Cohere Coral procurement policy evidence
Only topics backed by verified findings appear below. Each row preserves the platform's exact policy words and capture provenance.
| Topic | Plan or tier | Risk | Their words | Source |
|---|---|---|---|---|
| DPA, audit rights & data residency | All applicable tiers | low | “ the data statement, available at https://docs.cohere.ai/data-statement/ ; and” | Captured 2026-06-07Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “ If you have unresolved concerns, you can complain to the relevant data protection authority in your jurisdiction. In the UK, this will be the Information Commissioner. A list of authorities in the EEA can be found here .” | Captured 2026-07-20Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “ Cohere is a Canadian company subject to Canadian federal privacy laws, and so personal information transferred from the UK or the EEA to Cohere in Canada is made pursuant to adequacy regulations (for the UK, see here ; for the EEA, see here ). To the extent Cohere further transfers personal information to sub-processors or affiliates for the purpose of providing the Website, Cohere Products, or in the process of developing its models, such transfers are subject to and protected by appropriate security measures in accordance with Canadian privacy laws. We also ensure our sub-processors are subject to appropriate transfer mechanisms recognized under UK and EU laws. Our cloud infrastructure provided by GCP in the United States, for instance, is protected under the EU-US Data Privacy Framework , including its UK extension. Controller-to-processor Standard Contractual Clause agreements are used as an alternative mechanism where the transfer is not otherwise subject to an adequacy determination or derogation under applicable laws. Users of the Platform or Cohere APIs can consult our list of sub-processors , which includes data processing locations.” | Captured 2026-06-07Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “To the extent Cohere further transfers personal information to sub-processors or affiliates for the purpose of providing the Website, Cohere Products, or in the process of developing its models, such transfers are subject to and protected by appropriate security measures in accordance with Canadian privacy laws. We also ensure our sub-processors are subject to appropriate transfer mechanisms recognized under UK and EU laws. Our cloud infrastructure provided by GCP in the United States, for instance, is protected under the EU-US Data Privacy Framework , including its UK extension. Controller-to-processor Standard Contractual Clause agreements are used as an alternative mechanism where the transfer is not otherwise subject to an adequacy determination or derogation under applicable laws. Users of the Platform or Cohere APIs can consult our list of sub-processors , which includes data processing locations.” | Captured 2026-06-07Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “ If you reside in the UK: to make a formal complaint to us by using the contact information provided under the Contact Us section above.” | Captured 2026-07-20Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “ Enterprise customers should consult our Enterprise Data Commitments for information about data handling associated with the Cohere’s enterprise products and SaaS platform.” | Captured 2026-06-07Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “ If you are located in the EEA/UK or Switzerland, see the Additional Information for European Residents and if you are located in California see the Additional Information for California Residents .” | Captured 2026-07-20Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “Cohere is a global organization with affiliates, partners, and service providers located in many countries around the world. For that reason, Cohere may transfer, store, and/or receive certain personal information outside of your jurisdiction of residence (including, for residents of Quebec, outside of Quebec) and across geographical borders to and/or from Cohere affiliates, partners or service providers in other countries working on our behalf in accordance with applicable law. Examples of countries we transfer personal information to include, but are not limited to, Canada, the United States, and the United Kingdom. As a result, in certain circumstances, other foreign governments, courts, law enforcement agencies, or regulatory agencies may be entitled to access the personal information collected and held by Cohere, its affiliates, partners, and service providers. Where required by applicable law, we utilize appropriate legal mechanisms (such as Adequacy Decisions or Standard Contractual Clauses) to protect your data during these transfers.” | Captured 2026-06-07Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | medium | “ For Enterprise Users: Enterprise Users can control how we train on their data and can request a DPA if personal information will be processed in the course of using Cohere Products. Review our Enterprise Data Commitments to learn more or request a DPA at privacy@cohere.com . ” | Captured 2026-06-07Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “ the model cards, available at https://docs.cohere.ai/generation-card/ ;” | Captured 2026-06-07Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “ Where required by applicable law, we utilize appropriate legal mechanisms (such as Adequacy Decisions or Standard Contractual Clauses) to protect your data during these transfers.” | Captured 2026-06-07Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “ Depending on your location, and subject to certain limitations, you may have the right to access, update, correct, or delete your personal information in our control, or the right to obtain a copy of your personal information or to receive certain personal information in a structured, commonly-used technological format.” | Captured 2026-07-20Open source →Finding permalink → |
| Data retention | All applicable tiers | medium | “We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, to meet business or legal requirements, and as otherwise permitted or required by applicable law, including litigation holds. We may collect and use the same category of personal information for different purposes and in different contexts, and because rules differ by jurisdiction, there is not typically a fixed retention period that will always apply to a particular category of personal information.” | Captured 2026-06-07Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “ Retention will depend on the context and purpose for which the information was collected. For example, we may retain information you use to register for the Platform for as long as you maintain an account with us. We may also retain your email address for as long as you are subscribed to our marketing emails, or, if you unsubscribe, to ensure that we comply with your unsubscribe request. Enterprise Users of the Platform can consult retention practices for inputs and outputs on the Platform here . Retention of inputs and outputs on the Platform is generally 30 days for Enterprise Users. For Trial Users and Researchers, the Platform is not intended to process personal information. If personal information is inadvertently included in an input, deletion can be requested by emailing privacy@cohere.com as set out below.” | Captured 2026-07-20Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “ A framework for the retention and destruction of personal information consistent with applicable laws.” | Captured 2026-07-20Open source →Finding permalink → |
| Data retention | All applicable tiers | medium | “It is our policy not to retain California personal information after we determine it is no longer necessary for the purposes set out in this Policy or as otherwise required to meet legal or business requirements. Retention will depend on the context and purpose for which the information was collected. For example, (i) we retain records of email opt-outs indefinitely; and (ii) we may retain server logs reflecting California traffic to our website for several months or years for security purposes.” | Captured 2026-06-07Open source →Finding permalink → |
| Data retention | All applicable tiers | low | “ Platform Account Deletion: You can delete your account at any time by selecting “Your Profile” in the Platform, navigating to the “Danger Zone” tab, and clicking on “Delete my Account”. ” | Captured 2026-06-07Open source →Finding permalink → |
| Data retention | Enterprise | medium | “Enterprise Users of the Platform can consult retention practices for inputs and outputs on the Platform here . Retention of inputs and outputs on the Platform is generally 30 days for Enterprise Users. For Trial Users and Researchers, the Platform is not intended to process personal information. If personal information is inadvertently included in an input, deletion can be requested by emailing privacy@cohere.com as set out below.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ We use Fullstory to capture and analyze your digital experience and interactions with our Website or Platform (such as mouse movements, clicks, scrolling and typing). This helps us identify usability issues and improve our user experience. You can opt-out of Fullstory’s data collection across all websites here .” | Captured 2026-07-20Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ We disclose your personal information to the parties and entities described below with your consent or as required or permitted by law. ” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “If you sign up through Cohere to receive special offers regarding products and services from our partners, you authorize us to share your email address and other Personal Information (as defined below) you authorize with the partner whose offer you wish to receive. If you request these special offers, you acknowledge the partner may also send you future offers that may interest you. You can opt out of future communications from Cohere by contacting us in the manner described below; you can unsubscribe from future partner communications by following their unsubscribe and opt out instructions. You do not have to agree to participate in these offers in order to use the Cohere Solution. You understand that Cohere may receive financial remuneration in exchange for sharing your email address and other Personal Information you authorize with partners if you choose to sign up for an offer.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ Cohere is a Canadian company subject to Canadian federal privacy laws, and so personal information transferred from the UK or the EEA to Cohere in Canada is made pursuant to adequacy regulations (for the UK, see here ; for the EEA, see here ). To the extent Cohere further transfers personal information to sub-processors or affiliates for the purpose of providing the Website, Cohere Products, or in the process of developing its models, such transfers are subject to and protected by appropriate security measures in accordance with Canadian privacy laws. We also ensure our sub-processors are subject to appropriate transfer mechanisms recognized under UK and EU laws. Our cloud infrastructure provided by GCP in the United States, for instance, is protected under the EU-US Data Privacy Framework , including its UK extension. Controller-to-processor Standard Contractual Clause agreements are used as an alternative mechanism where the transfer is not otherwise subject to an adequacy determination or derogation under applicable laws. Users of the Platform or Cohere APIs can consult our list of sub-processors , which includes data processing locations.” | Captured 2026-07-20Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “Affiliates: We may transfer (or otherwise make available) your personal information to our affiliates who help us to meet our legal and compliance requirements and operational needs.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “We may also receive information about you or your company from third-party sources to support the marketing and sale of our products. This includes using data enrichment services, marketing vendors, and publicly available sources to identify business prospects who may be interested in our products. The information we receive may include your name, business email, job title, company, and types of products you may be interested in.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ Cohere is a global organization with affiliates, partners, and service providers located in many countries around the world. For that reason, Cohere may transfer, store, and/or receive certain personal information outside of your jurisdiction of residence (including, for residents of Quebec, outside of Quebec) and across geographical borders to and/or from Cohere affiliates, partners or service providers in other countries working on our behalf in accordance with applicable law. Examples of countries we transfer personal information to include, but are not limited to, Canada, the United States, and the United Kingdom. As a result, in certain circumstances, other foreign governments, courts, law enforcement agencies, or regulatory agencies may be entitled to access the personal information collected and held by Cohere, its affiliates, partners, and service providers.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ Legal and Compliance Obligations: We and our service providers may disclose your personal information in response to a search warrant, court order, or other legally valid inquiry or order. We may also disclose information to government authorities or other organizations for the purposes of investigating a breach of an agreement or contravention of law; detecting, suppressing, or preventing fraud; establishing, exercising, or defending legal claims; or investigating or preventing actual or suspected loss or harm to persons or property.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ We work with third parties such as ad networks and other advertising companies that use their own tracking technologies (including cookies) on our Website in order to provide you with tailored advertisements across the Internet. This is a common marketing practice referred to as Interest-Based Advertising. ” | Captured 2026-07-20Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ If you sign up through Cohere to receive special offers regarding products and services from our partners, you authorize us to share your email address and other Personal Information (as defined below) you authorize with the partner whose offer you wish to receive. If you request these special offers, you acknowledge the partner may also send you future offers that may interest you. You can opt out of future communications from Cohere by contacting us in the manner described below; you can unsubscribe from future partner communications by following their unsubscribe and opt out instructions. You do not have to agree to participate in these offers in order to use the Cohere Solution. You understand that Cohere may receive financial remuneration in exchange for sharing your email address and other Personal Information you authorize with partners if you choose to sign up for an offer. Once you sign up for an offer, you can change your mind at any time, but if the partner or Cohere has already relied on your authorization to share your email or other Personal Information for a particular offer, any action already taken cannot be undone. ” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ Where required by applicable law, we utilize appropriate legal mechanisms (such as Adequacy Decisions or Standard Contractual Clauses) to protect your data during these transfers.” | Captured 2026-07-20Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “Business Transactions: We may transfer any information we have about you as an asset in connection with a proposed or completed merger, acquisition, or sale (including transfers made as part of insolvency or bankruptcy proceedings) involving all or part of Cohere or as part of a corporate reorganization or other change in corporate control.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ Analytical or Performance Cookies are used mainly to understand how Visitors and Platform users arrive at and interact with the Website or Platform. These cookies help provide information on metrics such as the number of visitors, bounce rate, traffic source, etc. They help us understand and analyze the performance and usability of the Website/Platform and of advertisements that refer visitors to the Website or Platform. ” | Captured 2026-07-20Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ Cohere may engage third parties, including cloud service providers, to provide the Cohere Solution or the Services.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ Google is one of the services we use for analytics purposes. You can find more information about Google Analytics privacy and security practices at the following links: https://policies.google.com/technologies/partner-sites and https://support.google.com/analytics/topic/2919631 . To prevent Google Analytics’ javascripts from sharing information with Google Analytics about website visit activity, you can download and install the plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en .” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “Vendors and Service Providers: We may transfer (or otherwise make available) all categories of personal information we collect to third-party companies that provide services to us or on our behalf. We use vendors and service providers for services such as cloud computing and data storage, advertising and analytics; communications; and customer support and management. Our vendors and service providers may be located in the U.S., Canada, or other foreign jurisdictions. Please refer to International Transfers to learn more. Users of the Platform or Cohere APIs can also consult our list of sub-processors .” | Captured 2026-06-07Open source →Finding permalink → |
| Tier differences | All applicable tiers | low | “ To Customer Data: This Policy does not apply to Customer Data (i.e. inputs and outputs) associated with the use of Cohere Products by Enterprise Users under an enterprise agreement. Cohere’s use of Customer Data is governed by the terms and conditions of the enterprise agreement and, where applicable, the Data Processing Addendum entered into between the parties. ” | Captured 2026-06-07Open source →Finding permalink → |
| Tier differences | All applicable tiers | low | “ Enterprise Users: Individuals (such as employees or contractors) who use Cohere Products on the Platform using a paid account with a credit card on file, or are accessing the Platform via their employer under a paid commercial agreement or enterprise trial agreement. ” | Captured 2026-06-07Open source →Finding permalink → |
| Tier differences | All applicable tiers | unknown | “ you and we acknowledge that Apple has no obligation to furnish any maintenance or support services with respect to the Cohere Solution;” | Captured 2026-07-20Open source →Finding permalink → |
| Tier differences | All applicable tiers | unknown | “ If the Cohere Solution is provided to you through the Apple Inc. (Apple Inc. together with all of its affiliates, “ Apple ”) App Store, the following terms and conditions apply to you in addition to all the other terms and conditions of these Terms of Use:” | Captured 2026-07-20Open source →Finding permalink → |
| Tier differences | All applicable tiers | unknown | “ If the Cohere Solution is provided to you through the Google Inc. (Google Inc. together with all of its affiliates, “ Google ”) Google Play store, the following terms and conditions apply to you in addition to all the other terms and conditions of these Terms of Use:” | Captured 2026-07-20Open source →Finding permalink → |
| Tier differences | All applicable tiers | unknown | “ Your access to and use of certain functionalities provided in or through the Cohere Solution may be subject to additional terms and conditions presented to you by Cohere or its service providers. Such additional terms and conditions are incorporated herein by reference. If there is a conflict or inconsistency between the terms and conditions of such additional terms and these Terms of Use, then the provisions of these Terms of Use will govern to the extent of such conflict or inconsistency. If you do not purchase such additional functionalities or do not agree to such additional terms, you may not have access to, and you should not access or use, those functionalities. ” | Captured 2026-07-20Open source →Finding permalink → |
| Tier differences | All applicable tiers | medium | “ These trial and research environments are not intended for the processing of personal information. However, as a further safeguard, Cohere takes steps to de-identify input and output data prior to any use for research and development purposes. If you need to include personal information in inputs to Cohere Products, consider moving to an enterprise tier and entering into a commercial agreement and DPA with Cohere. If you are conducting a research project that involves personal information, contact Cohere at safety@cohere.com before initiating your project. ” | Captured 2026-06-07Open source →Finding permalink → |
| Tier differences | All applicable tiers | unknown | “ The terms of your payment will be based on your chosen payment provider and may be determined by agreements between you and the financial institution, credit card issuer or other provider of your chosen payment method. If we, either through the Payment Processor or otherwise, do not receive payment from you, you agree to pay all amounts due on your billing account upon demand.” | Captured 2026-07-20Open source →Finding permalink → |
| Tier differences | All applicable tiers | unknown | “ you acknowledge that Google is not responsible for providing support services for the Cohere Solution; and” | Captured 2026-07-20Open source →Finding permalink → |
| Tier differences | All applicable tiers | unknown | “ Subscription and Services options displayed on the Cohere Solution may be discontinued or unavailable for any other reason, and prices are subject to change. Except where otherwise indicated, all prices do not include any applicable sales taxes, which will be added to your total purchase price. You are responsible for the payment of any provincial and local sales or use taxes that may apply to your Subscription Order. We will provide you no less than seven (7) days’ notice prior to implementing a change to our prices.” | Captured 2026-07-20Open source →Finding permalink → |
| Tier differences | All applicable tiers | unknown | “ We may run promotional offers from time to time on the Cohere Solution. The terms of any such promotion will be posted on the Cohere Solution. Unless otherwise indicated, we may establish and modify, in our sole discretion, the terms of such offer and end such offer at any point. Promotional offers may not be available in your jurisdiction. ” | Captured 2026-07-20Open source →Finding permalink → |
| Tier differences | All applicable tiers | medium | “ For Enterprise Users: Enterprise Users can control how we train on their data and can request a DPA if personal information will be processed in the course of using Cohere Products. Review our Enterprise Data Commitments to learn more or request a DPA at privacy@cohere.com . ” | Captured 2026-07-20Open source →Finding permalink → |
| Tier differences | All applicable tiers | unknown | “ notwithstanding anything to the contrary hereunder, you may use the Cohere Solution only on an iPhone or iPod touch that you own or control;” | Captured 2026-07-20Open source →Finding permalink → |
| Tier differences | All applicable tiers | low | “ Trial Users : Individuals who create or access a free trial account to test out our Platform under our standard Terms of Use with no payment method on file. ” | Captured 2026-06-07Open source →Finding permalink → |
| Tier differences | All applicable tiers | unknown | “ These Terms of Use relate to the Cohere Solution only and do not alter in any way the terms or conditions of any Subscription Agreement that may apply to your use of the Cohere Solution or any Services available thereon. For greater certainty, if there is a conflict or inconsistency between the terms and conditions of your Subscription Agreement and these Terms of Use, then the provisions of the Subscription Agreement will govern to the extent of such conflict or inconsistency.” | Captured 2026-07-20Open source →Finding permalink → |
| Tier differences | All applicable tiers | unknown | “ If the amount to be charged to your billing account varies from the amount you preauthorized (other than due to the imposition or change in the amount of applicable sales taxes), you have the right to receive, and we will provide, notice of the amount to be charged and the date of the charge before the scheduled date of the transaction. Any agreement you have with your payment provider will govern your use of your payment method of choice. You agree that we may accumulate charges incurred and submit them as one or more aggregate charges during or at the end of each billing cycle.” | Captured 2026-07-20Open source →Finding permalink → |
Informational only, not legal advice. Terms can change; verify every cited source and capture date during procurement review.
📢 POLICY UPDATES ALERT
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.