OpenAI

ChatGPT Enterprise and API Platform for FedRAMP

Learn about supported features and functionality for ChatGPT and the API with FedRAMP compliance.

Updated: 7 hours ago

Note: Some features in ChatGPT FedRAMP workspaces are currently limited. See below for more details and any confirmed workarounds.

Overview

ChatGPT and the API for FedRAMP are versions of ChatGPT Enterprise and the API platform that have achieved Federal Risk and Authorization Management Program (FedRAMP) Moderate accreditation through the FedRAMP 20x program.

Feature availability

ChatGPT and API for FedRAMP do not initially include all features available in the commercial platforms. Over time, our goal is to bring feature parity as close as possible to the commercial ChatGPT Enterprise and API platforms while maintaining FedRAMP compliance.

The sections below list the features currently available.

ChatGPT

Supported clients

ChatGPT for FedRAMP is currently available on the web. For ChatGPT Desktop, current FedRAMP access is limited to the CLI via API key while we work to enable the remaining modalities and sign-in methods.

Core features

Advanced features

  • Latest Thinking and Pro models

API

Note: FedRAMP compliance requires that all API requests use the designated gov.api.openai.com endpoint for all supported methods and models.

Methods

The following API methods are currently available:

/v1/chat/completions
/v1/completions
/v1/conversations
/v1/files
/v1/moderations
/v1/responses
/v1/uploads

For more information about using these methods, see: API reference documentation.

Models

The latest model family is generally available to use in the FedRAMP API, including mini and nano variants if applicable. Model snapshots are also available as they are released.

Legacy models are not available.

ChatGPT Desktop

We intend to support ChatGPT Desktop across various modalities (App, IDE, CLI) and all sign-in methods (Sign in with ChatGPT, OpenAI API key). Currently, FedRAMP access is limited to the CLI via API key while we work to enable the remaining modalities and sign-in methods.

Prerequisites

Before using Codex CLI for FedRAMP, do all of the following:

  1. Contact your OpenAI account team to obtain the FedRAMP-specific requirements.toml file and setup instructions.

  2. After you receive your FedRAMP-specific requirements.toml file, follow the accompanying operating-system-specific setup instructions.

  3. Use exactly

    Codex CLI v0.143.0-alpha.38 for this setup.

  4. Use an API key generated by a FedRAMP-enabled API organization.

  5. If your organization manages Codex settings through MDM or another policy system, confirm that those settings do not change the government API endpoint or enable functionality outside this supported setup.

  6. Use the FedRAMP-specific requirements.toml file without modification.

Codex with ChatGPT sign-in

We intend to support ChatGPT Desktop across various modalities (App, IDE, CLI) and all sign-in methods (Sign in with ChatGPT, OpenAI API key). FedRAMP access to Codex is currently limited to the CLI via API key while we work to enable Sign in with ChatGPT.

Codex with API key sign-in

To use Codex CLI with a FedRAMP-enabled API organization:

  1. Complete all prerequisites above.

  2. Follow the operating-system-specific setup instructions supplied with the scoped configuration file.

  3. Before use, verify that Codex is using API-key authentication and https://gov.api.openai.com/v1 for OpenAI API requests.

  4. If the setup or verification result is unexpected, stop and contact your OpenAI representative.

codex config set openai_base_url https://gov.api.openai.com/v1

Available models in Codex

In local Codex, FedRAMP customers have access only to models available in FedRAMP environments.

Privacy and security

ChatGPT and API FedRAMP are designed for strict FedRAMP compliance and are operated with additional access restrictions and feature controls compared to standard ChatGPT Enterprise environments. Key Enterprise privacy measures are still in place:

  • No model training on customer data

  • Identical retention policies to ChatGT Enterprise, including availability of the Compliance API

FAQ

How is ChatGPT FedRAMP different from ChatGPT Gov?

ChatGPT FedRAMP is a SaaS product that OpenAI owns and manages for the customer. It is a configuration of ChatGPT Enterprise with additional accredited compliance. ChatGPT Gov is a containerized frontend application that customers install and manage in their own Microsoft Azure environment.

Can I convert my existing ChatGPT Enterprise workspace to FedRAMP?

No. Existing ChatGPT Enterprise workspaces cannot be converted to FedRAMP.

However, OpenAI can support a one-time migration of users to a newly provisioned FedRAMP workspace, including ChatGPT conversations and tenant-level SSO settings. Workspace settings will need to be configured again in the new environment. For assistance, contact your account team.

Can I convert my existing API organization to FedRAMP?

Yes. Existing API organizations can be converted to FedRAMP.

Once converted, customers must use the designated gov.api.openai.com endpoint.

Known issues and workarounds

  • Code Interpreter is unavailable.

    • What is this: Code Interpreter runs code in ChatGPT to create, update, and edit files.

    • Estimated return time: 2026-07-29.

    • Workaround: Ask ChatGPT to draft the content, then copy it into your document.

  • Codex is available only in the CLI with an OpenAI API key. We plan to support the ChatGPT desktop app, IDE extension, and CLI with both Sign in with ChatGPT and API-key sign-in.

    • What is this: Codex helps developers and knowledge workers complete local tasks with code.

    • Estimated return time:

      • 2026-07-31 for the ChatGPT desktop app with an API key.

      • 2026 (TBD) for the CLI, ChatGPT desktop app, and IDE extension with Sign in with ChatGPT.

    • Workaround: The ChatGPT Enterprise web app remains available. For Codex, use the CLI with an OpenAI API key and follow the “Codex with API key sign-in” steps below.

  • Workspace Analytics is unavailable.

    • What is this: Workspace Analytics gives administrators information about user activity, credit use, and model selection.

    • Estimated return time: 2026-08-07.

    • Workaround: Contact your OpenAI account team to request usage data, such as credit use over time.

  • The /log endpoint for the Compliance API is unavailable.

    • What is this: The /log endpoint provides detailed logs of user conversations and authentication activity.

    • Estimated return time: Late August 2026.

    • Workaround: Use the legacy /users and /conversations endpoints, which remain available.

  • Creating a link to share a conversation is unavailable. No confirmed workaround or timeline.

  • Conversation Search may be unavailable for existing conversations. Only new conversations are expected to be searchable for now. No confirmed workaround or timeline.

  • Custom GPT search may be unavailable. No confirmed workaround or timeline.

Was this article helpful?