OpenAI previewed Private Safety Processing on 19 August, a safety layer designed to look across related interactions without giving OpenAI personnel access to the underlying content. Zero Data Retention already promises eligible API customers that prompts and responses are not retained after a request is processed, and that enterprise content is not used for training unless the customer opts in. The new piece addresses the gap that made that promise awkward for frontier deployments: existing ZDR-compatible safety systems evaluate each interaction individually.
The mechanism is deliberately narrow. For ZDR deployments customer content stays on infrastructure the customer controls, with a further option being developed in which content sits on OpenAI infrastructure encrypted under customer-held keys; in both cases automated systems return limited safety signals rather than exposing prompts or responses. The reason this arrives now is that some recent frontier-model deployments required customers to permit retention for safety monitoring, which collides with their own security obligations.
The stated risk model is about sequences, not single messages: repeated probing of safeguards, coordination across accounts, threats disguised as research, or an agentic task that keeps acting after being told to stop. That framing puts retention policy inside the agent security boundary rather than beside it, and it rhymes with the way GPT-6 Astra turned the API call into a managed run.
This is a preview, and the announcement describes design intent rather than an audited deployment. The condition to watch is whether the customer-held-key option ships with a published key-handling and signal scope, because without that the phrase private safety processing stays a promise about internal access controls.