Enterprise Data Commitments

Enterprise customers can access opt out toggle in the Cohere dashboard settings. If you are opted out, prompts and generations will not be used to train Cohere models. Check with your organization’s administrator if you do not have access to the settings page, or contact us at support@cohere.com.

The answer depends on how you use our AI solutions and the deployment option you choose. See a summary below for the Cohere SaaS platform and consult your customer agreement for full details:

1. Prompts and Generations: Prompts are what you input into the model, and generations are model outputs. For private and third party partner deployments, Cohere does not have access to nor process any customer prompts/generations. On the SaaS Platform, these are logged and automatically deleted after 30 days, subject to certain exceptions outlined above (e.g. your usage is flagged as misusing the Platform). Prompts and generations that you allow Cohere to use for training purposes may be retained separately. To verify and update your opt in or opt out settings, select “Data Controls” under your Settings in the left hand menu bar of the Cohere Platform. Adjust the toggle to ‘Off’ to opt out. Your change in settings will apply to data created after you make that change.
2. Log Data: Log data are generated automatically when you use our SaaS Platform. We do not receive log data in other deployment types. Log data records things like organizational ID and dates an action is taken. Log data are necessary for our services to work, and for us to monitor for security risks to our services and compliance with our terms of use, including our Usage Policy.
3. Usage data: Usage data are metadata collected automatically when you use our SaaS Platform. We may also receive certain usage data for third-party cloud AI/ML platform or private deployments, in accordance with our commercial agreements. Usage data can include frequency and duration of usage, features accessed, user preferences, and aggregate counts of input prompt tokens. We use usage data to understand how our services are used and improve performance.
4. Business Contact Information: We collect business contact information (first and last name, email address, password) from users of our services as part of the registration process.

For the SaaS Platform, we automatically delete logged prompts and generations after 30 days, unless we need to retain them to comply with a legal requirement or a customer contract, or unless your usage is flagged as potentially violating our terms, including our Usage Policy (e.g. abuse or misuse of our services). For private and third party partner deployments, Cohere does not have access to nor process any customer prompts/generations. Prompts and generations that you allow Cohere to use for training purposes may be retained separately. To verify and update your opt in or opt out settings, select “Data Controls” under your Settings in the left hand menu bar of the Cohere Platform. Adjust the toggle to ‘Off’ to opt out. Your change in settings will apply to data created after you make that change.

Cohere relies on just-in-time (JIT) techniques to manage who has access to our system and implements role-based accesses based on the least privilege principle. Access to logs containing prompts and generations is limited to authorized employees and service providers bound by confidentiality and security controls that require access for engineering support, legal compliance, and safety and security monitoring. You can view a list of sub-processors by visiting Cohere’s Trust Center.

Customers can request account deletion within the self delete workflow in the Cohere dashboard. To request account deletion follow these steps:

1. Login to your Cohere account via the Cohere dashboard
2. Under settings, click profile then Danger Zone
3. Click Delete My Account

Account deletions are processed automatically within 7 days—your API keys will be revoked and account data (e.g. name, email, organization ID) will be deleted. Deleting your account does not delete prompts or generations, which are deleted automatically after 30 days unless exceptions apply. Exceptions include circumstances where a legal requirement or a customer contract require a longer retention period, or where your usage is flagged as potentially violating our terms, including our Usage Policy (e.g. abuse or misuse of our services).

For SaaS Platform customers, prompts and generations are deleted automatically after 30 days unless exceptions apply. Exceptions include circumstances where a legal requirement or a customer contract require a longer retention period, or where your usage is flagged as potentially violating our terms, including our Usage Policy (e.g. abuse or misuse of our services). For private and third party partner deployments, Cohere does not have access to nor process any customer prompts/generations.

1. We collect business contact information (first and last name, email address, password) from users of our services as part of the registration process. We use this information to communicate with you and provide our AI solutions. For more information on our privacy practices, please read our Privacy Policy.
2. If you intend to upload personal information about your own end users to the Cohere SaaS Platform, you are responsible for complying with applicable privacy laws. Please request a copy of our DPA before proceeding at privacy@cohere.com.

Yes, we can provide our DPA to potential customers of the Cohere SaaS Platform for review. Please contact privacy@cohere.com for more details. No DPA is required for private deployments and deployments on third-party cloud AI/ML platforms as Cohere will not receive any customer prompts/generations.

Zero data retention (ZDR) means we do not log any prompts or generations. When ZDR is enabled, we cannot monitor for misuse/abuse of our services in the same way. Because of this, we only allow ZDR for enterprise customers who can make additional commitments about their usage of the Cohere Services. ZDR does not affect usage data, which Cohere still receives. Contact support@cohere.com to make a ZDR request with a copy to your sales representative, if you have one. If you are dealing with sensitive data, you can also consider a third-party cloud AI/ML platform or private deployment. Learn More.

Cohere complies with all applicable privacy laws as they relate to personal information under the company’s control. We also proactively work with our enterprise customers to ensure we support them with their privacy compliance.