What is zero data retention (ZDR)?

Zero data retention (ZDR) is the claim that an AI endpoint does not keep the prompt, the completion, or other residue of a request after the call finishes.

Cohere SaaS API, ZDR approved zero data retention: terms and exceptions

Q: What is the ZDR score for Cohere SaaS API, ZDR approved?

On zdr.dev the published score is ZDR 1.0 (s,r) · B. Approved enterprise ZDR: Cohere does not log prompts or generations. Usage metadata still collected. Abuse monitoring is weaker. Not self-serve. Usage data still received. Private and partner deployments are a different isolation path.

ZDR 1.0 (s,r) · B

Short answer

Approved enterprise ZDR: Cohere does not log prompts or generations. Usage metadata still collected. Abuse monitoring is weaker. Not self-serve. Usage data still received. Private and partner deployments are a different isolation path.

Scope and evidence

Provider	Cohere
Service	SaaS API, ZDR approved
Lane	ZDR
Origin	CA Canada
License	proprietary
Hosting	Provider-hosted
Score	ZDR 1.0 (s,r) · B Contractual ZDR. Paper ZDR: no content retention by agreement, with typed carve-outs in force
Evidence	Public documentation reviewed (B: published documentation)
Source-review date	2026-08-25

Other lanes for Cohere

ZDR 1.0 (s,r) · Bcohere/api · zdrZDR

ZDR 4.0 (s,h,r,x) · Bcohere/api · defaultAPI default

Structured breakdown

Default posture: Approved enterprise ZDR: Cohere does not log prompts or generations. Usage metadata still collected. Abuse monitoring is weaker.
Exceptions and carve-outs: Not self-serve. Usage data still received. Private and partner deployments are a different isolation path.

Approval and setup path

Approval and setup path not yet reviewed.

Flags on this record

s: safety-flag retention beyond base window
r: revocable: provider reserves unilateral downgrade

Practical questions for your agreement

Does your signed agreement cover this exact service, model set, and feature path?
Which retention, logging, and human-review exceptions still apply after any ZDR election?
What configuration evidence (flags, project settings, store defaults) confirms the posture you expect?
Do your customer commitments match what the reviewed evidence supports?