Cohere
- Rank
- Score
- 21/149
- 51 out of 100
Cohere is a Canadian AI company founded in 2019 by Aidan Gomez, Ivan Zhang and Nick Frosst, and based in Toronto. It focuses on AI for businesses and governments. Cohere makes the Command family of AI models, the Aya models for many languages, and the North workplace AI platform.
Is Command safe?
Command scores 51 out of 100 and ranks 21 of 149. Its strongest category is Security, and its weakest category is Safety.
How is Command scored?
Command is scored out of 100 on Safety (25%), Transparency (25%), Security (25%), and Privacy (25%). See how we score.
Outside evidence is stronger than its written policies.
Safety framework
8Average of SaferAI's published scores.
- 7
SaferAI score: risk identification
Independent sourceSaferAI (opens in a new tab) · 15 Oct 2026 - 5
SaferAI score: risk analysis and evaluation
Independent sourceSaferAI (opens in a new tab) · 15 Oct 2026 - 12
SaferAI score: risk treatment
Independent sourceSaferAI (opens in a new tab) · 15 Oct 2026
Pre-release testing
0Points for each confirmed yes.
- No
Was the model tested for dangerous capabilities, such as biological, chemical or cyber risks?
Company claim0/50Cohere model card (opens in a new tab) · 15 Oct 2026 - No
Did an outside organisation test the model before release?
Company claim0/50Cohere model card (opens in a new tab) · 15 Oct 2026
Safety test results
62.4Average of three independent safety tests of the company's models: MLCommons AILuminate, Stanford HELM Safety and Stanford AIR-Bench. Each test is compared with the best company's result.
- 66.7
MLCommons AILuminate safety grades
Independent sourceMLCommons AILuminate (opens in a new tab) · 10 Nov 2026 - 85.3
Stanford HELM Safety mean score, averaged across the company's tested models: 83.5, against 97.9 for the top company of 13 tested
Independent sourcecrfm.stanford.edu (opens in a new tab) · 10 Nov 2026 - 35.3
Stanford AIR-Bench 2024 refusal rate, averaged across the company's tested models: 30.6, against 86.7 for the top company of 14 tested
Independent sourcecrfm.stanford.edu (opens in a new tab) · 10 Nov 2026
Incident record
67.3This check counts only when a source covers the company. With no events it holds the pillar, which is not proof of a clean record. Each recorded event takes points off the pillar, and serious or recent ones count most. Allegation checks, regulator actions and open investigations use half the severity load. AI Incident Database and AIAAIC Repository, last 24 months.
1 event
AllegationAI Incident Database (opens in a new tab) · 12 Nov 2026These are reports, not proven findings.
Date Event Severity 1 Jul 2025 AIAAIC1911 · Cohere accused of violating publishers' copyright, trademarks1 Jul 2025 · Medium (reported) Medium (reported)
Protecting children
50Points for each confirmed yes.
- No
Does the model card report child-safety tests or safeguards?
Company claim0/50Cohere model card (opens in a new tab) · 15 Oct 2026 - Yes
Does the privacy policy set a minimum age, or say the service is not directed at children?
Company claim50/50“Cohere Products are not intended to be used by minors (children) and are not for personal or household use.”
Cohere privacy policy (opens in a new tab) · 15 Oct 2026
Strong written policies; outside evidence is weaker.
Model documentation
25Points for each confirmed yes.
- Yes
Does the model card describe what the model can do?
Company claim25/25“Command A+ has been specifically trained with conversational tool use capabilities.”
Cohere model card (opens in a new tab) · 15 Oct 2026 - No
Does the model card report test results?
Company claim0/25Cohere model card (opens in a new tab) · 15 Oct 2026 - No
Does the model card state the model's limitations?
Company claim0/25Cohere model card (opens in a new tab) · 15 Oct 2026 - No
Does the model card describe safety safeguards?
Company claim0/25Cohere model card (opens in a new tab) · 15 Oct 2026
Training-data disclosure
9.4Average of two independent training-data checks: the Stanford index and an academic grading of EU AI Act training-data summaries.
- 9.4
EU AI Act training-data summary grades (AI Accountability Lab)
Independent sourceAI Accountability Lab (opens in a new tab) · 10 Nov 2026
Independent transparency index
Average used40.7This outside rating doesn't cover this company, so the average of the companies it covers is used.
Transparency reports
025 points for each area where Partnership on AI names the company a leader in reporting on real-world impacts.
- 0
Partnership on AI practice-leader areas
Company claimPartnership on AI (opens in a new tab) · 10 Nov 2026
Public safety commitments
100Average of the commitments signed.
- Yes
Has it signed the EU code of practice for general-purpose AI?
Company claim100/100“Bria AI Cohere Domyn”
European Commission (opens in a new tab) · 14 Oct 2026 - No
Did it sign only the safety and security chapter?
Company claim0/50European Commission (opens in a new tab) · 14 Oct 2026 - Yes
Has it signed the Frontier AI Safety Commitments (Seoul 2024)?
Company claim100/100“The UK and Republic of Korea governments announced that the following organisations have agreed to the Frontier AI Safety Commitments: Amazo…” MoreLess
“The UK and Republic of Korea governments announced that the following organisations have agreed to the Frontier AI Safety Commitments: Amazon Anthropic Cohere Google G42 IBM Inflection AI Meta Microsoft Mistral AI Naver OpenAI Samsung Electronics Technology Innovation Institute xAI Zhipu.ai The following organisations have been added to the existing list: Magic Minimax 01.ai NVIDIA The above organisations, in furtherance of safe and trustworthy AI, undertake to develop and deploy their frontier AI models and systems responsibly, in accordance with the following voluntary commitments, and to demonstrate how they have achieved this by publishing a safety framework focused on severe risks by the upcoming AI Summit in France.”
Frontier AI Safety Commitments (opens in a new tab) · 14 Oct 2026
No problems found in 1 public record. That is not proof.
Security programme and certifications
100Points for each confirmed yes.
- Yes
Is there a way to report security flaws, such as a bug bounty?
Company claim34/34“The Cohere Bug Bounty program is designed to recognize the community’s support in protecting our users’ privacy and security.”
Cohere security page (opens in a new tab) · 15 Oct 2026 - Yes
Does it state it holds a SOC 2 Type II report?
Company claim33/33“Cohere undergoes an annual SOC 2 Type II audit.”
Cohere security page (opens in a new tab) · 23 Oct 2026 - Yes
Does it state it holds ISO 27001 certification?
Company claim33/33“ISO 27001 Certification Official Certificate”
Cohere security page (opens in a new tab) · 23 Oct 2026
Software vulnerabilities
70This check counts only when a source covers the company. With no events it holds the pillar, which is not proof of a clean record. Each recorded event takes points off the pillar, and serious or recent ones count most. Allegation checks, regulator actions and open investigations use half the severity load. Known-exploited flaws (CISA list) in the company's official software, last 24 months. A disclosed and fixed flaw does not lower the score.
No events
Independent sourceGitHub Advisory Database (opens in a new tab) · 12 Nov 2026
Data breaches
Not enough dataNo problems found in 1 public record. That is not proof.
Clear privacy policy
100Points for each confirmed yes.
- Yes
Does the privacy policy say what personal data is collected?
Company claim20/20“We collect and use business contact information (name, business email address) and a password you select to create and administer your accou…” MoreLess
“We collect and use business contact information (name, business email address) and a password you select to create and administer your account and facilitate access to the Platform.”
Cohere privacy policy (opens in a new tab) · 15 Oct 2026 - Yes
Does the privacy policy say whether your data is used to train AI?
Company claim20/20“We may use this input and output data to conduct research and development. This includes analyzing usage trends and using inputs/outputs to…” MoreLess
“We may use this input and output data to conduct research and development. This includes analyzing usage trends and using inputs/outputs to improve the performance and safety of Cohere Products.”
Cohere privacy policy (opens in a new tab) · 15 Oct 2026 - Yes
Does the privacy policy say how long data is kept?
Company claim20/20“Retention of inputs and outputs on the Platform is generally 30 days for Enterprise Users.”
Cohere privacy policy (opens in a new tab) · 15 Oct 2026 - Yes
Does the privacy policy say who your data is shared with?
Company claim20/20“Vendors and Service Providers: We may transfer (or otherwise make available) all categories of personal information we collect to third-part…” MoreLess
“Vendors and Service Providers: We may transfer (or otherwise make available) all categories of personal information we collect to third-party companies that provide services to us or on our behalf.”
Cohere privacy policy (opens in a new tab) · 15 Oct 2026 - Yes
Does the privacy policy explain your privacy rights?
Company claim20/20“This includes personal information collected in connection with the use of our website located at Cohere.com (“Website”), interactions with…” MoreLess
“This includes personal information collected in connection with the use of our website located at Cohere.com (“Website”), interactions with our content and marketing, activities of our research lab, Cohere Labs, as well as in certain cases use of our hosted AI models and products (“Cohere Products”) available via the Cohere API SaaS Platform (“Platform”) or via a third-party platform that integrates Cohere Products using the Cohere API.This Policy also explains Your Rights and Choices when it comes to your personal information.”
Cohere privacy policy (opens in a new tab) · 15 Oct 2026
Training-data defaults
50100 if training is opt-in only, 50 if you can opt out, 0 if neither.
- No
Is your data used for training only if you opt in?
Company claim0/100Cohere privacy policy (opens in a new tab) · 15 Oct 2026 - Yes
Can you stop your data being used for training?
Company claim50/50“For Enterprise Users: Enterprise Users can control how we train on their data and can request a DPA if personal information will be processe…” MoreLess
“For Enterprise Users: Enterprise Users can control how we train on their data and can request a DPA if personal information will be processed in the course of using Cohere Products.”
Cohere privacy policy (opens in a new tab) · 15 Oct 2026
Export and delete your data
100Points for each confirmed yes.
- Yes
Can you get a copy of your data?
Company claim50/50“Depending on your location, and subject to certain limitations, you may have the right to access, update, correct, or delete your personal i…” MoreLess
“Depending on your location, and subject to certain limitations, you may have the right to access, update, correct, or delete your personal information in our control, or the right to obtain a copy of your personal information or to receive certain personal information in a structured, commonly-used technological format.”
Cohere privacy policy (opens in a new tab) · 15 Oct 2026 - Yes
Can you delete your data?
Company claim50/50“If personal information is inadvertently included in an input, deletion can be requested by emailing privacy@cohere.com as set out below.”
Cohere privacy policy (opens in a new tab) · 15 Oct 2026
Privacy fines
Not enough dataIndependent privacy ratings
Average used52.9This outside rating doesn't cover this company, so the average of the companies it covers is used.
Risk governance
7Average of SaferAI's published scores.
- 7
SaferAI score: risk governance
Independent sourceSaferAI (opens in a new tab) · 15 Oct 2026
Regulator actions
70This check counts only when a source covers the company. With no events it holds the pillar, which is not proof of a clean record. Each recorded event takes points off the pillar, and serious or recent ones count most. Allegation checks, regulator actions and open investigations use half the severity load. UK competition regulator cases, US Justice Department settlements, last 5 years, and regulator actions and open investigations into the company's AI products at half severity, last 3 years.
No events
RegulatorUS Justice Department (opens in a new tab) · 12 Nov 2026
Court judgments
Not enough dataPrivacy contact and complaints
100Points for each confirmed yes.
- Yes
Is there a privacy contact, such as an email or a data protection officer?
Company claim50/50“Review our Enterprise Data Commitments to learn more or request a DPA at privacy@cohere.com.”
Cohere privacy policy (opens in a new tab) · 15 Oct 2026 - Yes
Does it tell you that you can complain to a regulator?
Company claim50/50“If you have unresolved concerns, you can complain to the relevant data protection authority in your jurisdiction.”
Cohere privacy policy (opens in a new tab) · 15 Oct 2026
Score history
Newest first. Only days when the score changed are listed.
2 Nov 2026
Score 51
Method 2 Nov 2026
-1
28 Oct 2026
Score 52
Method 28 Oct 2026, update 2
-9 · combines both 28 Oct updates (28 Oct 2026 - Update 1 and 28 Oct 2026 - Update 2)
23 Oct 2026
Score 61
Method 21 Oct 2026
+6 · Data fix
21 Oct 2026
Score 55
Method 21 Oct 2026
-6 · Method update
19 Oct 2026
Score 61
Method Not recorded
-4 · Reason not recorded
15 Oct 2026
Score 65
Method Not recorded
+10 · Reason not recorded
14 Oct 2026
Score 55
Method Not recorded
-