up single sign-on (SSO), Claude Help Center. [^anthropic-domain-claim]: Claim and migrate accounts on your domain, Claude Help Center. [^anthropic-roles]: Roles and permissions, Claude Help Center. [^anthropic-custom-roles]: Manage custom roles on Enterprise plans, Claude Help Center. [^anthropic-cowork-team]: Use Claude Cowork on Team and Enterprise plans, Claude Help Center. [^anthropic-cowork]: Get started with Claude Cowork, Claude Help Center. [^anthropic-feedback]: Manage user feedback settings on Team and Enterprise plans, Claude Help Center. [^anthropic-audit-logs]: Access audit logs, Claude Help Center. [^anthropic-compliance-api]: Access the Compliance API, Claude Help Center. [^anthropic-trust]: Trust Center, Anthropic. [^openai-usage-policies]: Usage policies, OpenAI. [^openai-workspace-settings]: Managing workspace settings in ChatGPT Enterprise, OpenAI Help Center. [^openai-identity]: Getting started with OpenAI identity and access for managed workspaces, OpenAI Help Center. [^openai-domain]: Verifying your domain for OpenAI identity, OpenAI Help Center. [^openai-enterprise-members]: Managing members, workspace roles, and seats in ChatGPT Enterprise and Edu, OpenAI Help Center. [^openai-rbac]: Managing feature access with role-based access control in ChatGPT, OpenAI Help Center. [^openai-enterprise-privacy]: Enterprise privacy at OpenAI, OpenAI. [^openai-compliance]: OpenAI Compliance Platform for Enterprise and Edu customers, OpenAI Help Center. [^openai-trust]: OpenAI Trust Portal, OpenAI.