Cohere
low riskGenAI Assistantcohere.com, dashboard.cohere.comverified 2026-06-27
Data-handling profile
- Trains on input
- Yes, on the consumer tier (enterprise tier excluded)
- Retention
- Default API/SaaS prompts and generations are deleted after 30 days; may be used for model improvement unless customer enables the opt-out toggle. Enterprise customers can qualify for zero data retention. Private Deployments (AWS/Azure/GCP) keep data entirely within the customer's environment, never accessible to Cohere.
- Data region
- Global
- Certifications
- SOC 2 Type II
- DPA available
- Yes
- Breach history
- none known
- EU AI Act
- Enterprise-focused vendor with private-deployment options that keep data in customer-controlled environments, reducing EU AI Act high-risk data-processing exposure when configured accordingly.
Sources
- https://cohere.com/enterprise-data-commitments
- https://cohere.com/security
- https://trustcenter.cohere.com/
- https://cohere.com/privacy
Every fact above is drawn from the vendor's public documentation, reviewed by a human, and version-stamped. Monitored daily for changes.
Change history
No material changes recorded since monitoring began.