ChatGPT Just Became an App Store. Europe Isn't Invited.

On Tuesday September 29, 2026, at Fort Mason in San Francisco, Sam Altman opened OpenAI DevDay 2026 by announcing that ChatGPT had crossed 800 million weekly active users and that 4 million developers had built on OpenAI’s platform. Then he announced what the next decade of consumer software will look like: ChatGPT is now an app platform. Third-party experiences from Booking.com, Canva, Coursera, Expedia, Figma, Spotify and Zillow now render natively inside the chat window. Eleven more brands follow before year-end — DoorDash, Target, Uber, Instacart, Peloton, OpenTable, Khan Academy, Thumbtack, Tripadvisor, The Fork, AllTrails. Any developer can start building through the new Apps SDK and submit for distribution to those 800 million users.

Buried in the fine print of the rollout page is the sentence every European business owner should read twice: “Apps are available to all logged-in ChatGPT users outside of the European Economic Area, Switzerland, and the United Kingdom.” Your customer in Lyon, Berlin, Milan, Amsterdam or Dublin cannot use any of those apps today. OpenAI says EU support is “planned,” without a date. If you own a business and you’re wondering whether to build an app inside ChatGPT or keep investing in a chatbot on your own site, this article is for you.

What actually launched: ChatGPT as a platform

The Apps SDK, now in preview, lets developers build conversational apps that live inside ChatGPT. The SDK is built on the Model Context Protocol — the open standard originally proposed by Anthropic and already used by Mistral, Google and others. Apps render UI inside the chat, respond to natural language, and plug into ChatGPT’s authentication, permissions and routing. Users type “Spotify make a party playlist” or “Zillow houses in Austin under $500K” and the app surfaces inline. ChatGPT can also summon an app automatically when it decides one is relevant.

Alongside the Apps SDK, OpenAI shipped AgentKit — a visual Agent Builder with drag-and-drop workflows, guardrails, MCP connectors, versioning and evaluation. Ramp, an early tester, says it cut agent iteration cycles by 70%. OpenAI also rolled out Dots (always-on background agents powered by GPT-6 Astra), Spaces (persistent collaborative workspaces), Sign in with ChatGPT (OAuth-style identity federation across apps), and a model refresh labeled GPT-6.1 Sol — alongside the publicly cancelled GPT-6.1 Astra that we covered on September 30.

The strategic frame is unambiguous. ChatGPT is pivoting from assistant to operating system. The analogy is iOS circa 2008: a captive user base, an SDK, a controlled distribution channel, and a review process whose criteria are entirely at the platform owner’s discretion. Decrypt’s write-up calls it OpenAI’s “walled garden” play. Implicator calls it “distribution it controls.” Both are right.

Three things that just changed for your business

1. Discovery is being rewritten. For twenty-five years, the default answer to “how do customers find my business online?” was Google. For the last two, that answer started fragmenting across Google AI Overviews, ChatGPT, Claude, Gemini and Perplexity. With the Apps SDK, OpenAI is attempting a third shift: your business is no longer a destination the user visits, it is an experience summoned inside someone else’s product. If a customer asks ChatGPT a question your business could answer, the slot goes to the brand whose app ChatGPT routes to — not necessarily to yours.

2. Europe is a different market now. This is not a technicality. OpenAI launched Apps everywhere except the EU, EEA, UK and Switzerland. The restriction echoes the Digital Services Act designation of ChatGPT as a Very Large Online Search Engine (effective August 31, 2026) and the EU AI Act Article 50 transparency enforcement that began on August 2, 2026 with €47M in opening fines. European users will likely get Apps eventually — on terms set by DSA audits, VLOSE risk assessments, and Article 50 disclosure requirements. In the meantime, every French, German, Italian, Dutch or Irish customer trying to use a ChatGPT app sees nothing. Your European market is still a web market. If you built an “app inside ChatGPT” today, you would be shipping a product your actual customers cannot open.

3. The CLOUD Act surface just widened. Every interaction inside a ChatGPT app routes through OpenAI’s infrastructure in the United States. For businesses in regulated sectors — finance, healthcare, legal, insurance, education, public sector — the conversation itself becomes a transferable record subject to U.S. jurisdiction, regardless of where the user sits. Add the ACPR recommendation for insurance (effective since December 31, 2025), the HDS data category for healthcare, the attorney-client privilege for legal, and the Osez l’IA sovereign-first push in France. The math gets ugly fast.

The two chatbot architectures, now clearly separated

OpenAI’s launch forces a question that was easy to defer last year: where should a conversation with your customer actually happen? There are now two defensible answers, and they are not the same product.

Option A — rent a slot inside ChatGPT. You build an app with the Apps SDK, submit it for review, and compete for ChatGPT’s routing algorithm to point users at you. You get distribution to the 800M-user base outside Europe. You accept that OpenAI controls ranking, policy, the UI chrome, the data path, and the review process. You accept that your European customers can’t see your app. You accept U.S. jurisdiction on every conversation. For some brands — travel, music, large-scale e-commerce with a global English-speaking audience — this is a reasonable bet.

Option B — own the conversation on your site. You install a bounded RAG chatbot on your own domain. It answers only from your documents. It works everywhere in the world, including the EU. You control the branding, the escalation flow, the lead capture, the data residency and the audit trail. You comply with Article 50 by design (a one-line AI disclosure that you own and can modify). You keep 100% of the traffic SEO sends you — which, with Google AI Overviews live in France since July 22 and converting at 14.2% versus 2.8% for traditional organic, is more valuable than ever. For most SMBs, mid-market firms, regulated sectors and anyone whose customers include Europeans, this is now the only answer that works end-to-end.

Where DoxyChat sits in this landscape

DoxyChat is Option B in a single SKU. Our chatbot runs on Mistral via Scaleway in France, with Gemini fallback. Your documents stay in a PostgreSQL database with Row Level Security isolation per tenant. The LLM only sees the chunks retrieved from your corpus — never your full database, never third-party data. The widget drops onto any website with one line of JavaScript. Deployment takes two minutes. Article 50 of the EU AI Act is handled natively — every conversation starts with the required AI disclosure. There is no U.S. jurisdiction on your conversations, because there is no U.S. infrastructure in the data path.

Pricing is flat and legible. Discovery is free — one chatbot, ten documents, 200 queries per month, enough to validate a use case before writing a cheque. Starter is €19 per month. Pro is €79. There is no per-conversation surcharge, no mandatory data cloud subscription, no per-seat tax, no five-month implementation. You can be live before OpenAI finishes reviewing a submission to its app store.

If you were considering a ChatGPT app, build one — for the global English-speaking audience that can actually access it. If your customers include Europeans, regulated verticals, or anyone who expects you to own the conversation, start with the chatbot on your site. These are complementary bets, not competing ones. OpenAI opened an app store last Tuesday. Your site is still yours. Try DoxyChat free at doxychat.com and see how a sovereign RAG chatbot handles the one audience ChatGPT apps still cannot reach.