Coveo
Coveo is an AI-powered search and relevance platform that enhances customer experiences by delivering personalized content and insights across various digital channels.
Coveo is an AI-powered search and relevance platform that transforms how organizations deliver information discovery across customer-facing and internal applications by leveraging advanced machine learning algorithms to understand user intent and provide highly personalized, contextually relevant results in real-time[2]. The platform unifies content from over 55 indexable sources into a single index and offers a comprehensive suite of capabilities including AI-powered relevance ranking, faceted search with dynamic filtering, natural language processing for conversational queries, generative question answering with cited sources, and intelligent recommendation engines that anticipate user needs based on behavioral patterns and product associations[1][2][3][5]. Coveo serves diverse industries including e-commerce, customer service, healthcare, and enterprise knowledge management, enabling businesses to optimize site search experiences, streamline customer support portals, enhance employee knowledge bases, and improve content discovery across unified touchpoints[2][3]. What distinguishes Coveo is its self-optimizing, unified approach that combines a centralized content foundation with intelligent processing layers and automated machine learning tuning, eliminating the need for constant manual optimization while providing point-and-click interfaces alongside comprehensive developer tools that accelerate implementation and reduce total cost of ownership compared to building search capabilities from scratch[3][8].
Sources
- [1] https://m.umu.com/ask/a11122301573854400106
- [2] https://nextbrick.com/introduction-to-coveo-revolutionizing-search-with-ai-and-personalization/
- [3] https://www.coveo.com/en/platform/intelligent-search
- [5] https://www.coveo.com/blog/top-ai-search-platform-features/
- [8] https://www.coveo.com/blog/ai-integration-unified-search/
Coveo explicitly prohibits using Customer Data for AI model training. Section 4.1 of the ToS states that Customer Data w
No training on user data means no opt-out is necessary.
Moderate risk. Suitable for internal data but avoid confidential information.
Coveo explicitly prohibits using Customer Data for AI model training. Section 4.1 of the ToS states that Customer Data will NOT be used for training of any AI models, including those used by other customers. The DPA reinforces this protection.
“[ToS] 'Customer Data will not be used by Coveo or any third party for training of, or incorporation into any third party's AI models or any AI model which will be used by or for any other Coveo customer.'”
Coveo grants a broad license to use, copy, store, transmit, distribute, display, modify and create derivative works of Customer Data during the Term. While the license is limited to providing the service and terminates with the agreement, the scope of permitted uses (including derivative works) is moderately broad.
“[ToS] 'Customer hereby grants to Coveo a non-exclusive, non-sublicensable, non-transferable... worldwide, royalty-free licence to use, copy, store, transmit, distribute, display, modify and create derivative works of Customer Data during the applicable Term, as necessary to provide the Hosted Services.'”
Coveo shares data with sub-processors and service providers under DPAs, with a published sub-processor list and 10-day objection period. However, the Privacy Policy indicates sharing with 'business partners,' 'advertising and analytics partners,' and affiliates with less granular controls than for sub-processors.
“[DPA] 'Customer consents to the use of the Sub-processors identified on https://www.coveo.com/en/pages/sub-processors... giving Customer the opportunity to object to such changes on data protection grounds by notifying Coveo in writing within ten (10) days.'”
The DPA states data will be deleted 'in accordance with the procedures specified in the Security Exhibit,' but the Security Exhibit is not provided in the documents. The Privacy Policy states retention is 'for the period necessary to fulfil the purpose' but lacks specific timelines or automatic deletion guarantees.
“[DPA] 'Coveo shall delete Personal Data in accordance with the procedures specified in the Security Exhibit.' [Privacy] 'Coveo will retain your Personal Information for the period necessary to fulfil the purpose for which it was intended.'”
The ToS explicitly states that Customer retains all right, title, interest and control in Customer Data. Coveo claims no ownership rights over outputs or generated content, only a limited license to provide the service.
“[ToS] 'As between the Parties, Customer will retain all right, title, interest and control in and to Customer Data.'”
Coveo references a Security Exhibit and mentions compliance with Privacy Laws, GDPR, CCPA, and Data Privacy Framework certification. However, specific certifications like SOC 2 Type II or ISO 27001 are not explicitly mentioned in the provided documents, though a Security Exhibit is referenced.
“[DPA] 'Coveo has certified to the Data Privacy Framework which will specifically apply to the transfer of Personal Data from the EEA, Switzerland or the UK to the U.S.' [ToS] 'Security Exhibit means the applicable security exhibit made available to Customer upon request.'”
Track and measure your AI tools with Olakai's observability platform.
Explore Olakai