Does CoCounsel (Thomson Reuters) train on your data?
Doesn't train by default
Doesn't train on business data by default.
Why this matters: A "no" keeps your prompts and files out of Thomson Reuters's models, where they couldn't be removed later. Confirm it covers the plan you use. Why training matters →
Below, check how long CoCounsel (Thomson Reuters) keeps your data and what it says about security and AI-management standards (SOC 2, ISO 27001 and ISO 42001). We also cover data processing agreements (DPAs), business associate agreements (BAAs) and HIPAA support, where data can be stored or processed, and zero data retention. Each answer links to Thomson Reuters's own page.
Trains on your data by default
- thomsonreuters.com/en/cocounsel · checked Nov 9, 2026
“No. Your user content and prompts are not used to train or improve CoCounsel and associated products or LLMs”
Data retention
Set at the organization level; users can delete anytime.
- thomsonreuters.com/en/cocounsel · checked Nov 9, 2026
“Retention of user content and prompts is customized to fit customer needs and set up at the organization account level with the support of a Thomson Reuters client manager.”
- thomsonreuters.com/en/cocounsel · checked Nov 9, 2026
“Users can delete their content and prompts in the product at any time.”
SOC 2 Type II
- legal.thomsonreuters.com/en/products/cocounsel-legal · checked Nov 9, 2026
“SOC 2 and ISO 42001 certified”
ISO/IEC 27001
Not stated on any vendor page we checked.
ISO/IEC 42001
- legal.thomsonreuters.com/en/products/cocounsel-legal · checked Nov 9, 2026
“SOC 2 and ISO 42001 certified”
DPA available
Not stated on any vendor page we checked.
BAA / HIPAA
Not stated on any vendor page we checked.
Data residency options
US by default; UK, Australia and Canada available.
- thomsonreuters.com/en/cocounsel · checked Nov 9, 2026
“Region-based hosting is available in the UK, Australia, and Canada.”
Zero-retention option
Zero-retention calls to LLM providers (OpenAI, Google).
- thomsonreuters.com/en/cocounsel · checked Nov 9, 2026
“All interactions with GenAI LLM providers use zero-retention API calls.”
Vendor pages we monitor for this tool
We calculate a code from the page’s visible text each time we check it (a SHA-256 fingerprint). Changes to that code help us spot edits to the vendor’s terms.
| Page | Checked | Fingerprint |
|---|---|---|
| https://www.thomsonreuters.com/en/cocounsel | Nov 9, 2026 | aeae42e314b7… |
| https://legal.thomsonreuters.com/en/products/cocounsel-legal | Nov 9, 2026 | b0c949173a6e… |
Compare with
- Harvey Doesn't train
- Adobe Firefly Doesn't train · Design, same training default
- Airtable AI Doesn't train · Productivity, same training default
See all Legal tools · Which AI tools don't train on your data? · Why AI training on your data matters · How we source and verify this