Data retention - verified
Does Cohere store your API prompts?
Default retention: 30 days. Trains on your API data: Not stated (opt-out toggle in the dashboard; the default is not stated). Zero data retention: enterprise only (enterprise customers who make additional usage commitments). Regional processing: none documented.
Read from cohere.com, docs.cohere.com. Compare every AI API's data retention
- Trains on data
- Not stated
- ZDR
- Enterprise only
- Regions
- None
- Verified
- 2026-10-18
How long are prompts kept by default?
- Default retention
30 days
Logged prompts and generations automatically deleted after 30 days, unless needed for a legal requirement or customer contract, or flagged as potentially violating the terms.
“We automatically delete logged prompts and generations after 30 days, unless we need it to comply with a legal requirement or customer contract, or unless your usage is flagged as potentially violating our terms, including our Usage Policy (e.g. abuse or misuse of our services). Data you allow us to use for training purposes may be retained separately in accordance with our agreement with you.”
cohere.com - Duration
- Not stated
- Purpose
- Not stated
Does it train on your API data?
Not stated
Opt-out toggle in the dashboard; the default is not stated
Opt-out toggle in dashboard Data Controls; default state not stated explicitly. Commitments apply to paying customers (credit card on file); trial keys fall under Terms of Use and Privacy Policy.
“You can opt out from your prompts and generations being used to train Cohere models in your dashboard settings at any time.”
“We filter and strip common types of personal information from prompts and generations before they are made available for possible use in training for Cohere models (if you are opted in).”
“Our Enterprise Data Commitments apply to enterprise data of our commercial, paying customers. For the SaaS Platform, this means customers who have a credit card on file in their account.”
Zero data retention (ZDR)
- Availability
Enterprise only
Enterprise customers who make additional usage commitments
- Who can get it
Enterprise customers who can make additional commitments about usage; request via support@cohere.com.
- Not covered
Usage data still received.
- From the docs
“Zero data retention (ZDR) means we do not log any prompts or generations. When ZDR is enabled, we cannot monitor for misuse/abuse of our services in the same way. Because of this, we only allow ZDR for enterprise customers who can make additional commitments about their usage of the Cohere Services. ZDR does not affect usage data, which Cohere still receives.”
cohere.com
Features kept longer
Stateful features hold your content until a job finishes, a window expires or you delete it, often regardless of the default above.
| Feature | Retention | The docs say |
|---|---|---|
| Datasets API | Deleted 30 days after creation | “Datasets get deleted 30 days after creation”docs.cohere.com |
| Usage flagged as potential policy violation | Not stated | “If your usage is flagged as potentially violating our terms, including the Usage Policy, we may retain and review the flagged user prompts and associated logs to enforce our policies.”cohere.com |
| Data opted in for training | Not stated | “Prompts and generations that you allow Cohere to use for training purposes may be retained separately.”cohere.com |
Where is your data stored and processed?
- Regional processing
None documented
- Stated location
- Not stated
- How to choose
- Not stated
- What it covers
- Not stated
- Summary
No region selection documented for the SaaS Platform. Privacy policy says personal information may be transferred to countries including Canada, the US and the UK. Private deployments and third-party cloud platforms keep prompts away from Cohere.
- From the docs
“Examples of countries we transfer personal information to include, but are not limited to, Canada, the United States, and the United Kingdom.”
cohere.com “In third-party cloud AI/ML platforms and private deployment solutions, Cohere does not receive any customer inputs (prompts) or outputs (generations).”
cohere.com
Regional endpoints
Regional hostnames: Not stated
Certifications
- ISO 27001
- ISO 42001
- SOC 2 Type II
“Seamlessly complete your privacy and security compliance reviews by visiting Cohere’s Trust Center where you can request a copy of our certifications (including ISO 27001 and ISO 42001) or of our SOC 2 Type II Report or review our other compliance resources.”
Research notes
- Enterprise Data Commitments last updated December 5, 2025. Privacy policy: 'Retention of inputs and outputs on the Platform is generally 30 days for Enterprise Users.' Deleting an account does not delete prompts or generations; those follow the 30-day rule.
FAQ
Does Cohere store your API prompts?
30 days. Logged prompts and generations automatically deleted after 30 days, unless needed for a legal requirement or customer contract, or flagged as potentially violating the terms. The provider says: "We automatically delete logged prompts and generations after 30 days, unless we need it to comply with a legal requirement or customer contract, or unless your usage is flagged as potentially violating our terms, including our Usage Policy (e.g. abuse or misuse of our services). Data you allow us to use for training purposes may be retained separately in accordance with our agreement with you."
Does Cohere train on your API data?
Not stated (opt-out toggle in the dashboard; the default is not stated). The provider says: "You can opt out from your prompts and generations being used to train Cohere models in your dashboard settings at any time."
Does Cohere offer zero data retention?
Enterprise only (enterprise customers who make additional usage commitments). Enterprise customers who can make additional commitments about usage; request via support@cohere.com.
Where does Cohere process your data?
Regional processing options: None documented. Stated processing location: Not stated.
Sources
Last verified from Cohere's own pages below. Quotes are verbatim.
This page summarizes what each provider's own pages say. It is not legal advice; your contract, data processing addendum and the provider's current terms govern what happens to your data.
Newsletter
Know when a provider changes its data terms
One email per week. New model releases, pricing and policy changes, and what they mean for what you build.