Where does this provider put your AI data — and who can compel its disclosure?
| Residency | United States us |
|---|---|
| Sovereignty | Canada ca |
| Endpoints | api.cohere.com, api.cohere.ai |
| Packages | cohere (Python), cohere-ai (npm), @ai-sdk/cohere (npm), com.cohere (Java) |
How does this provider treat the data you send it? Advisory statements about documented practices — not legal advice.
| Trains on customer API data by default | Opt-out available source — 'Opt Out from Data Use in Training': 'You can opt out from your prompts and generations being used to train Cohere models in your dashboard settings at any time' — opt-out framing implies paying accounts are opted in by default; trial users are governed by Terms of Use §4(1) (retrieved 2026-10-10) |
|---|---|
| Retention (API inputs/outputs) | Logged prompts and generations are automatically deleted after 30 days, unless needed for legal/contractual compliance or flagged for terms violation; training-consented data may be retained separately. Zero data retention (no logging of prompts/generations) is available only by enterprise approval. For private deployments and third-party cloud AI/ML platforms, Cohere receives no customer inputs/outputs. source — 'Data Handling and Retention': 'We automatically delete logged prompts and generations after 30 days, unless we need it to comply with a legal requirement or customer contract, or unless your usage is flagged as potentially violating our terms' (retrieved 2026-10-10) |
| Subprocessor list | https://trustcenter.cohere.com/ — Enterprise Data Commitments FAQ: 'You can view a list of sub-processors by visiting Cohere's Trust Center' (Secureframe-hosted; lists Google Cloud, Fullstory, LaunchDarkly, New Relic, Retool, Sentry, Segment, Sendgrid, Vercel) (retrieved 2026-10-10) |
| Enterprise tier | Enterprise terms change every answer: the training opt-out toggle applies to paying accounts (credit card on file); trial/free API keys fall under the Terms of Use §4(1), which grants Cohere the right to use Customer Data to improve its offerings with no documented opt-out. ZDR requires enterprise approval ('we only allow ZDR for enterprise customers who can make additional commitments'); DPA on request via privacy@cohere.com. source — ZDR section: 'we only allow ZDR for enterprise customers who can make additional commitments about their usage of the Cohere Services… Contact support@cohere.com to make a ZDR request' (retrieved 2026-10-10) |
| Entry last reviewed | 2026-10-10 |