Publicly reachable custom GPTs

Last updated Oct 17, 2026 Preview Policies

AI summary

Custom GPTs reachable outside your workspace by link or through the GPT store expose their instructions and knowledge files to anyone outside your organization. Change the sharing to invite-only or delete the GPT if it is no longer needed.

Severity: High Information Oversharing Recommended Preview

What it detects

Detects custom GPTs reachable outside the workspace by link or through the GPT store.

Why it matters

A GPT published to the store or shared by open link is reachable by anyone who has the link, including people outside the company. Its instructions and knowledge files travel with it, so anything the builder pasted in for convenience is now outside the tenant. Change its sharing to invite-only in the GPT's settings: the Admin API cannot change visibility, and Isolate only removes the people it was shared with by name. Delete it only once the owner confirms it is not needed.

The rule

Every ChatGPT Custom GPT where Publicly Reachable is true

In Rencore Governance

Details

Applies to	ChatGPT custom GPT
Connector	ChatGPT Enterprise
Severity	High
Category	Information Oversharing
Recommended	Yes
Recommended automation	None
License type	Standard

Other policies that check ChatGPT custom GPT objects:

Custom GPT calls an external domain without authentication (High)
Custom GPT with an inactive owner (Medium)
Shared custom GPTs affected by the GPT retirement (High)
Stale custom GPT (Low)
Workspace-wide custom GPTs with editable configuration (Medium)

Frequently asked questions

What does the publicly reachable custom GPTs policy detect?

The Publicly reachable custom GPTs policy detects custom GPTs reachable outside the workspace by link or through the GPT store.

Which objects does the publicly reachable custom GPTs policy check?

The Publicly reachable custom GPTs policy checks ChatGPT custom GPT objects from the ChatGPT Enterprise inventory and reports each one that matches its rule as a violation.

How severe is a violation of the publicly reachable custom GPTs policy?

Violations of the Publicly reachable custom GPTs policy have High severity. The policy is in the Information Oversharing category.

Which module includes the publicly reachable custom GPTs policy?

The Publicly reachable custom GPTs policy comes with the ChatGPT Enterprise connector (in preview) in the AI & Agents module of Rencore Governance, an add-on module on the Premium and Enterprise Plans.

Was this page helpful?