Cohere
Cohere (API, North, Compass, Model Vault)
Provider: Cohere Inc. · Based in: Cohere Inc., 171 John Street, Suite 200, Toronto, ON M5T 1X3, Canada · Provider website
- Plans
- 3
- Sources
- 8
- As of
- 18 Oct
As of 18 Oct 2026. Based on our research on this date and the process described in the methodology. No guarantee of accuracy, not legal advice. The provider’s current documents take precedence. Found an error? Report a correction.
Incomplete. 4 points could not be verified in any provider source (see open points). This does not mean the matter is unproblematic; it means we have not checked it.
At a glance
- Hosting
- US only: API Trial, API Productionnot publicly documented: Enterprise: North, Compass, Model Vault, private deployment
- Training on inputs
- yes: API Trialno: Enterprise: North, Compass, Model Vault, private deploymentopt-out available: API Production
- DPA
- no: API Trialyes: Enterprise: North, Compass, Model Vault, private deployment, API Production
- Provider
- Cohere Inc.
- Based in
- Cohere Inc., 171 John Street, Suite 200, Toronto, ON M5T 1X3, Canada (privacy policy, q4)
Values from 3 plans, each listed with the plans it applies to. Details and evidence are in the plan table.
Compare Cohere
Compare with another toolCompared plan by plan with other tools in the category Business software:
Details per plan
Short values per plan. Click a feature to open the evidence and notes for all plans; sources with retrieval dates are under “Evidence”.
| Feature | API Trial (free of charge)Compare Cohere API Trial (free of charge) with another tool | Enterprise: North, Compass, Model Vault, private deploymentCompare Cohere Enterprise: North, Compass, Model Vault, private deployment with another tool | API Production (Pay-as-you-go, SaaS)Compare Cohere API Production (Pay-as-you-go, SaaS) with another tool |
|---|---|---|---|
| differs by plan | free | North and Compass: custom | several tiers |
| Details: Price | Free (pricing page: calls with a trial key are free, rate-limited) | North and Compass: custom (pricing page). Model Vault (Standard Vault) per instance, in USD, per hour / per month / per year (documentation 'Standard Vault Pricing'): Embed 5 Fast and Embed 5 Pro Small USD 3 / USD 2,000 / USD 20,000, Medium USD 5 / USD 3,250 / USD 32,500; Rerank 4 Fast, Rerank 4 Pro and Rerank 3.5 Medium USD 5 / USD 3,250 / USD 32,500; Rerank 4 Pro Large USD 10 / USD 6,500 / USD 65,000; Parse 5 Medium USD 4 / USD 2,500 / USD 25,000, Large USD 8 / USD 5,000 / USD 50,000, XL USD 7 / USD 4,300 / USD 43,000; Cohere Transcribe Medium USD 3.75 / USD 2,500 / USD 25,000, Large USD 7.50 / USD 4,750 / USD 47,500. Generative models on Standard Vault (mostly via waitlist) per instance and hour, L / XL: Command A USD 40 / USD 48, Command A Reasoning USD 48 / USD 57.50, Command A+ USD 17.50 / USD 32.50, North Mini Code USD 7.50 / USD 10.50. Encrypted Vault priced separately. According to the Terms of Use, prices, except where otherwise indicated, do not include applicable sales taxes ('do not include any applicable sales taxes'). | In USD (pricing page): Command R input USD 0.15, output USD 0.60 per 1M tokens; Command R7B USD 0.0375 / USD 0.15; Embed 5 Pro USD 0.12, Embed 5 Fast USD 0.08 per 1M tokens; Rerank 4 Pro USD 2.50, Rerank 4 Fast USD 2.00 per 1,000 searches (1 search = 1 request with up to 100 documents); Parse 5 USD 1.50 per 1,000 pages. Legacy models for existing customers include Command R+ 08-2024 USD 2.50 / USD 10.00; Aya Expanse USD 0.50 / USD 1.50. Billing monthly or when USD 250 is outstanding. Command A+ and North Mini Code free as open-source models (Apache 2.0). According to the Terms of Use, prices, except where otherwise indicated, do not include applicable sales taxes ('do not include any applicable sales taxes'). |
| yes | yes | yes | |
| Details: AI features included | yes (trial API key with rate limit, not for production or commercial use) | yes (workplace platform North, search system Compass, dedicated model instances 'Model Vault' incl. Transcribe, deployment in a VPC or on-premises as well as via the cloud platforms of OCI, Azure, AWS, Google Cloud) | yes (Command R, Command R7B, Embed 5 Pro/Fast, Rerank 4 Pro/Fast, Parse 5; older models for existing customers; Aya Expanse via the API) |
| differs by plan | no | yes | yes |
| Details: DPA | no (trial keys are subject to the terms of use and privacy policy; the Enterprise Data Commitments and the DPA offer apply to paying SaaS customers. Privacy policy: trial environments are not intended for personal data; for that, switch to an enterprise plan with a contract) | yes for SaaS/Model Vault customers on request (privacy@cohere.com, sent after NDA; the DPA contains the EU standard contractual clauses of 2021-06-04). According to the Enterprise Data Commitments, no DPA is required for private and third-party cloud deployments. | yes (on request: SaaS customers receive the DPA via privacy@cohere.com; according to the Trust Center, sent after a signed NDA) |
| differs by plan | yes | no | opt-out available |
| Details: Training on inputs | Privacy policy (as of 2026-05-01, section 2.3): for Trial Users and Researchers, Cohere collects inputs and outputs and may use them for research and development, including 'using inputs/outputs to improve the performance and safety of Cohere Products'; data is de-identified beforehand; users should not enter personal data. An opt-out for trial keys is not described (the dashboard switch 'Data Controls' is described in the Enterprise Data Commitments for paying customers). According to the Enterprise Data Commitments, the Terms of Use and the privacy policy apply to trial keys; the Terms of Use (as of 2022-09-07, section 4.1) allow Cohere to use 'Customer Data', among other things, to 'IMPROVE AND ENHANCE THE COHERE SOLUTION' and other offerings, including by sharing API data and fine-tuning data with third parties. | Enterprise Data Commitments: for private and third-party cloud deployments, Cohere does not receive prompts and generations. Privacy policy: data in the customer's or cloud provider's environment is not accessible to Cohere and is not used for training. Model Vault as a platform managed by Cohere: use for training not separately addressed in the documentation or the Enterprise Data Commitments; for Encrypted Vault, prompts and responses are, according to the documentation, not visible in plaintext even to Cohere. | Enterprise Data Commitments (as of 2025-12-05): opt-out from the use of prompts and generations for training in the dashboard settings ('Data Controls', switch set to 'Off'); the change applies to data generated thereafter. For abuse monitoring, prompts and logs may be reviewed; PII is filtered before any possible use for training. Model Training Privacy Notice (as of 2026-05-01): 'Where a user has given Cohere permission to use inputs and outputs for model training', the data is de-identified beforehand. Default value of the switch for new accounts: not publicly documented. |
| differs by plan | Privacy policy: the platform is not… | Private and third-party deployments… | Logged prompts and generations are… |
| Details: Data retention | Privacy policy: the platform is not intended for the processing of personal data by Trial Users; personal data entered by mistake can be erased by e-mail to privacy@cohere.com. Fixed periods for trial data: not publicly documented. | Private and third-party deployments: according to the Enterprise Data Commitments, Cohere has no access to prompts and generations. Model Vault: according to the documentation, with Zero Data Retention (ZDR) enabled, Cohere processes inputs and outputs only for inference and does not store any prompts or responses (Standard Vault and Encrypted Vault); retention periods without ZDR: not publicly documented. | Logged prompts and generations are automatically deleted after 30 days, except where there is a legal or contractual obligation or a suspected breach of the usage policy (Enterprise Data Commitments; privacy policy: 'generally 30 days' for Enterprise Users). Data released for training purposes may be retained separately. Zero Data Retention (no logging of prompts and generations) only for enterprise customers with additional usage commitments; Cohere still receives usage data. |
| differs by plan | US only | not publicly documented | US only |
| Details: Hosting | Trust Center FAQ: hosting on Google Cloud servers in US-Central; according to the FAQ, Cohere does not use servers outside the USA. | Region depends on the deployment at the customer or the cloud provider. Model Vault (Cohere-managed, single-tenant): documentation 'Compliance' for Encrypted Vault: 'Region selection supports data-residency requirements; contact Cohere to confirm the regions available for your vault.' There is no public list of regions. | Trust Center FAQ: hosting on Google Cloud servers in US-Central. According to the FAQ, in certain cases the offering can be configured so that no customer data is stored at Cohere ('ephemeral'). |
| list available | list available | list available | |
| Details: Sub-processors |
|
|
|
| differs by plan | 5 sources | 6 sources | 6 sources |
| Details: Sources with retrieval date |
|
|
|
Compare Cohere API Trial (free of charge) with another tool
Price and scope
- differs by plan
- free
Free (pricing page: calls with a trial key are free, rate-limited)
- yes
yes (trial API key with rate limit, not for production or commercial use)
Contract and data use
- differs by plan
- no
no (trial keys are subject to the terms of use and privacy policy; the Enterprise Data Commitments and the DPA offer apply to paying SaaS customers. Privacy policy: trial environments are not intended for personal data; for that, switch to an enterprise plan with a contract)
- differs by plan
- yes
Privacy policy (as of 2026-05-01, section 2.3): for Trial Users and Researchers, Cohere collects inputs and outputs and may use them for research and development, including 'using inputs/outputs to improve the performance and safety of Cohere Products'; data is de-identified beforehand; users should not enter personal data. An opt-out for trial keys is not described (the dashboard switch 'Data Controls' is described in the Enterprise Data Commitments for paying customers). According to the Enterprise Data Commitments, the Terms of Use and the privacy policy apply to trial keys; the Terms of Use (as of 2022-09-07, section 4.1) allow Cohere to use 'Customer Data', among other things, to 'IMPROVE AND ENHANCE THE COHERE SOLUTION' and other offerings, including by sharing API data and fine-tuning data with third parties.
- differs by plan
- Privacy policy: the platform is not…
- Privacy policy: the platform is not intended for the processing of personal data by Trial Users; personal data entered by mistake can be erased by e-mail to privacy@cohere.com. Fixed periods for trial data: not publicly documented.
Hosting and sharing
- differs by plan
- US only
Trust Center FAQ: hosting on Google Cloud servers in US-Central; according to the FAQ, Cohere does not use servers outside the USA.
- list available
- Google Cloud (infrastructure): USA
- Fullstory (software delivery): USA
- LaunchDarkly (feature flags): USA
- New Relic (platform monitoring): USA
- Retool (software delivery): USA
- Sentry IO (software delivery): USA
- Segment (event and error processing): USA
- Sendgrid (e-mail communication): USA
- Vercel (web application hosting): USA
- Salesforce (customer support management): USA
- Wiz (cloud security and compliance): USA
- Forethought (customer support management): USA
Evidence
- differs by plan
- 5 sources
- PricingPricing page, retrieved 18 Oct 2026
- Enterprise Data Commitments (as of 2025-12-05)Documentation, retrieved 18 Oct 2026
- Cohere Trust CenterTrust Center, retrieved 18 Oct 2026
- Privacy Policy (as of 2026-05-01)Privacy notice, retrieved 18 Oct 2026
- Terms of Use (as of 2022-09-07)Terms and conditions, retrieved 18 Oct 2026
not documentedmeans: not publicly documented, not verifiable in any provider source. It does not mean “no”.
Third-country transfers
Privacy policy (as of 2026-05-01): transfers to, among others, Canada, the USA and the United Kingdom (not exhaustive); the bases are adequacy decisions and standard contractual clauses; the Google Cloud infrastructure in the USA is covered by the EU-U.S. Data Privacy Framework including the UK Extension; otherwise controller-to-processor SCCs. Trust Center FAQ: the DPA contains the EU standard contractual clauses (Commission decision of 2021-06-04); transfer impact assessment carried out with an EU law firm (content not public); hosting on Google Cloud US-Central. An EU representative under Art. 27 GDPR is not named in the privacy policy.
- Cohere Trust Center (Trust Center), retrieved 18 Oct 2026
- Privacy Policy (as of 2026-05-01) (Privacy notice), retrieved 18 Oct 2026
Certifications (as stated by the provider)
Trust Center: SOC 2 Type II (annual audit, report after signed mNDA), ISO 27001, ISO 42001 and UK Cyber Essentials (Cohere Inc. and Cohere UK, Ltd) listed as certificates and available on request; penetration tests (API and web application) by third parties, reports on request; according to the Trust Center, controls are monitored by Secureframe. HIPAA BAA only for custom model development, not for SaaS. The certificates themselves were not reviewed.
- Cohere Trust Center (Trust Center), retrieved 18 Oct 2026
- Security (Trust Center), retrieved 14 Oct 2026
AI Act
Functions: Generative language models (Command family), embedding, rerank and parse models, agent platform North, search system Compass (pricing page).
Provider’s statement: Under resources, the Trust Center lists 'EU AI Act FAQs' (description: 'FAQs regarding the GPAI Code of Practice') as a download; the content was not evaluated.
Classification (for review, not legal advice): For review: the customer is typically a deployer (Art. 3 No. 4 AI Act); the provider refers to documents on the GPAI code of practice. Which obligations apply depends on the use case (check Annex III). Not legal advice.
- Cohere Trust Center (Trust Center), retrieved 18 Oct 2026
Current notes 2026
The 2026 pricing page offers Command A+ and North Mini Code as open-source models (Apache 2.0) and Model Vault instances (including Embed 5, Rerank 4, Parse 5, Transcribe) with hourly or monthly prices; the website announces 'North 2'. Enterprise Data Commitments last updated on 2025-12-05, privacy policy and Model Training Privacy Notice on 2026-05-01. The Trust Center also lists UK Cyber Essentials for Cohere UK, Ltd.
Open points of the review
- Full DPA text still only available after a signed NDA via privacy@cohere.com (Trust Center FAQ); no public DPA URL.
- Default value of the training switch 'Data Controls' for new accounts is stated neither in the Enterprise Data Commitments nor in the privacy policy; no opt-out is described for trial keys.
- Model Vault: available regions not publicly listed (documentation refers to enquiring with Cohere); use for training and retention without ZDR not documented; Encrypted Vault prices not evaluated.
- Certificates, penetration test reports and 'EU AI Act FAQs' are offered in the Trust Center only on request or as a file download; contents not reviewed.
Frequently asked questions
Where does Cohere store data?
US only (plans: API Trial (free of charge), API Production (Pay-as-you-go, SaaS)); not publicly documented (plans: Enterprise: North, Compass, Model Vault, private deployment). Based on our research, as of 18 Oct 2026.
Is there a DPA for Cohere?
no in: API Trial (free of charge); yes in: Enterprise: North, Compass, Model Vault, private deployment, API Production (Pay-as-you-go, SaaS). According to the provider, as of 18 Oct 2026.
Does Cohere use inputs for AI training?
yes in: API Trial (free of charge); no in: Enterprise: North, Compass, Model Vault, private deployment; opt-out available in: API Production (Pay-as-you-go, SaaS). According to the provider, as of 18 Oct 2026.
Where is the provider based?
Cohere Inc., 171 John Street, Suite 200, Toronto, ON M5T 1X3, Canada. According to the provider, as of 18 Oct 2026.
All sources
- 01PricingPricing page · retrieved 18 Oct 2026
- 02Enterprise Data Commitments (as of 2025-12-05)Documentation · retrieved 18 Oct 2026
- 03Cohere Trust CenterTrust Center · retrieved 18 Oct 2026
- 04Privacy Policy (as of 2026-05-01)Privacy notice · retrieved 18 Oct 2026
- 05SecurityTrust Center · retrieved 14 Oct 2026
- 06Model Training Privacy Notice (as of 2026-05-01)Privacy notice · retrieved 14 Oct 2026
- 07Terms of Use (as of 2022-09-07)Terms and conditions · retrieved 18 Oct 2026
- 08Model Vault Overview, Standard Vault Pricing, Encrypted Vault ComplianceDocumentation · retrieved 18 Oct 2026
More tools in Business software with an EU hosting option (in at least one plan)
- DATEV AI features · Based in: Paumgartnerstraße 6-14, 90429 Nürnberg, Germany
- HubSpot Breeze AI · Based in: Cambridge, MA, USA
- Intercom Fin · Based in: Intercom R&D Unlimited Company, 124 St Stephen's Green, Dublin 2, DC02 C628, Ireland
- Lexware Office · Based in: Munzinger Straße 9, 79111 Freiburg, Germany. Contracting party and processor according to the DPA and privacy notice: Haufe Service Center GmbH
All tools in Business software · Tools with an EU hosting option
Further reading
All tools in the category: Business software. Figures across all tools: Data report.