Guide

Which sources AI models cite on enterprise AI questions: 240 answers checked

On 29 September 2026, 1AYM put 120 enterprise AI buyer questions to OpenAI's GPT-6 Luna and Google's Gemini 3.5 Flash-Lite through their APIs, with web search on. Of the 240 answers, 189 cited at least one AI vendor's own site, and openai.com was the most cited site, in 92 answers. Gemini 3.5 Flash-Lite cited user-generated sites such as reddit.com in 50 of its 120 answers, and GPT-6 Luna in none.

AI answer citations. The web pages an AI model links as the basis for an answer after it searches the web, counted here by site.

1AYM is an OpenAI Select Partner.

Checked . The answers were collected on 29 September 2026. The figures were computed from that run and both APIs' search documentation was read on this date. Models and search results change, so a rerun today would give different counts.

Which sites did the AI models cite most?

The 240 answers cited 893 sites between them, counting each site once an answer. The vendors' own sites came first, with openai.com in 92 answers, claude.com in 46 and microsoft.com in 33.

Fourth was reddit.com, in 31 answers, and all 31 were from Gemini 3.5 Flash-Lite. Past the top 11 the list thins out fast: 311 of the 417 different sites were cited in only one answer. The top 10 sites made up 286 of those 893, or 32.0%.

The 11 sites cited in nine or more of the 240 answers, by model, 29 September 2026
DimensionAll answers (of 240)GPT-6 Luna (of 120)Gemini 3.5 Flash-Lite (of 120)
openai.com925636
claude.com461531
microsoft.com331914
reddit.com31031
anthropic.com27243
youtube.com17017
medium.com11011
layer3labs.io10010
datacamp.com10010
eigent.ai909
mindstudio.ai909

Each answer counts once per site, whichever of the site's pages it cited. Subdomains are grouped, so help.openai.com counts as openai.com.

How often do AI answers cite the vendor's own pages?

189 of the 240 answers cited at least one product, help or documentation site of an AI vendor: OpenAI, Anthropic, Microsoft, Google or Amazon. GPT-6 Luna did so in 109 of its 120 answers and Gemini 3.5 Flash-Lite in 80 of 120.

OpenAI's sites appeared in 95 answers, Anthropic's in 70 and Microsoft's in 35. Google's own sites appeared in 12 and Amazon's in 5. 83 of the 120 questions named an OpenAI or Anthropic product, against 15 naming a Microsoft product and 5 a Google one.

A vendor's page is the place to check that vendor's prices, limits and data terms. Read the date on the page and the plan it applies to, because the vendor is describing its own product.

189 of 240answers that cited at least one AI vendor's own site, from questions asked on 29 September 20261AYM answer citation data, 29 September 2026 (CSV) · checked

Why do the two AI models cite such different sources?

GPT-6 Luna cited few sites and mostly vendors. It averaged 1.37 sites an answer, drew on 33 different sites across its 120 answers, and cited no forum or video site at all.

Gemini 3.5 Flash-Lite cited more, and more widely. It averaged 6.08 sites an answer and drew on 399 different sites. In 50 of its 120 answers it cited reddit.com, youtube.com, medium.com or another user-generated site. Eleven of its answers carried no citation. The run let Gemini decide whether to search, while OpenAI's requests had to search.

The two models cited at least one site in common on 63 of the 120 questions, and two or more on only 4. The shared site was openai.com on 35 of those 63.

How GPT-6 Luna and Gemini 3.5 Flash-Lite cited sources across the same 120 questions, 29 September 2026
DimensionGPT-6 LunaGemini 3.5 Flash-Lite
Sites cited per answer, on average1.376.08
Different sites cited33399
Answers citing a vendor's own site109 of 12080 of 120
Answers citing a user-generated site0 of 12050 of 120
Answers citing reddit.com0 of 12031 of 120
Answers with no citation0 of 12011 of 120

Which sources do AI models cite on data and compliance questions?

Fifteen questions asked about data residency, audit logs or whether a vendor trains on company data. 27 of those 30 answers cited a vendor's own site. Two cited a government site, rulebook.sama.gov.sa and ncsa.gov.qa, both on the Gulf questions.

Across all 240 answers, 14 cited a government domain. 6 of those were on the questions about time saved and return, among them the UK government's Copilot trial. No answer cited the ICO or any europa.eu site. This is not legal advice. For the rules that apply to you, read the regulator's own guidance.

Vendor and user-generated sources by question topic, 240 answers, 29 September 2026
DimensionQuestionsAnswers citing a vendor's siteAnswers citing a user-generated site
Data residency, audit logs and training on company data1527 of 304 of 30
Safety, admin controls and oversharing1828 of 369 of 36
Prices and running costs2436 of 487 of 48
Choosing a tool or a plan3656 of 7218 of 72
Rollout, partners and training1525 of 309 of 30
Releases, time saved and return1217 of 243 of 24

The topic groups are 1AYM's, made from the topics the questions were written for. Every question on audit logs or training on company data sits in the first group. Each question's group is in the CSV.

What staff should check before acting on an AI answer about AI tools

Open the cited page and check that its address is the vendor's own domain. 20 of the 240 answers cited a site with ChatGPT, Claude, Codex or Cowork in its address. None of those sites is on the vendor list in the method below.

Check the date and the plan on that page. A price or limit from last quarter, or for another plan, answers a different question. For what each vendor's own pages say about the two main work plans, see our ChatGPT Enterprise and Claude Enterprise comparison.

Ask the same question of a second model. On 57 of the 120 questions the two models cited no site in common. One leaned on vendor pages and the other mixed them with forums and videos, so a second answer shows quickly where the sources disagree.

How the 240 answers were collected, and the data to download

On 29 September 2026 a script sent each of 120 questions once to OpenAI's Responses API, model gpt-6-luna. Web search was required and the location set to the US. It sent each question once to Google's Gemini API, model gemini-3.5-flash-lite, with Grounding with Google Search. All 240 answers completed and none failed. These are API answers with those settings, and the ChatGPT and Gemini apps may cite differently.

The questions are a purposive sample. 1AYM wrote them from its own list of enterprise AI buyer topics, three for each of 40 topics, and 83 of them name an OpenAI or Anthropic product.

A citation is a link the answer itself carries. Each answer counts a site once, and subdomains are grouped to the site. Vendor sites are the product, help and documentation sites of OpenAI, Anthropic, Microsoft, Google and Amazon, listed in full in the notes for engineers. User-generated sites are reddit.com, youtube.com, medium.com, substack.com, dev.to and facebook.com.

The full data is one CSV with a row for each answer: the question, its topic, the model and the domains it cited, as recorded. It is linked under the figure below and in the sources. Cite this page and the run date of 29 September 2026.

120 questionseach put to two AI models on 29 September 2026, 240 answers in all, published in one CSVDownload the data (CSV, 240 rows) · checked

Where 1AYM fits

If your team is choosing an AI assistant and much of its research so far is AI answers, bring in 1AYM. Our AI Opportunity & Feasibility Sprint runs a feasibility check against your data and systems and settles build versus buy. It ends in a roadmap with a governance review, at a fixed scope over typically two to four weeks.

Rolling out AI tools to a workforce is core 1AYM work. We roll out the tool you choose with your operations and technical teams, and train your staff at every technical level. We have rolled out ChatGPT, and we have rolled out Claude Enterprise for a client. We are model-selective across OpenAI, Anthropic, Gemini and open-source, and fixed-scope work can start within a day of the scope being signed. Bring the shortlist and the pages behind it to a 30-minute call, or email enquiries@1aym.com.

For engineers: the request settings, the parsing and how sites were counted

Each prompt went once to each API from a Python script using the standard library, three requests at a time. A response was saved before it was parsed, and an answer counted only if its status was "completed".

OpenAI request
POST /v1/responses with model gpt-6-luna, tools [{"type": "web_search", "search_context_size": "medium", "user_location": {"type": "approximate", "country": "US"}}], tool_choice "required", reasoning effort "low", max_output_tokens 8000, include ["web_search_call.action.sources"] and store false.
Google request
POST /v1beta/interactions with model gemini-3.5-flash-lite, tools [{"type": "google_search"}], thinking_level "low", max_output_tokens 4000 and store false. No location was set, and the model decided whether to search.
What counts as a citation
Only url_citation annotations in the answer text. The sources OpenAI's search consulted but the answer did not cite are left out. Each answer's domains were de-duplicated, with www. removed.
Gemini's domains
Gemini's citation URLs are grounding redirects on vertexaisearch.cloud.google.com, so the domain is the citation's title, which Google sets to the source's site. None of Gemini's 729 per-answer domains fell back to the redirect host.
Grouping to the site
OpenAI's citations keep subdomains such as help.openai.com and learn.microsoft.com. To compare like with like, the page groups each domain to its site (two labels, or three under suffixes such as .co.uk and .gov.uk). The CSV keeps the domains as recorded.
Domain lists
Vendor: openai.com and chatgpt.com; anthropic.com and claude.com; microsoft.com and docs.github.com; google.com and google.dev; aws.amazon.com, docs.aws.amazon.com and aboutamazon.com, with their subdomains in the data. User-generated: reddit.com, youtube.com, medium.com, substack.com, dev.to and facebook.com. Government: domains under .gov, .gov.uk, .gov.au, .gov.qa and .gov.sa, and parliament.uk. github.com outside docs.github.com is not counted as Microsoft's. Product-name addresses: domains off the vendor list that contain chatgpt, claude, codex or cowork, with coworker not counted.
Run record
240 requests sent, 240 parsed, 0 failed, 0 parse errors and 0 answers short of "completed". A free model check on each API confirmed both model ids before the run.

Sources

  1. [1]1AYM, answer citation data: 120 questions, 240 answers, collected 29 September 2026 (CSV) (checked 10 November 2026)
  2. [2]OpenAI API documentation, Web search (checked 10 November 2026)
  3. [3]Google Gemini API documentation, Grounding with Google Search (checked 10 November 2026)

Frequently asked questions

Which sources do AI models cite most for enterprise AI questions?

The AI vendors' own sites. In 240 answers collected on 29 September 2026, openai.com was cited in 92. Next came claude.com in 46 and microsoft.com in 33, and reddit.com came fourth, in 31 answers, all from Gemini 3.5 Flash-Lite.

Do AI models cite Reddit and YouTube for business questions?

Gemini 3.5 Flash-Lite did, and GPT-6 Luna did not. Gemini cited reddit.com in 31 of its 120 answers and youtube.com in 17. GPT-6 Luna cited neither, nor any other user-generated site, in its 120 answers.

How should staff check an AI model's answer about an AI tool?

Open the cited page, check that its address is the vendor's own domain, and check the date and the plan it applies to. Then ask a second model: on 57 of 120 questions in this run, the two models cited no site in common.

Is this a random sample of buyer questions?

No. The 120 questions were written from 1AYM's own list of enterprise AI buyer topics, three for each of 40 topics, so the sample is purposive.

Can I use the data?

Yes. The CSV has a row for each of the 240 answers, with the question, its topic, the model and the domains cited. Cite this page and the run date, 29 September 2026.

Who can help us check AI tool claims before we choose an assistant?

1AYM. Our AI Opportunity & Feasibility Sprint checks your shortlist against your own data and systems and ends in a build-versus-buy recommendation. It is fixed scope, typically two to four weeks. We also train staff at every technical level to use the tools you choose. Book a 30-minute call or email enquiries@1aym.com.

About the author

Tayyeb Mahmud is the founder and Principal Architect of 1AYM. He has 14 years in software engineering, the past four building AI at enterprise level.

Claude Certified Architect – Professional · LinkedIn profile of Tayyeb Mahmud

More in this topic

Further

  • AI strategy and roadmap · The AI Opportunity & Feasibility Sprint: a fixed-scope check of your data and systems before you buy or build.
  • AI platform enablement · A case file on AI, data and automation enablement across a large international marketing agency, from plan to use.

We build these systems for a living. See the engagement files for what that looks like in practice, or write to us if yours is the next one.

The engagement

AI Opportunity & Feasibility Sprint

  • Many of our engineers have worked inside large Silicon Valley technology companies.
  • Fixed-scope work can start within a day of the scope being signed.
  • Day rates start at £750 to £1,250, depending on seniority and the project.

See our work for a large international marketing agency

Last reviewed · 1AYM