Cohere · Cohere Enterprise Data Commitments · View original document ↗

Data Deletion Rights

Medium severity Medium confidence Explicitdocumentlanguage Rare · 1 of 325 platforms
Share 𝕏 Share in Share 🔒 PDF
Monitor governance changes for Cohere Create a free account to receive the weekly governance digest and monitor one platform for governance changes.
Create free account No credit card required.
Document Record

What it is

Cohere states that enterprise customers can request that their data be deleted from Cohere's systems.

This analysis describes what Cohere's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

ConductAtlas Analysis

Why it matters (compliance & governance perspective)

The right to request data deletion is a core data governance right for enterprise customers and aligns with regulatory requirements under GDPR and CCPA. The document's recognition of this right indicates a process is available, though the specific mechanism and timeline are not fully detailed in the commitments page.

Interpretive note: The document does not specify deletion timelines, scope of deletion across backups and sub-processors, or the mechanism for submitting requests; these details require verification with Cohere.

Consumer impact (what this means for users)

According to this document, enterprise customers can request deletion of their data from Cohere's platform. Customers subject to GDPR or CCPA should confirm that deletion requests can be fulfilled within the timelines required by applicable law and that deletion extends to backup systems and sub-processors.

What you can do

⚠️ These actions may provide transparency or partial mitigation but may not fully address the underlying issue. Effectiveness varies by jurisdiction and individual circumstances.
  • Delete Your Data
    Submit a data deletion request to Cohere through the enterprise contact channel. Confirm the scope of deletion (including backups and sub-processors) and the expected timeline for completion in writing.

How other platforms handle this

Mistral AI Medium

These Additional Terms apply only to the Mistral AI Products available on the Mistral AI Infrastructure and provided to customers located in the European Union that are subject to the EU Data Act (as defined below). These Additional Terms shall take effect on 12 September 2025 (the "Effective Date")...

WhatsApp Medium

Managing And Deleting Your Information. You have the right to access, correct, or delete your information in certain circumstances. We store information until it is no longer necessary to provide our Services or until your account is deleted, whichever comes first. You can delete your WhatsApp accou...

Perplexity AI Medium

Depending on your location, you may have certain rights regarding your personal information, including the right to access, correct, or delete your personal information, the right to data portability, and the right to opt out of certain data processing activities. To exercise these rights, please co...

See all platforms with this clause type →

Monitoring

Cohere has changed this document before.

Receive same-day alerts, structured change summaries, and monitoring for up to 10 platforms.

Start Watcher free trial Or create a free account →
▸ View Original Clause Language DOCUMENT RECORD
"
Enterprise customers have the right to request deletion of their data from Cohere's systems.

— Excerpt from Cohere's Cohere Enterprise Data Commitments

ConductAtlas Analysis

Institutional analysis (Compliance & governance intelligence)

(1) REGULATORY LANDSCAPE: Data deletion rights are required under GDPR Article 17 (right to erasure) and CCPA for personal data. Enterprise customers acting as data controllers under GDPR must ensure that their processors, including Cohere, can fulfill erasure requests within applicable timeframes. The document's commitment to deletion rights is consistent with these regulatory requirements, but the operational details of the deletion process require verification. Relevant enforcement authorities include EU data protection authorities, the UK ICO, and the California Privacy Protection Agency. (2) GOVERNANCE EXPOSURE: Medium. The commitment is stated but the document does not specify deletion timelines, scope (including backups and sub-processors), or the mechanism for submitting requests. These details are material to GDPR Article 17 compliance and should be confirmed in the data processing agreement. (3) JURISDICTION FLAGS: EU and EEA customers have the highest exposure, as GDPR Article 17 imposes specific obligations and timelines for erasure. California customers should confirm CCPA deletion request timelines. Healthcare customers should assess HIPAA requirements for PHI deletion. (4) CONTRACT AND VENDOR IMPLICATIONS: The data processing agreement should specify deletion timelines, the scope of deletion (including backups, logs, and sub-processor systems), and the method for submitting deletion requests. Procurement teams should confirm that deletion obligations survive contract termination. (5) COMPLIANCE CONSIDERATIONS: Compliance teams should document the deletion request process and confirm that it satisfies regulatory timelines. Data mapping should identify all systems where customer data is retained, including backups and sub-processor environments, to ensure deletion requests can be fully honored. Regular testing of the deletion process is advisable for organizations in regulated industries.

Full compliance analysis

Regulatory citations, enforcement risk, and due diligence action items.

Track 1 platform — free Try Watcher free for 14 days

Free: track 1 platform + weekly digest. Watcher: 10 platforms + same-day alerts. No credit card required.

Applicable agencies

  • FTC
    The FTC has jurisdiction over representations about data deletion practices and consumer or business data rights.
    File a complaint →

Applicable regulations

CCPA/CPRA
California, USA
GDPR
European Union
Indiana Consumer Data Protection Act
US-IN

Provision details

Document information
Document
Cohere Enterprise Data Commitments
Entity
Cohere
Document last updated
May 11, 2026
Tracking information
First tracked
May 11, 2026
Last verified
May 12, 2026
Record ID
CA-P-011333
Document ID
CA-D-00767
Evidence Provenance
Source URL
Wayback Machine
Content hash (SHA-256)
8628f8f463d454e1098b82322c6192f389628876bf5850be1d3d46adf29654e7
Analysis generated
May 11, 2026 12:20 UTC
Methodology
Evidence
✓ Snapshot stored   ✓ Hash verified
Citation Record
Entity: Cohere
Document: Cohere Enterprise Data Commitments
Record ID: CA-P-011333
Captured: 2026-05-11 12:20:05 UTC
SHA-256: 8628f8f463d454e1…
URL: https://conductatlas.com/platform/cohere/cohere-enterprise-data-commitments/data-deletion-rights/
Accessed: May 13, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Severity
Medium
Categories

Other risks in this policy

Professional Governance Intelligence

Need to monitor specific governance provisions?

Professional includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.

Arbitration clauses AI governance Data rights Indemnification Retention policies
Start Professional free trial

Or start with Watcher →

Built from archived source documents, structured governance mappings, and historical version tracking.

Frequently Asked Questions

What does Cohere's Data Deletion Rights clause do?

The right to request data deletion is a core data governance right for enterprise customers and aligns with regulatory requirements under GDPR and CCPA. The document's recognition of this right indicates a process is available, though the specific mechanism and timeline are not fully detailed in the commitments page.

How does this clause affect you?

According to this document, enterprise customers can request deletion of their data from Cohere's platform. Customers subject to GDPR or CCPA should confirm that deletion requests can be fulfilled within the timelines required by applicable law and that deletion extends to backup systems and sub-processors.

How many platforms have this type of clause?

ConductAtlas has identified this type of provision across 1 platforms. See the full comparison.

Is ConductAtlas affiliated with Cohere?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Cohere.