Data Privacy & GDPR
Handle data export and deletion requests for workspace members, and record consent
Data Privacy & GDPR: 2 pages
Coherence includes tools to handle data subject requests from the people who use your workspace, record their consent choices, and log data breaches.
These tools cover workspace members (the people who sign in to Coherence). They do not cover the people and companies stored as records in your modules. To correct or delete a contact's data, edit or delete their records directly.
Data Subject Requests
There are two request types:
Export (Right of Access)
Produces a JSON file of the personal data tied to one member: their profile, sign-in sessions, records they created, chat messages they sent, the titles of Collab documents they last edited, AI conversations and memories, time entries, audit events, consent history, and system email sent to or from them. Completed exports can be downloaded for 7 days.
Deletion (Right to Erasure)
Deactivates the member immediately and permanently deletes their personal data after a 30-day grace period. Consent records are kept as the legal basis for processing. Before running a deletion, admins see a summary of the data that will be affected and can export the member's data first.
Managing Requests
Members request their own export from Settings > Data & Privacy > My Data. That page does not offer deletion; an admin creates deletion requests.
Admins manage all requests from Data & Privacy in the admin section of the sidebar (the GDPR Compliance page):
- On the Data Requests tab, click Create Request
- Choose the User and the Request Type
- Open the pending request and run it: Run Export for an export, or Deactivate & Schedule Deletion for a deletion
A deletion becomes permanent when the 30-day grace period ends. Until then, open the request and click Cancel Deletion & Restore User to undo it.
Consent
Each member sets their own preferences for AI data processing, product analytics, and marketing email in Settings > Data & Privacy. AI data processing is on by default: a member who turns it off stops the AI work they start or that runs for them, and Owners and Admins can turn it off for the whole workspace in Account Settings > Data & Privacy. Coherence enforces both switches on its servers and keeps a record of when each preference was granted or revoked. See Consent & Privacy Controls for exactly what each setting does and does not control.
Breach Log
On the Breach Log tab of the GDPR Compliance page, click Report Breach to record a data breach with a title, description, severity, and the date it was discovered.
Related: Consent & Privacy Controls | Audit Log