service coherevendor Coherecategory Model APIs
Depends (Caution)Trial keys: Cohere may use your inputs and outputs for research and to improve its products (de-identified first). Paid (Enterprise) users have an opt-out toggle under Settings → Data Controls; the default for paid accounts is not stated.
Trial keys: Cohere may use your inputs and outputs for research and to improve its products (de-identified first). Paid (Enterprise) users have an opt-out toggle under Settings → Data Controls; the default for paid accounts is not stated.
We may use this input and output data to conduct research and development. This includes analyzing usage trends and using inputs/outputs to improve the performance and safety of Cohere Products.
SaaS platform logs are deleted after 30 days unless flagged, contractually required, or opted into training.
We automatically delete logged prompts and generations after 30 days, unless we need it to comply with a legal requirement or customer contract, or unless your usage is flagged as potentially violating our terms
Against the 21 tools that state a period (grey dots):
Email support@cohere.com. Only for enterprise customers who make extra usage commitments. Usage data is still collected.
we only allow ZDR for enterprise customers who can make additional commitments about their usage of the Cohere Services.
Flagged prompts/generations can be retained and reviewed; de-identified flagged data may be aggregated for safety evaluation.
If your usage is flagged as potentially violating our terms, including the Usage Policy, we may retain and review the flagged user prompts and associated logs to enforce our policies.
The SaaS platform runs on Google Cloud in US-Central, with no servers outside the US. Cohere can set up an 'ephemeral' mode where customer data is not stored. Private and third-party cloud deployments keep data in your own environment.
Our hosting centers are on Google Cloud Platform servers located in US-Central. We do not use servers outside of the US
request a copy of our certifications (including ISO 27001 and ISO 42001) or of our SOC 2 Type II Report
Announced Nov 2025 for custom model development engagements. Whether it extends to the hosted API is not stated.
We are pleased to offer a HIPAA-compliant Business Associate agreement (BAA) to enable customers across the healthcare industry to work with us to develop secure custom models that meet their specific business needs.
VPC, on-premises, or Cohere-managed Model Vault; Cohere states it has no access to data in private deployments.
Deploy through your virtual private cloud (VPC), on-premises setup, or dedicated, Cohere-managed Model Vault.
Spotted something wrong or out of date? Corrections are welcome; see how to send one. How statuses are assigned.