When you submit content — including prompts, data, or text — to Cohere's services or API, you give Cohere the right to use, copy, modify, and distribute that content globally, for free, and they can pass those rights on to others.
Any content you submit to Cohere — including API prompts that may contain sensitive business or personal data — is licensed to Cohere on a perpetual, royalty-free basis for use, modification, and redistribution, which creates significant data governance risk for enterprise users.
Cross-platform context
See how other platforms handle Broad IP License Over User Inputs and similar clauses.
Compare across platforms →This means any proprietary data, business information, or personal data you send to Cohere through their API may be used by Cohere to improve their models or for other purposes, and you cannot easily revoke that license.
(1) REGULATORY FRAMEWORK: This provision implicates GDPR Art. 6 (lawful basis for processing personal data contained in user inputs), GDPR Art. 28 (requirement for a Data Processing Agreement when a processor handles personal data on behalf of a controller), CCPA §1798.100 (consumer rights over personal information submitted to commercial services), and potentially HIPAA 45 CFR §164.502 if health-related data is submitted via API. The EU Data Protection Authorities and the California Privacy Protection Agency (CPPA) are the primary enforcement bodies. (2)
Compliance intelligence locked
Regulatory citations, enforcement risk, and due diligence action items.
Watcher: regulatory citations. Professional: full compliance memo.