Provision record
Cohere · Cohere Enterprise Data Commitments · View original document ↗

Just-in-time and least privilege access controls

Unique · 0 of 343 platforms
Stay ahead of the changes
Track Cohere and hear on the next check after its terms change. We check daily where we can, and show you where we can't.
Share 𝕏 Share in Share 🔒 PDF
ⓘ

This analysis describes what Cohere's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

Recent Activity

This document changed recently

Medium Sep 15, 2026

The updated terms establish explicit procedures for controlling how enterprise customer data is used on Cohere's SaaS Platform. Customers can opt out from having their prompts and generations used to train Cohere models by toggling a setting in their dashboard under 'Data Controls'. The terms state that logged prompts and generations are automatically deleted after 30 days unless needed for legal compliance, customer contracts, or if usage is flagged as potentially violating terms. Cohere also discloses that it logs and monitors platform use for compliance and security, and may review flagged content to enforce policies. You can verify and update your data control settings at any time through your account dashboard.

View change record →
Medium Aug 18, 2026

The updated terms establish explicit data handling controls for Cohere SaaS platform users. Cohere automatically deletes logged prompts and generations after 30 days unless retention is required by law, contract, or if usage is flagged for policy violations. Users can opt out from having their prompts and generations used to train Cohere models by toggling 'Data Controls' to 'Off' in their dashboard settings. Cohere logs and monitors platform use for compliance and security, and may review flagged content to enforce policies; flagged prompts are aggregated without customer identifiers to improve safety detection. You can adjust your data retention and training preferences at any time through your dashboard settings.

View change record →

How other platforms handle this

Hilton

Hilton implements risk-based security controls, including encryption and ongoing employee training, aligned with industry standards.

Kling AI

We will endeavor to ensure that, by default, we only collect and process your Data needed to provide you access to the Platform and our Services...This means that we will neither publish nor share your Data by default.

Postman

We use industry standard technical and organizational measures to secure the information we store.

See all platforms with this clause type →
▸ View Original Clause Language DOCUMENT RECORD
"
Cohere relies on just-in-time (JIT) techniques to manage who has access to our system and implements role-based accesses based on the least privilege principle.

Excerpt from Cohere's Enterprise Data Commitments

Provision details

Document information
Document
Cohere Enterprise Data Commitments
Entity
Cohere
Tracking information
First captured by ConductAtlas
May 11, 2026
Text quoted from version
CA-V-007299, captured Oct. 2, 2026
Record ID
CA-P-061872
Document ID
CA-D-000767
Evidence Provenance
Source URL
Wayback Machine
Archived bytes SHA-256 (version CA-V-007299)
b5a1f1105a46eb29ff7c39a85bdcf73778ac51b6b00e9cb59bb1a05b077f8388
Analysis generated
May 11, 2026 12:20 UTC
Methodology
Evidence
✓ Excerpt found in version CA-V-007299, captured Oct. 2, 2026 (checked Oct. 5, 2026)
Not the current version. The document's current version is CA-V-007457, captured Oct. 9, 2026; this clause has not been re-checked against it.
Citation Record
Entity: Cohere
Document: Cohere Enterprise Data Commitments
Record ID: CA-P-061872
Version: CA-V-007299
Captured: 2026-10-02 00:59:19 UTC
SHA-256: b5a1f1105a46eb29…
URL: https://conductatlas.com/platform/cohere/cohere-enterprise-data-commitments/provision/CA-P-061872/just-in-time-and-least-privilege-access-controls/
Accessed: Nov. 2, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Categories

Other risks in this policy

Get the weekly coverage letter

Companies change their terms without announcing it. We capture governance documents, compare each new version with the last, and publish what changed, with the source text behind it. One email a week on what we found and what we could not reach.

Frequently Asked Questions

What does Cohere's Just-in-time and least privilege access controls clause do?

The clause states: “Cohere relies on just-in-time (JIT) techniques to manage who has access to our system and implements role-based accesses based on the least privilege principle.”

Is ConductAtlas affiliated with Cohere?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Cohere.