Overview
ChatGPT and the API for FedRAMP are versions of ChatGPT Enterprise and the API platform that have achieved Federal Risk and Authorization Management Program (FedRAMP) Moderate accreditation through the FedRAMP 20x program.
Feature availability
OpenAI’s FedRAMP products strive to be as close to Commercial parity as possible, but there are some features not yet available in our FedRAMP offerings.
The sections below list the features currently available.
ChatGPT Web
ChatGPT for FedRAMP currently supports only Chat mode.
Core features
Plugins (Marketplace & Self-Authored)
Share Conversations with eligible members of the same workspace
Tenant and Workspace Admin Console - Tenant settings and workspace settings
Coming by December 2026
Coming in 2027
API
Note: FedRAMP compliance requires that all API platform requests use the designated government endpoint for all supported methods and models. Set your client or SDK base URL to https://gov.api.openai.com/v1. For a raw HTTP request, use the full resource URL, such as https://gov.api.openai.com/v1/responses.
Methods
The following API methods are currently available:
/v1/chat/completions
/v1/conversations
/v1/files
/v1/moderations
/v1/responses
/v1/uploads
/v1/modelsFor more information about using these methods, see: API reference documentation.
Models
The following models are available:
All “flagship” GPT models that are available in Commercial API
Daybreak models that are available in Commercial API
Other specialized models (life science, image, realtime, speech, transcription) are not yet available.
ChatGPT Desktop (formerly Codex)
OpenAI offers specific FedRAMP configurations version of ChatGPT Desktop and Codex via the CLI. Please follow the FedRAMP configuration guide to set up your environment correctly.
Available Features
The FedRAMP version of ChatGPT Desktop / Codex includes the following features:
Projects
Web Search (offline)
Chat mode
Work mode
Codex mode
Automations
Skills
Workspace Analytics
Native Plug-ins
Privacy and security
ChatGPT and API FedRAMP are designed for strict FedRAMP compliance and are operated with additional access restrictions and feature controls compared to standard ChatGPT Enterprise environments. Key Enterprise privacy measures are still in place:
No model training on customer data
Identical retention policies to ChatGPT Enterprise, including availability of the Compliance API
FAQ
Does access to a FedRAMP ChatGPT workspace also give me API access?
No. ChatGPT workspace membership and API Platform organization membership are managed separately. If your FedRAMP API organization does not appear in the API Platform, ask your API organization administrator to confirm your access.
For help enabling an API organization for FedRAMP, contact your account team. See OpenAI identity and product access.
Can I convert my existing ChatGPT Enterprise workspace to FedRAMP?
Contact your account team to confirm whether a one-time migration to a newly provisioned FedRAMP workspace is currently available for your organization. Before planning a move, confirm which users, conversations, and tenant-level SSO settings can be migrated, which workspace settings must be configured again, and the expected timing
Why am I receiving a fedramp_org_requires_gov_api error?
This error indicates that a request for a FedRAMP API organization was sent to the commercial API endpoint. Configure your API client or integration to use https://gov.api.openai.com/v1 and a supported method and model.
For API-key access in the desktop app or Codex CLI, follow the FedRAMP API configuration guide, including deploying the managed requirements.toml before launch or authentication.
Does FedRAMP require all conversations to be deleted after 30 days?
No. A 30-day conversation retention period is not a universal requirement for ChatGPT Enterprise FedRAMP. Conversations follow your workspace’s retention policy. Archiving a conversation does not change its retention period.
Ask your workspace owner to confirm the policy that applies to your organization. See Chat and file retention in ChatGPT.
Do commercial ChatGPT and API release announcements apply to FedRAMP?
Not necessarily. Features and models may become available in FedRAMP at different times. Check the Feature availability section above for supported capabilities.
For the desktop app and Codex CLI, availability also depends on your sign-in method, permissions, and configuration. See the FedRAMP workspace configuration guide or FedRAMP API configuration guide.
Why do users appear in our SCIM directory but not have access to our ChatGPT workspace?
Directory synchronization and workspace access are separate. Check the synchronized group’s product assignment, the user’s workspace invitation or membership, and the required sign-in method.
If workspace-level SCIM is enabled, coordinate any move to tenant-wide provisioning with your account team before changing the existing connection. See SCIM provisioning and management.
Can I convert my existing API organization to FedRAMP?
Yes. Existing API organizations can be converted to FedRAMP.
Once converted, customers must use the designated gov.api.openai.com endpoint. Before conversion, review the integration’s methods and capabilities with your account team, especially if it depends on functionality outside the supported list.
How do I confirm which API organization to use for a FedRAMP use case?
When in doubt, use gov.api.openai.com endpoint. That endpoint will only work in a FedRAMP API org.
What should I check if a FedRAMP API request fails?
Confirm the API key’s organization, the hostname and path actually used by the request, and the model and capabilities required by your integration. For a method or capability not listed in this article, ask your account team to confirm support before deployment. An access error alone does not establish that existing data was deleted.
If a supported request still fails, contact Support with the organization ID, hostname and path, error text, request ID, timestamp and time zone, and affected workflow. Leave out API keys and sensitive request content. Keep FedRAMP workloads on the government endpoint while troubleshooting.
Can I use live web search?
The supported search experience listed for ChatGPT Web in FedRAMP is offline web search. It uses OpenAI’s indexed and cached web content instead of live web search at the time of your request. Results may be older than the live page, and some URLs may be unavailable. When current information is essential, review the source separately and upload or paste the relevant material in accordance with your organization’s policies.