Get the weekly coverage letter
Companies change their terms without announcing it. We capture governance documents, compare each new version with the last, and publish what changed, with the source text behind it. One email a week on what we found and what we could not reach.
This page describes what the document states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability may vary by jurisdiction. Methodology
Cohere's Enterprise Data Commitments describe how Cohere handles the prompts and outputs generated by paying customers. By default, Cohere logs your activity, keeps prompts and generations for up to 30 days after you delete your account, and may retain them longer for legal or contractual reasons — but you can opt out of having your data used for model training at any time through your dashboard settings. These protections apply only to paying customers with a credit card on file; free-tier users are explicitly excluded.
Cohere's Enterprise Data Commitments establish the data handling obligations and protections that apply exclusively to commercial, paying customers — defined for the SaaS Platform as customers with a credit card on file. The document sets out a default 30-day automatic deletion schedule for logged prompts and generations, subject to exceptions for legal requirements, customer contracts, or flagged potential policy violations, and provides that account deletion does not itself trigger immediate data removal. Access to prompt and generation logs is restricted to authorized employees and service providers bound by confidentiality and security controls, with a permissive right for safety and security teams to review content upon detection of possible misuse. Users retain self-service control over training use via a dashboard opt-out, and approved customers may obtain zero data retention status eliminating logging entirely; customers who deploy through third-party cloud or private environments receive structural data isolation because Cohere does not receive their prompt or generation data at all. Customers who upload personal information about their own end users bear responsibility for compliance with applicable privacy laws with respect to that data.
As a paying Cohere SaaS customer, your prompts and generated outputs are logged and monitored for compliance and security purposes, and they persist on Cohere's systems for up to 30 days after account deletion — potentially longer if legal requirements, a customer contract, or a flagged policy concern applies. Cohere's safety and security teams may review your prompt and generation content if possible misuse is detected. You can stop your prompts and generations from being used to train Cohere's models at any time by changing the relevant setting in your dashboard. If you qualify for and are approved for zero data retention, no prompts or generations are logged at all.
Which mapped governance frameworks each document engages, tied to the specific provisions that engage them.
2 important changes detected
25 versions captured · Latest change detected by ConductAtlas: September 2026
We withheld clauses we had published from this document. Each withholding is recorded in our correction log:
Every distinct legal provision identified in this document. Featured provisions appear above with analysis.
Cohere has updated this document before. Monitor includes alerts from a daily check, structured change summaries, and monitoring for up to 20 platforms.
Need provision-level monitoring and regulatory mapping? Insight includes governance timelines, drift analysis, and full provision tracking.
Cross-platform context
See how other platforms handle Access to prompts limited to authorized personnel and similar clauses.
Compare across platforms →Governance Monitoring
Structured alerts for policy changes, governance events, and provision updates across 343 platforms.