Cohere states that it holds security certifications such as SOC 2 and follows industry-standard security practices to protect enterprise customer data.
This analysis describes what Cohere's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
Security certifications provide independent third-party validation that a vendor's data security practices meet defined standards. For enterprise customers, particularly in regulated industries, verifying these certifications is a standard component of vendor due diligence.
Interpretive note: The specific certifications, their scope, and current validity are not fully detailed in the extracted document content; verification with Cohere directly is required to confirm current certification status.
The updated terms establish specific data handling practices for Cohere's SaaS Platform: customer prompts and generations are automatically deleted after 30 days unless flagged for potential policy violations or required by law or contract; Cohere logs and monitors usage for compliance and security; and safety teams may review flagged content to enforce policies. The terms state that data intended for training purposes may be retained separately according to your agreement, and that you can opt out of training data use by toggling 'Data Controls' off in your dashboard settings. You can verify and adjust these settings at any time under Settings > Data Controls in the Cohere Platform.
View change record →According to this document, Cohere maintains SOC 2 compliance and other security certifications relevant to enterprise data protection. Enterprise customers in regulated industries should request copies of current audit reports and confirm which specific certifications apply to the services they use.
How other platforms handle this
If you choose to reveal any personal information about yourself to other users, you do so at your own risk. We strongly encourage you to use caution in disclosing any personal information online.
When you are asked to provide information, you may decline to do so; but if you choose not to provide information that is necessary to provide some of our Services, you may not be able to use those Services.
to object to profiling activities based on our own legitimate interests
"Cohere maintains security certifications and compliance programs to protect enterprise customer data, including SOC 2 compliance and other industry-standard security frameworks.Excerpt from Cohere's Enterprise Data Commitments
(1) REGULATORY LANDSCAPE: SOC 2 compliance is referenced as a security measure but does not on its own constitute compliance with GDPR, HIPAA, or financial services regulatory requirements.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
Security certifications provide independent third-party validation that a vendor's data security practices meet defined standards. For enterprise customers, particularly in regulated industries, verifying these certifications is a standard component of vendor due diligence.
According to this document, Cohere maintains SOC 2 compliance and other security certifications relevant to enterprise data protection. Enterprise customers in regulated industries should request copies of current audit reports and confirm which specific certifications apply to the services they use.
ConductAtlas has identified this type of provision across 290 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Cohere.