Work with us
AI tools / Autonomous AI agents / ChatGPT dots

How to govern ChatGPT dots

Always-on agents a person creates inside ChatGPT that connect to their apps and keep working between conversations.

OpenAI · Reviewed quarterly, and when the vendor ships a capability change or a customer declares the tool · Last reviewed 16 Oct 2026

No governance change First entry for this tool, split from ChatGPT because a dot is an agent a person creates rather than the ordinary chat. OpenAI introduced dots on 29 September: always-on agents with their own cloud computer that connect to the apps a person chooses, take on ongoing work and keep making progress between conversations. Rolling out to Pro and Business Premium; Enterprise is a beta, off by default. Governed from the start as an agent that changes records without routine review. Full changelog ↓

How ChatGPT dots is used

We see two common ways businesses use ChatGPT dots, and we govern each one on its own terms. If your team uses it differently, that is fine: you describe the use in your own words and Certrak works out the governance from what it actually does.

Autonomous task agent

Consequence to people: High

General-purpose AI agent that takes actions across your tools and systems - email, calendar, messaging, files

Personal informationMost outputs reviewedInternal use onlyChanges records in other systemsActs on its own
  • Review rhythm: Monthly check-in
  • Governance is mostly about: What it may be given; Safe everyday use; A person stays accountable

Workflow automation across systems

Consequence to people: Medium

Automating tasks across business systems - triggers, data movement, decisions in workflows

Internal informationNo human reviewInternal use onlyChanges records in other systemsActs on its own
  • Review rhythm: Monthly check-in
  • Governance is mostly about: Safe everyday use; A person stays accountable; Checking what it produces

Governing ChatGPT dots in practice

  1. Name one person who owns ChatGPT dots in your business. Governance starts with a name.
  2. Write down what ChatGPT dots is used for. Certrak recognises 2 common uses: Autonomous task agent and Workflow automation across systems. Yours may differ; write down yours.
  3. Decide what ChatGPT dots may and may not be given. Personal information is in scope for some uses; write the boundary down before it is needed.
  4. There is no human review of outputs. Decide whether that is acceptable for each use, and what would make you change it.
  5. ChatGPT dots can create, change, or delete records in another system without a person approving. Record which of these you allow, and who can change that.
  6. Look at this again every month, and sooner on any of these: industry incidents, vendor model updates, autonomy level changes and data classification changes.

What changed, and how Certrak responded

We record every check here, including the ones that changed nothing. A check that found no governance change proves we looked.

  1. No governance change Scheduled review

    Meet your dot

    OpenAI shipped it 29 Sep 2026.

    First entry for this tool, split from ChatGPT because a dot is an agent a person creates rather than the ordinary chat. OpenAI introduced dots on 29 September: always-on agents with their own cloud computer that connect to the apps a person chooses, take on ongoing work and keep making progress between conversations. Rolling out to Pro and Business Premium; Enterprise is a beta, off by default. Governed from the start as an agent that changes records without routine review.

    Vendor release note →