Provision record
Cohere · Cohere Privacy Policy · View original document ↗

Third-Party Disclosure and Service Providers

Medium severity Medium confidence Inferred from context Common · 288 of 352 platforms
Stay ahead of the changes
Track Cohere and get the diff the day its terms change.
Share 𝕏 Share in Share 🔒 PDF
Document Record

What it is

Cohere states that it shares your personal information with companies it works with to operate its services, and also discloses that your data could be transferred to another company if Cohere is acquired or merges with another organization.

This analysis describes what Cohere's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

ConductAtlas Analysis

Why it matters (compliance & governance perspective)

This provision authorizes disclosure of personal data to a defined category of third-party service providers and in corporate transaction contexts, which means your data may be accessible to multiple external parties beyond Cohere itself.

Interpretive note: The exact list of named or categorized third parties could not be confirmed from the truncated document; the description reflects standard provisions referenced in the policy's stated scope.

Recent Activity

This document changed recently

Medium Apr 29, 2026

The updated policy removes explicit language describing data retention timelines and deletion request procedures that were previously available. The prior policy stated that Enterprise Users' inputs and outputs were retained for 30 days, that Trial Users and Researchers were not intended to process personal information, and that deletion requests would normally be responded to within one month (up to three months for complex requests). The updated policy now contains only a general reference to 'retention practices' without specifying these timelines, response windows, or user-type distinctions. Users cannot determine from the updated policy what retention periods apply to their account category or what timeline to expect for deletion requests.

View change record →

Consumer impact (what this means for users)

Personal information including account data and usage information may be shared with cloud hosting, analytics, payment processing, customer support, and marketing vendors, and may be transferred to a successor entity in the event of a merger or acquisition without requiring additional consent under the stated terms.

How other platforms handle this

Ancestry Medium

These companies are subject to contractual obligations governing privacy, data security, and confidentiality consistent with applicable laws.

Adobe Medium

We will disclose personal information to companies that help us run our business to detect, prevent, or otherwise address fraud, deception, illegal activity, misuse of Adobe Services and Software, and security or technical issues.

Oura Medium

We also require these service providers to protect your personal information to at least the same standards that we do.

See all platforms with this clause type →
▸ View Original Clause Language DOCUMENT RECORD
"
We may share your personal information with third-party service providers who perform services on our behalf, including cloud hosting, analytics, payment processing, customer support, and marketing services. We may also share your information in connection with a corporate transaction such as a merger, acquisition, or sale of assets.

Excerpt from Cohere's Privacy Policy

ConductAtlas Analysis

Institutional analysis (regulatory & governance intelligence)

(1) REGULATORY LANDSCAPE: This provision engages GDPR Article 28 regarding data processor agreements, Article 44 et seq.

Insight

Unlock the full institutional analysis

Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.

Applicable agencies

  • Federal Trade Commission (ftc)
    Oversees unfair or deceptive business practices and can investigate companies that mislead consumers about data collection, sharing, or use.
    Who can file: Anyone affected by the company's practices (US or international)
    What you need: Your account details, a timeline of relevant events, and a description of the specific issue
    What to expect: Complaints inform FTC enforcement priorities and investigations but do not result in individual resolution or compensation
    File a complaint →

Applicable regulations

CCPA/CPRA
California, USA
Connecticut Data Privacy Act Amendments
US-CT
FTC Act Section 5
United States Federal
GDPR
European Union
Indiana Consumer Data Protection Act
US-IN
Kentucky Consumer Data Protection Act
US-KY
Universal Opt-Out Mechanism Expansion 2026
US

Provision details

Document information
Document
Cohere Privacy Policy
Entity
Cohere
Document last updated
May 5, 2026
Tracking information
First tracked
May 10, 2026
Last verified
May 12, 2026
Record ID
CA-P-011023
Document ID
CA-D-00440
Evidence Provenance
Source URL
Wayback Machine
Content hash (SHA-256)
48f574f6141f754b1e207ebd31ad81a85645609ea91087c0f35d0f4211dd49a2
Analysis generated
May 10, 2026 04:19 UTC
Methodology
Evidence
✓ Snapshot stored   ✓ Hash verified
Citation Record
Entity: Cohere
Document: Cohere Privacy Policy
Record ID: CA-P-011023
Captured: 2026-05-10 04:19:09 UTC
SHA-256: 48f574f6141f754b…
URL: https://conductatlas.com/platform/cohere/cohere-privacy-policy/provision/CA-P-011023/third-party-disclosure-and-service-providers/
Accessed: Sept. 13, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Severity
Medium
Categories

Other risks in this policy

Related Analysis

Get the research letter

Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.

Frequently Asked Questions

What does Cohere's Third-Party Disclosure and Service Providers clause do?

This provision authorizes disclosure of personal data to a defined category of third-party service providers and in corporate transaction contexts, which means your data may be accessible to multiple external parties beyond Cohere itself.

How does this clause affect you?

Personal information including account data and usage information may be shared with cloud hosting, analytics, payment processing, customer support, and marketing vendors, and may be transferred to a successor entity in the event of a merger or acquisition without requiring additional consent under the stated terms.

How many platforms have this type of clause?

ConductAtlas has identified this type of provision across 288 platforms. See the full comparison.

Is ConductAtlas affiliated with Cohere?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Cohere.