OpenAI implements new security mandates and targets higher valuation

OpenAI is introducing new regulatory requirements for model routers and AI gateways, effective November 20, 2026. Under updated usage guidelines, external hosting partners and resellers must implement security measures that meet OpenAI’s internal standards. These partners will also be required to independently investigate potential violations and coordinate countermeasures with the company. To balance privacy with security audits, OpenAI is introducing SafetyIDs, which allow for the identification of end-users during investigations without revealing their actual identities.

In a separate strategic move, OpenAI is tightening usage limits on its subscription plans to improve profitability and financial sustainability. This shift coincides with reports that the company is seeking a valuation increase toward $1.4 trillion as it prepares for a potential initial public offering (IPO). Analysts suggest these measures are part of a broader effort to improve the company’s financial health and long-term growth prospects.