audit rights dpa residency · Privacy Policy

Cohere API policy finding

“Cohere is a Canadian company subject to Canadian federal privacy laws, and so personal information transferred from the UK or the EEA to Cohere in Canada is made pursuant to adequacy regulations (for the UK, see here ; for the EEA, see here ). To the extent Cohere further transfers personal information to sub-processors or affiliates for the purpose of providing the Website, Cohere Products, or in the process of developing its models, such transfers are subject to and protected by appropriate security measures in accordance with Canadian privacy laws. We also ensure our sub-processors are subject to appropriate transfer mechanisms recognized under UK and EU laws. Our cloud infrastructure provided by GCP in the United States, for instance, is protected under the EU-US Data Privacy Framework , including its UK extension. Controller-to-processor Standard Contractual Clause agreements are used as an alternative mechanism where the transfer is not otherwise subject to an adequacy determination or derogation under applicable laws. Users of the Platform or Cohere APIs can consult our list of sub-processors , which includes data processing locations.”

Document

Privacy Policy

Captured

2026-06-07

Location

Privacy Policy › “International Transfers”

Snapshot SHA-256

44bc4ba4efbbfe0217b9d55c34798b9056843ff18b23bf9bcc0f122f3f60d7e1

Informational only, not legal advice. Terms change; verify the source and capture date.