Data sharing and privacy

CORA holds your company's knowledge, so what is shared and with whom is a setting you can see, not a hidden default.

The two data sharing settings

Open Settings -> Data sharing. Every member can see the workspace policy; only owners and admins can change it.

• Product improvement analytics shares de-identified interaction and quality signals so the CORA team can understand what works. Raw message and document content is excluded.
• Share conversations for CORA improvement makes standard company chats eligible for quality improvement. Eligibility alone shares nothing: each author separately chooses whether to share a conversation and can withdraw that choice. Reads are recorded in the conversation's access history.

Defaults by plan and package

• Both settings are on by default, with EU-only processing and with Flexible processing alike.
• Trial and free workspaces keep both settings on.
• Workspaces on an active paid plan can turn either setting off.
• Under EU Strict, both settings are always off. The controls stay visible but cannot be turned on while the contract lock is set.

Your chats stay yours

Chats are private to the person who started them. Other members cannot list or read them, and workspace owners and admins do not gain access to members' chats.

Where your data is processed

Stored data stays in the EU in both processing packages, and AI processing stays in the EU by default. See Data residency: EU only and Flexible for what Flexible processing adds and what EU Strict locks.

Legal documents

• The privacy notice, which explains how CORA handles personal data about account holders and visitors, is at /privacy.
• The list of sub-processors for each processing package is at /subprocessors.

For privacy questions, use the contact address in the privacy notice.