What changed
OpenAI published cross-provider safety requirements and said updated Usage Policies take effect 20 November 2026. Services that directly expose OpenAI models, including routers and AI gateways, must obtain OpenAI review and approval, maintain safeguards and coordinate enforcement.
Why it matters
Teams can no longer assume that routing through a marketplace or gateway leaves safety enforcement solely to the model vendor; provider approval, abuse monitoring and cross-service restriction handling become procurement and architecture requirements.
What to do
Inventory every router, reseller and hosted endpoint that exposes OpenAI models, obtain the provider's approval status and enforcement documentation, map logging and incident coordination, and prepare a fallback before the effective date.
Caveat
The announcement states policy direction, not a complete implementation guide or public registry of approved providers. Contract interpretation, regional obligations, enforcement mechanics and migration consequences require direct confirmation with OpenAI and each service.