Every day, millions of people across Europe use OpenAI’s tools to learn, create, work and manage everyday tasks. Our tools also support businesses of all sizes and governments across the region. We believe responsible AI can help drive Europe’s competitiveness and prosperity. As the EU AI Act enters its next phase, we’re sharing how we have strengthened our approach to safety, security, transparency and provenance in line with the EU framework—and how we will continue to evolve our practices as AI advances.

Our longstanding commitment to responsible AI is central to the EU AI Act. For years, we have developed governance approaches and supported workable rules that help people benefit from AI safely. We contributed to and endorsed two Codes of Practice: the EU’s General‑Purpose AI [GPAI Code] and the Code of Practice on Transparency of AI‑Generated Content. Our work rests on internal governance and collaboration with external experts, governments, and peer organizations. The Preparedness Framework, in place since 2023 and updated in 2025, sets out how we identify, evaluate, and manage serious risks from advanced AI systems. Our Frontier Governance Framework builds on that foundation and explains how our safety and security practices align with emerging legal requirements, including the EU AI Act’s GPAI Code. Through the Frontier Model Forum, collaborations with US CAISI and UK AISI, and work on third‑party evaluation practices, we have supported shared safety research, external testing, and clearer evaluation standards across the ecosystem.

Advancing transparency and trust, our support for the Code of Practice on Transparency of AI‑Generated Content builds on years of research, product development, and collaboration to improve provenance for AI‑generated media. OpenAI’s approach to provenance relies on two systems that reinforce each other: Content Credentials (C2PA) help content carry detailed context; while Synth ID watermarks help preserve a signal when metadata does not survive. We are expanding that work to include audio outputs in addition to images. Consistent with our commitments under the Code, we are working to expand provenance measures for OpenAI’s systems across modalities, including text, as standards and tooling continue to mature.

Adapting governance in practice: the cybersecurity example. The same capabilities that can help defenders identify and remediate vulnerabilities can also create new misuse risks. Our approach is to reduce misuse while helping legitimate defenders use AI through our Trusted Access for Cyber (TAC) program, in order to strengthen collective resilience. Since launching the Open AI EU Cyber Action Plan in early May 2026, we have worked with EU and national cyber agencies, private sector partners, and critical infrastructure operators, to equip them with the most advanced cyber models, and ultimately strengthen cyber resilience across the continent. This approach aligns with the European Commission’s Action Plan on Cybersecurity and Artificial Intelligence. As implementation of the EU AI Act continues, we will keep strengthening our compliance approach and learning from regulators and the broader ecosystem, providing practical resources including model documentation, system cards, safety information, usage policies and guidance on provenance and verification tools.