Vendor record · coveo.com
What Coveo promises about your data.
Where Coveo publishes its promises, how long it gives you when it adds a sub-processor, and what has changed.
- Where it publishes
Coveo lists its sub-processors at www.coveo.com/en/company/legal/privacy-and-security/sub-processors. We last read it on October 15, 2026.
- What has changed
We've recorded no change to its sub-processor list or data processing agreement between September 11, 2026 and September 16, 2026. Subscribers hear about a change the morning we read it; the public record shows it 30 days later.
- Its window
When it adds a sub-processor, its clause at www.coveo.com/en/company/legal/terms-and-agreements/data-processing-addendum (read October 5, 2026) gives you 10 days to object.
- Window
- 10
- Sub-processors
- 11
- Pages
- 7
- Copies
- 40
days to object when it adds a sub-processor
sub-processors named
pages we watch
dated copies of all its pages, since August 31, 2026
Coveo DPA
Coveo's data processing agreement gives 10 days to object to a new sub-processor. Here is the clause, from our October 5, 2026 copy:
10
days to object
“Coveo shall inform Customer of additions or replacements of Sub-Processors by notifying Customer’s contacts who have subscribed to notifications through the Sub-Processor Page or who have been identified in the Order, thereby giving Customer the opportunity to object to such changes on data protection grounds by notifying Coveo in writing within ten (10) days of the receipt of Coveo’s notification.”
Found automatically and not yet checked by a person. The quote is exact, and the link goes to the source. Nothing here says whether the term is good or bad, only that Coveo published it.
www.coveo.com/en/company/legal/terms-and-agreements/data-processing-addendum · read 2026-10-05 · fingerprint 38d99a9e453e45aa…
How it says it sends notice
“Coveo shall inform Customer of additions or replacements of Sub-Processors by notifying Customer’s contacts who have subscribed to notifications through the Sub-Processor Page or who have been identified in the Order, thereby giving Customer the opportunity to object to such changes on data protection grounds by notifying Coveo in writing within ten (10) days of the receipt of Coveo’s notificatio…”
www.coveo.com/en/company/legal/terms-and-agreements/data-processing-addendum · read 2026-10-05
Coveo sub-processors
Coveo publishes a sub-processor list at www.coveo.com/en/company/legal/privacy-and-security/sub-processors; we last read it on October 15, 2026. It names 11 entries. The entries, as the list prints them: Amazon Web Services Canada, Inc.; Coveo (Europe) B.V.; Coveo Australia Pty Limited; Coveo EMEA Ltd; Coveo Software Corp.; Coveo Solutions Inc.; Databricks, Inc.; Microsoft Corporation (Azure OpenAI Services); Qubit Inc.; Snowflake, Inc.; Wiz, Inc. (wholly owned subsidiary of Google LLC). The same list is in the full table below. The public record holds no change to the list read before September 16, 2026. A change we read after September 16, 2026 is published 30 days after we read it.
11 named · full table
Every public change we have recorded · Where vendors publish their lists
How long Coveo keeps your data
We hold no statement about data retention from Coveo's watched pages. The pages we watch: changelog docs.coveo.com/en/3160/release-notes; data processing agreement www.coveo.com/en/company/legal/terms-and-agreements/data-processing-addendum; sub-processor list www.coveo.com/en/company/legal/privacy-and-security/sub-processors; terms of service www.coveo.com/en/company/legal/terms-and-agreements/website-terms-of-use; terms of service www.coveo.com/en/company/legal/terms-and-agreements/customer-agreement; trust and security page www.coveo.com/en/platform/security; trust and security page trust.coveo.com/. On training with customer data, Coveo's data processing agreement (www.coveo.com/en/company/legal/terms-and-agreements/data-processing-addendum, in the copy read October 5, 2026) says: “(ii) the processing initiated by Customer’s use and configuration of the Services; and (iii) the ongoing maintenance, testing, validation and development of the Services, to the extent Personal Data is not used to train models that are used by other customers or other third-parties.”
Training on customer data
“Customer hereby grants to Coveo a non-exclusive, non-sublicensable, non-transferable (except as authorized under this Agreement), worldwide, royalty-free license to use, copy, store, transmit, distribute, display, modify and create derivative works of Customer Data during the applicable Term, as necessary to provide the Hosted Services in accordance with this Agreement and the Documentation.Custo…”
www.coveo.com/en/company/legal/terms-and-agreements/customer-agreement · read 2026-10-12
Retention windows vendors publish · What vendors say about training
What the pages say
Read automatically from the pages below and shown as printed. A missing row is a gap in our reading, not proof it isn’t there.
Sub-processors named · 11 · 1 name an AI provider we list
Amazon Web Services Canada, Inc.
Cloud provider for all Hosted Services functionalities. It includes applications hosting, data repositories, data processing services and AI-powered functional…
United States Ireland (with back-ups in France) Australia Canada
Coveo (Europe) B.V.
Provision of the Services
The Netherlands
Coveo Australia Pty Limited
Provision of the Services
Australia
Coveo EMEA Ltd
Provision of the Services
United Kingdom
Coveo Software Corp.
Provision of the Services
United States
Coveo Solutions Inc.
Provision of the Services
Canada
Databricks, Inc.
Data processing, data governance, data management and enhanced analytics. It also provides AI-powered tools, agents and services to support and enhance service…
Microsoft Corporation (Azure OpenAI Services)AI · OpenAI
Provider of advanced AI functionalities, including generative AI services or other AI services, including AI-agents and AI-driven capabilities.
United States
Qubit Inc.
Provision of the Services
United States
Snowflake, Inc.
Data warehousing, data processing, data governance and enhanced analytics. It also provides AI-powered tools, agents and services to support and enhance servic…
United States Ireland (with back-ups in France) Australia Canada
Wiz, Inc. (wholly owned subsidiary of Google LLC)
Cloud security monitoring, threat detection, vulnerability/posture management
Certifications the trust page names · ISO 27001 · ISO 27017 · ISO 27018 · ISO 27701 · SOC 2 · SOC 2 · SOC 2 Type II
Laws the trust page names · HIPAA · HIPAA
Retirements announced · every vendor's retirements
undated
Add a contextual query to the Coveo Insight Panel Classic Component (Deprecated)
undated
Add a Create Article button to the Coveo Insight Panel Classic Component (Deprecated)
undated
Add a UserActions component (Deprecated)
undated
Box component (Deprecated)
undated
Box Visualforce component (Deprecated)
undated
BoxAttachToCase component (Deprecated)
The pages' own stamps: Last Updated 2026-07-06 · Last Updated 2026-05-08
The pages we watch
Every page we read, so you can check it. Each is re-read on a schedule, and we keep a dated copy when it changes.
Data processing agreement
www.coveo.com/en/company/legal/terms-and-agreements/data-processing-addendum2026-10-15
Where we get nothing
What Coveo does not publish where we can read it
Of the 7 public pages we watch for Coveo, these give us nothing right now.
Pricing
the page returned too little text to be the document — usually a shell rendered by a script we cannot run
coveo.com/pricingPrivacy policy
the page returned too little text to be the document — usually a shell rendered by a script we cannot run
coveo.com/privacyBefore you conclude anything
This only means we couldn’t read it on a public page. Coveo may share it in its agreement, a trust portal, or with any customer who asks.
So treat it as a question to ask them: “Can you send your sub-processor list, and tell us when it changes?”
What this page doesn’t tell you
No score.
Nothing here rates Coveo. A short notice window is a contract term, not a criticism.
Public pages only.
Private notices and negotiated terms are invisible to us. Your agreement may say something different.
Wrong? Tell us.
Corrections are free, always. We reply within 2–3 business days.
How we read a page · The change log
Work at Coveo? With an email at coveo.com you can claim this record, suggest pages we should watch, and take a free copy of it. Claiming changes nothing we publish.
Is Coveo in your product? Hear the morning we read a change.
You get the lines that moved, in Coveo’s own words, and the date any window closes. No card. Nothing to cancel.