Cohere✓

Stav’s assessment

Editorial assessment, not legal advice. Stav's risk ratings, scores, and verdicts are our own analysis of publicly available information and may be incomplete or out of date. Verify independently before making compliance or procurement decisions.

• compliance

  Cohere has signed the EU's GPAI Code of Practice, providing a streamlined path to demonstrating AI Act transparency and copyright compliance.

• security

  Cohere holds SOC 2 Type II, ISO 27001, and ISO 42001 (AI management system) certifications, renewed annually where applicable.

• compliance

  Cohere publishes a multi-jurisdictional DPA incorporating EU Standard Contractual Clauses and has conducted a documented Transfer Impact Assessment with EU counsel.

• transparency

  Cohere Labs is an active open-research arm with 4,500+ community members and 100+ published papers, and regularly releases Apache 2.0-licensed models (e.g., North Mini Code, Cohere Transcribe).

• governance

  Cohere has no single controlling shareholder and no US parent company, differentiating its jurisdictional exposure from US-headquartered labs.

Published safeguards & certifications