OpenAI sells ChatGPT subscriptions and API access to frontier AI models.

That users and enterprises will pick the agent they trust over the one with the most users — even while launching expensive, small and late.

At DevDay in late September 2026, Sam Altman unveiled Dots and told the crowd OpenAI wants to 'set a new standard for privacy in frontier AI', taking veiled shots at Meta's Muse, which had launched two months earlier as the self-declared safe agent.

Codex product lead Alexander Embiricos said onstage that OpenAI is focused on the 'most trustworthy, safe, and secure assistant'; Altman demoed controls letting users cap what Dots can spend. Head of app platform Glen Coates argued OpenAI is 'in a different position to Meta in that they don't have an AI product that has 1.2 billion users', and that 'launching something that makes those kinds of mistakes is something that we would try to take the care to avoid'. Enterprise customers got a framework for stronger data controls and zero data retention options.

Muse's zero-day and privacy incidents handed OpenAI the trust angle: the pitch is that OpenAI would avoid the mistakes of a 1.2-billion-user platform.

Privacy is built in as product features — hard user-set rules like purchase caps — rather than promises about architecture.

Enterprise buyers get stronger data controls and zero-retention options, turning privacy from marketing into a procurement requirement.

Launching on $100-and-up tiers keeps the user population small; The Verge noted there haven't been many privacy scandals with Dots, though fewer people use it.

When a rival's growth outpaces yours, selling trust at a higher price can be the differentiation — but scarcity of users is also scarcity of evidence that you are safer.

As of October 9, 2026, Dots is live on the top ChatGPT tiers with no major privacy scandals reported — which may partly reflect its small user base, as The Verge observes. Muse remains far larger, having gained 600,000 US daily active users within weeks of launch per Apptopia, and Meta still plans a way to 'cryptographically and verifiably prevent Meta from accessing data in your VM' later in the year.

FOLLOW THE EVIDENCE

The sources

  1. AI agent makers are promising privacy — will they deliver? theverge.com