# OpenAI ChatGPT Enterprise public-sector approval packet

> SAMPLE ONLY: this demo shows the packet structure AIRIN creates. It has not captured, hashed, verified, or approved these policy documents for a paying customer.

Agency: City of Mesa — Innovation and Performance Office
Selected vendor: OpenAI ChatGPT Enterprise
Use case: Evaluate a generative AI assistant for drafting public-facing service summaries, internal policy research, and staff productivity pilots across multiple municipal departments.
Status: procurement_workpaper_pending_capture
Generated: 2026-07-28T01:17:10.654Z

> Draft workpaper only: AIRIN preserves evidence records and policy intelligence, not legal advice, procurement approval, or a guarantee that private contract terms match public policies.

## Decision question

Why did City of Mesa — Innovation and Performance Office approve or evaluate OpenAI ChatGPT Enterprise, what risks were known, what mitigations existed, and which policy versions were relied on?

## Alternatives considered

- Anthropic Claude for Enterprise
- Google Gemini for Workspace
- No-buy / internal-only option

## Evidence register

| Section | Item | Status | Source URL | Document type | NIST AI RMF | ISO/IEC 42001 | Notes |
| --- | --- | --- | --- | --- | --- | --- | --- |
| approval snapshot | OpenAI ChatGPT Enterprise public vendor site | pending capture | https://openai.com/enterprise-privacy/ | vendor_site | GOVERN-1.5 / MAP-1.6 | ISO/IEC 42001 A.5.2 / A.7.2 | Approval-time capture, timestamp, SHA-256 hash, and source archive binding still required. |
| approval snapshot | OpenAI Terms of Use | pending capture | https://openai.com/policies/terms-of-use/ | terms | GOVERN-1.5 / MAP-1.6 | ISO/IEC 42001 A.5.2 / A.7.2 | Candidate source URL supplied. Final packet must attach captured text, capture timestamp, and snapshot hash. |
| approval snapshot | OpenAI Privacy Policy | pending capture | https://openai.com/policies/privacy-policy/ | privacy | GOVERN-1.5 / MAP-1.6 | ISO/IEC 42001 A.5.2 / A.7.2 | Candidate source URL supplied. Final packet must attach captured text, capture timestamp, and snapshot hash. |
| approval snapshot | OpenAI Usage Policies | pending capture | https://openai.com/policies/usage-policies/ | ai_use_policy | GOVERN-1.5 / MAP-1.6 | ISO/IEC 42001 A.5.2 / A.7.2 | Candidate source URL supplied. Final packet must attach captured text, capture timestamp, and snapshot hash. |
| approval snapshot | ChatGPT Enterprise product page | pending capture | https://openai.com/chatgpt/enterprise/ | pricing | GOVERN-1.5 / MAP-1.6 | ISO/IEC 42001 A.5.2 / A.7.2 | Candidate source URL supplied. Final packet must attach captured text, capture timestamp, and snapshot hash. |
| approval snapshot | Enterprise privacy and data controls | pending capture | https://openai.com/enterprise-privacy/ | model_training_disclosure | GOVERN-1.5 / MAP-1.6 | ISO/IEC 42001 A.5.2 / A.7.2 | Candidate source URL supplied. Final packet must attach captured text, capture timestamp, and snapshot hash. |
| selected vendor | OpenAI ChatGPT Enterprise | provided | — | — | MAP-3.1 / MANAGE-1.3 | ISO/IEC 42001 A.6.2 / A.9.2 | Selected vendor for Evaluate a generative AI assistant for drafting public-facing service summaries, internal policy research, and staff productivity pilots across multiple municipal departments.. Final justification should cite AIRIN verified clauses where the vendor is already tracked. |
| alternatives | Anthropic Claude for Enterprise | provided | — | — | MAP-5.1 / MEASURE-2.7 | ISO/IEC 42001 A.7.4 / A.9.2 | Alternative considered against OpenAI ChatGPT Enterprise. Final packet should compare training-use, privacy/DPA, retention, commercial-use, and pricing posture. |
| alternatives | Google Gemini for Workspace | provided | — | — | MAP-5.1 / MEASURE-2.7 | ISO/IEC 42001 A.7.4 / A.9.2 | Alternative considered against OpenAI ChatGPT Enterprise. Final packet should compare training-use, privacy/DPA, retention, commercial-use, and pricing posture. |
| alternatives | No-buy / internal-only option | provided | — | — | MAP-5.1 / MEASURE-2.7 | ISO/IEC 42001 A.7.4 / A.9.2 | Alternative considered against OpenAI ChatGPT Enterprise. Final packet should compare training-use, privacy/DPA, retention, commercial-use, and pricing posture. |
| audit trail | City of Mesa — Innovation and Performance Office | provided | — | — | GOVERN-4.2 / MANAGE-4.1 | ISO/IEC 42001 A.6.2 / A.10.2 | Agency type: city. Contact path: procurement@example.gov. |

## Missing evidence before final archive

- Approval date or decision date
- Captured source text, retrieval timestamp, and SHA-256 snapshot hash

## Final archive requirements

- Attach captured source text and immutable snapshot hashes for every relied-upon policy version.
- Re-run AIRIN verified evidence gates before treating any vendor clause as cited support.
- Keep selected vendor reasoning, alternatives considered, known risks, mitigations, and caveats separate.
- Preserve this packet for audits, public-records requests, council questions, grant compliance, renewals, and vendor disputes.