rencore.com (opens in a new tab) Start a trial (opens in a new tab)
Reference

ChatGPT activity

Last updated Preview Inventory ChatGPT Enterprise

AI summary

Rencore Governance collects and retains ChatGPT activity data beyond OpenAI's 30-day window, recording who did what and when across your ChatGPT Enterprise workspaces. Properties tracked include user actions, authentication methods, event types, OAuth scopes, and risk scores, all tied to specific users and workspace instances. You can configure scanning intervals from daily to monthly and specify whether data is removed during incremental scans.

Ingested ChatGPT activity: who did what and when, retained beyond OpenAI's 30-day window

Part of the ChatGPT Enterprise inventory.

In Rencore Governance

The ChatGPT Activity inventory page in Rencore Governance: counts, trend, violated policies and the list of objects
The inventory page in a Rencore demo Environment, captured October 2026.

Scan settings

Default scanning interval Allowed scanning intervals Data removal during incremental scan
Daily Daily, Weekly, Bi-Weekly, Monthly, Never, Initial No

Properties

Property Type Description Automation placeholder
Actor Type String Whether a person, a service account, an agent or the system performed the action. {{ChatGPTActivity.ActorType}}
Key String Internal. {{ChatGPTActivity.ApiKeyEncrypted}}
Auth Provider String How the user authenticated. A password value means the login bypassed SSO. {{ChatGPTActivity.AuthProviderName}}
Codex Client String Which Codex client produced the event: CLI, IDE, web, desktop, GitHub Action or Slack. {{ChatGPTActivity.CodexClientId}}
Initially Scanned DateTime Shows when this object was initially found in a scan. {{ChatGPTActivity.CreatedTime}}
Display Name String {{ChatGPTActivity.DisplayName}}
Event Type String The specific action. The AUDIT_LOG alone carries 245 of these, so treat the set as open. {{ChatGPTActivity.EventType}}
Granted Scopes String Scopes granted to an OAuth application. Names only; no token material is ever stored. {{ChatGPTActivity.GrantedScopes}}
Event ID String {{ChatGPTActivity.Id}}
Last scan update DateTime Shows when this object was last updated in a scan. If an object is found during a scan but no property has been changed this date will not change. {{ChatGPTActivity.LastModifiedTime}}
Log Stream String Which compliance log the event came from. Allowed values: AUDIT_LOG, AUTH_LOG, CODEX_LOG. {{ChatGPTActivity.LogStream}}
M365 User User {{ChatGPTActivity.M365User}}
M365 User Name String {{ChatGPTActivity.M365UserName}}
OAuth Client String The OAuth application a token was issued to, for token events. {{ChatGPTActivity.OAuthClientId}}
Occurred At DateTime {{ChatGPTActivity.OccurredAt}}
Risk Score Int32 Stores risk score {{ChatGPTActivity.RiskScore}}
Risk Score Update DateTime Stores risk score update {{ChatGPTActivity.RiskScoreLastUpdate}}
Risk Score Value String Stores risk score value like Low_Low {{ChatGPTActivity.RiskScoreValue}}
Actor ChatGPT user The acting user, where the event has one. {{ChatGPTActivity.User}}
Actor Email String {{ChatGPTActivity.UserEmail}}
Actor Name String {{ChatGPTActivity.UserName}}
Workspace ChatGPT Workspace {{ChatGPTActivity.Workspace}}
Workspace Name String {{ChatGPTActivity.WorkspaceName}}

Relations

Relation Connector Description
ChatGPT user ChatGPT Enterprise Every user in the connected ChatGPT workspace, with role, seat, spend and the Entra ID join
ChatGPT Workspace ChatGPT Enterprise The connected ChatGPT Enterprise workspace, its granted scopes and its coverage gaps
User Microsoft 365 All users registered in your tenant (internal, external)

Segments

This object does currently not have any segments.

Actions

This object does currently not have any actions.

Frequently asked questions

What is the ChatGPT activity object in Rencore Governance?

Ingested ChatGPT activity: who did what and when, retained beyond OpenAI's 30-day window. ChatGPT activity is an object type in the ChatGPT Enterprise inventory of Rencore Governance.

Which properties does Rencore Governance collect for ChatGPT activity?

Rencore Governance collects 23 properties for ChatGPT activity, such as Actor Type, Key, Auth Provider and 20 more.

How often is ChatGPT activity scanned?

By default daily. You can change the scan interval of ChatGPT activity objects under Configure objects (daily, weekly, bi-weekly, monthly, never or initial (collected once)). The interval is a target, not a guarantee: a scan can run later than planned.

Which module includes the ChatGPT Enterprise connector?

The ChatGPT Enterprise connector is part of the AI & Agents module of Rencore Governance, an add-on module on the Premium and Enterprise Plans. The connector is in preview.

Related pages

Related pages