Cohere Command R+ — privacy & data policy

Provider: Cohere. PromptPrivacy score: 72/100. Last verified August 26, 2026.

What happens to your data?

Cohere collects account details, usage logs, and API inputs/outputs to operate its platform and deliver AI services. Data from trial and research users may be de-identified and used to train and improve AI models, whereas enterprise customer data is protected under commercial contracts and retained for 30 days. Personal information is shared with designated vendors, sub-processors, and affiliates to support platform operations.

Does it train on your data?

Content submitted by Trial Users and Researchers may be de-identified and used to analyze usage trends and improve the performance and safety of Cohere's AI models. For Enterprise Users, Cohere does not train on customer data under enterprise agreements, and customers can request a Data Processing Addendum (DPA). Additionally, data in Private Deployments or Third-Party Managed AI services (AWS, Azure, GCP) is never accessible to or trained on by Cohere.

Can you opt out?

Yes. Enterprise users can control model training on their data, and users can opt out of marketing emails, manage tracking cookies via the 'Manage Cookies' footer link, or enable the Global Privacy Control (GPC) signal. Trial and research users cannot opt out of model improvement without upgrading to an enterprise agreement.

Data retention

For Enterprise Users on the Platform, retention of model inputs and outputs is generally 30 days. For Trial Users and Researchers, the platform is not intended for personal data, but deletion can be requested via email. General account, contact, and registration information is retained as long as the account remains active or as required to fulfill legal and business obligations.

Encryption & security

Not specified. The policy notes that administrative, technical, and physical safeguards are in place to protect personal information from unauthorized access, but it does not detail specific encryption protocols (such as TLS or AES-256) or certifications (such as SOC 2 or ISO 27001).

Is it safe for work?

Yes, for enterprise users and paid commercial tiers. Cohere provides enterprise agreements, DPAs, a standard 30-day data retention period, and options for private or third-party cloud deployments where Cohere cannot access or train on data. Free trial and research tiers should not be used with confidential business data.

Source policy: https://cohere.com/privacy