Upstream vendor · § Who relies on it
● Updated 04 June 2026Who relies on OpenAI
12 of the 18 SaaS providers Registora monitors disclose OpenAI as a sub-processor on their own page, including Cloudflare, GitHub, Intercom, as of 04 June 2026. Under GDPR Article 28(2), if you build on any of them, OpenAI is part of your sub-processor chain too.
Providers that disclose OpenAI
- infrastructure
- dev_tools
- support
- analytics
- productivity
- ai
- analytics
- monitoring
- database
- communications
- hosting
- support
Names found across provider pages, collapsed to one entry: OpenAI; OpenAI L.L.C.; OpenAI, Inc.; OpenAI, L.L.C.; OpenAI, LLC.
Source: each provider's own public subprocessor page, scraped daily by Registora. We report observed facts only - we make no claim that any company is or is not compliant.
Questions
- How many SaaS providers disclose OpenAI as a subprocessor?
- 12 of the 18 providers Registora monitors list OpenAI as one of their own sub-processors, as of 04 June 2026. The full list is on this page and is refreshed daily.
- Does this mean every company uses OpenAI?
- No. It means 12 of the specific 18 providers we monitor disclose OpenAI on their public subprocessor page. We report only what each provider publishes; we make no claim about any company's compliance.
- Why does OpenAI matter for GDPR Article 28(2)?
- If you build on a provider that uses OpenAI, then OpenAI is part of your own sub-processor chain, and your customers can ask you to disclose it and to notify them when it changes. Registora monitors these upstream lists daily and drafts the Article 28(2) notice when one changes.
Your chain
OpenAI is probably in your subprocessor chain.
Registora hosts your public subprocessor register, monitors every upstream provider for changes daily, and drafts the Article 28(2) customer notice when one updates.