Where Does Your Data Go? ChatGPT vs Claude vs Microsoft 365 Copilot Data Residency for Australian Businesses (2026)

Winner: Microsoft 365 Copilot for Australian businesses that need prompts stored onshore. If your Microsoft 365 tenant is set up in Australia, stored Copilot chats sit in Australia under Microsoft's standard contract terms. No add-on is needed. ChatGPT offers Australian storage only on Enterprise and Edu. Claude offers no Australian option from Anthropic directly, only through Amazon Bedrock. None of the three apps yet guarantees that the AI processing itself happens in Australia.

The split: if processing must stay onshore too, the answer is Claude on Amazon Bedrock with the au profile. It needs a developer. For everyone else, Copilot wins: no build, and most already run Microsoft 365.

Last reviewed: 23 October 2026 by Adam. General information only, not legal advice. Scores are carried from our full reviews; this piece does not re-score any tool.

Quick comparison

Storage versus processing: the distinction that matters

Two different things get called "data residency". Vendors blur them. You shouldn't.

Storage at rest is where your chats, files and history are kept once saved. Processing (vendors call it inference) is where the AI model actually runs on your prompt. A tool can store your chats in Sydney and still send each prompt to a GPU in the US or Europe to be answered.

For most Australian businesses, storage is the bigger question. It decides where your records live, who can be compelled to hand them over, and what you tell clients. Processing matters most if you handle health, government or other sensitive data under a contract that says "onshore only".

Here is what each vendor's own documentation says, read on 23 October 2026.

ChatGPT: Australian storage on Enterprise, no Australian processing

OpenAI lists Australia as a data residency region for ChatGPT. The catch is the plan. Its help centre says "eligible API customers and new ChatGPT Enterprise/Edu customers" can choose in-region storage. It is included at no extra cost on those plans.

What is stored in Australia: conversations, files, memory, custom GPTs, image generation inputs and outputs, and data-analysis artifacts, including backups. What may sit elsewhere: workspace metadata, billing, logins, and anything sent through connected apps or web search.

Processing does not stay here. OpenAI's separate "inference residency" covers only Europe, the US and the UAE. Australia is not on that list. Your stored chats live in Australia; the model answering them runs offshore.

Three more points worth knowing:

• Existing workspaces. The wording is "new" Enterprise and Edu customers. OpenAI's page describes storage for a new workspace "provisioned with data residency" and does not address moving an existing one. If you already run Enterprise, ask OpenAI whether your workspace can move.
• Healthcare. OpenAI's earlier expansion announcement, cited in our ChatGPT review, also named ChatGPT for Healthcare. Today's help article names only Enterprise, Edu and the API. If you run Healthcare, confirm with OpenAI.
• Business plan. ChatGPT Business (formerly Team) does not get Australian storage. It does get the no-training default.

Training: OpenAI says data from Business, Enterprise, Edu and the API is not used for training by default. On Free, Go, Plus and Pro, a setting called "Improve the model for everyone" controls training. Our ChatGPT review treats it as on by default; switch it off in Settings, Data Controls.

Claude: no Australian option from Anthropic, a real one on AWS

Anthropic is blunt about it. For its commercial products (Team, Enterprise and the API), its privacy centre says traffic may be routed to "select countries in the US, Europe, Asia and Australia" by default, but "data is stored in the US".

The developer docs confirm it. For the Claude API, inference can be set to "global" or "us" only, and "workspace geo" (where data is stored) is US-only. There is no Australian setting. Choosing US-only inference costs 10% more on current models.

We found no Australian storage option for Free, Pro or Max in any Anthropic document. Enterprise residency controls exist, but on today's documentation they are US-only.

The Australian route is Amazon Bedrock. AWS runs Claude models in its Sydney (ap-southeast-2) and Melbourne (ap-southeast-4) regions. AWS says the au cross-region profile "routes only among Australian Regions". Claude Opus 5.5 is also available in-region in Melbourne. AWS says model providers, Anthropic included, have no access to Bedrock prompts or completions.

Two cautions on Bedrock:

• Pick the right prefix. The apac and global profiles can send prompts offshore. Only au keeps them in Australia. AWS tells you to check destination regions yourself rather than trust the prefix.
• It is not the Claude app. Bedrock is a developer platform. You need someone to build or buy a front end on it. It is not a drop-in replacement for Claude Team.

Training: Anthropic says commercial products (Claude for Work and the API) are not used for training by default. On Free, Pro and Max, chats are used only if you choose to allow it in your settings. Incognito chats are excluded.

Microsoft 365 Copilot: Australian storage by default, processing promised

Microsoft is the only one of the three that stores Australian business prompts onshore without an upgrade. Its Product Terms commit to storing "any stored content of interactions with Microsoft 365 Copilot or Microsoft 365 Copilot Chat" at rest in the tenant's geography. Australia is on the list. Copilot was added on 1 March 2024 and Copilot Chat on 1 September 2025. Microsoft says these commitments come "at no additional cost".

The condition is your tenant's default geography, set when the tenant was created. Check it in the Microsoft 365 admin centre under Settings, Org settings, Organisation profile, Data location. If it does not say Australia, these commitments do not apply to you.

Paid add-ons (Advanced Data Residency and Multi-Geo) extend the commitments. Most small and mid-sized businesses will not need them for Copilot.

Processing is the gap. Microsoft's privacy page says customers outside the EU "may have their queries processed in the US, EU, or other regions". In November 2025 Microsoft promised in-country Copilot processing for Australia by the end of 2025. An editor's note dated 3 April 2026 pushed that back: local inferencing is now "expected to become available in Australia" by the end of 2026. As of 23 October 2026, Microsoft has not announced it. The editor's note still says "expected", and the Copilot privacy page makes no Australian processing commitment.

Three more points:

• Anthropic models inside Copilot. Microsoft's privacy page says it offers Anthropic and OpenAI models in Copilot as subprocessors, and admins decide whether to use them. It also says the Anthropic models are excluded from the EU Data Boundary. Read Microsoft's subprocessor terms before switching them on.
• Education tenants are different. Without the Advanced Data Residency for Education add-on, Microsoft may store Office 365 Education data anywhere in the EU or North America. Australian schools and universities should check their contract.
• Name change. Microsoft has renamed Microsoft 365 Copilot to "Microsoft Copilot" in its docs. The residency commitments did not change.

Training: Microsoft says prompts, responses and data accessed through Microsoft Graph "aren't used to train foundation LLMs".

Our Microsoft Copilot review also covers Microsoft's IRAP PROTECTED status for its Australian regions, which matters for government suppliers.

The Privacy Act angle: APP 8

If you put customer or staff personal information into an AI tool, the Privacy Act may apply. Australian Privacy Principle 8 deals with sending personal information overseas.

The OAIC's guidance says three things worth knowing:

1. Reasonable steps. Before disclosing personal information to an overseas recipient, you must take reasonable steps to make sure it does not breach the APPs. An enforceable contract is generally expected.
2. You stay accountable. Under section 16C, you can be held responsible if the overseas recipient mishandles the information.
3. Disclosure or use. Giving data to an overseas provider that can access it is generally a disclosure. It can be a "use" instead only in limited cases, where a binding contract limits the provider to storage and you keep effective control. Even then, you still "hold" the information and remain responsible for it.

Australian storage reduces your APP 8 exposure. It does not remove it while prompts are processed offshore. Small businesses with annual turnover of A$3 million or less are generally exempt, with exceptions such as health service providers. A business that has topped A$3 million in any year since 2002 stays covered. Get advice on your own position.

Which to pick: by business size

Sole trader or micro business (1 to 5 people). None of the three gives you onshore storage at your price point unless you already pay for Microsoft 365. If you do, use Copilot Chat: your stored chats sit in Australia by default. If you use ChatGPT Plus or Claude Pro, switch off model training and keep client personal information out of prompts.

Small business (5 to 50 people). If you run Microsoft 365, Copilot is the default answer for residency. ChatGPT Business and Claude Team give you no-training defaults but US storage. That is acceptable for marketing copy, not for client files in health, legal or finance.

Mid-sized business (50 to 500 people). If your contracts or industry require onshore storage, the realistic options are Copilot or ChatGPT Enterprise. If you need Claude specifically, build on Bedrock with the au profile. If you need onshore processing as well, nothing on this list fully clears the bar today except Claude on Bedrock.

Regulated or government-facing. Bedrock in Sydney or Melbourne is the only route here with Australian processing you can configure today. Copilot is close behind if Microsoft delivers in-country processing by year end. Get qualified legal advice before deciding; this article doesn't replace it.

The verdict

Unless you have a specific need for onshore processing, pick Microsoft 365 Copilot for data residency. It is the only tool of the three that stores Australian prompts in Australia by default, on standard terms, with no extra licence. ChatGPT Enterprise matches it on storage, but pricing is custom and sales-led. Claude's direct offering keeps everything in the US.

The surprise is Claude on Amazon Bedrock. It is the only option here that keeps both storage and processing in Australia today. It takes development work, so it suits businesses with a technical team, not a five-person office.

Watch Microsoft's end-of-2026 processing promise. It has slipped once already.

Sources

All read on 23 October 2026. Wayback captures were requested the same day; archive.org dates its captures in UTC, so 22 Oct captures are 23 Oct in Australia. Rows without a capture say why.

The AI Directory Australia is an independent editorial publication. General information only, not legal advice. Read our Methodology.