Cohere North 2 enterprise agentic AI platform launch

North 2's headline additions are Skills, Libraries, Applications, Memory, Guardrails, and North Admin - a set of reusable building blocks meant to let enterprises compose agents instead of hand-wiring them each time ^[3]. The orchestration harness itself was rebuilt, and Cohere now tracks token spend down to individual users and agents rather than only at the account level, directly answering the budget-blindness complaint that dogged earlier agent deployments ^[2]. Compute runs on NVIDIA Hopper and Blackwell hardware, with NVIDIA's own VP of Generative AI framing the partnership around delivering more tokens for less rather than raw model capability ^[1].

The more consequential design choice is that North 2 is model-agnostic: enterprises can plug in Anthropic, OpenAI, Google, DeepSeek, or Alibaba models alongside Cohere's own, wiring them through the same connectors to Slack, SharePoint, OneDrive, Jira, Linear, Notion, and GitHub, with financial connectors to PitchBook and Crunchbase planned ^[5][6]. That is a meaningful departure from the original North, which launched in early access in January 2025 and reached general availability in August 2025 as a narrower agentic workspace that could run on as few as two GPUs across on-prem, hybrid, VPC, and air-gapped setups ^[8][9]. North 2 carries forward deployment flexibility across cloud, on-premises, and air-gapped environments, while adding compliance certifications - SOC 2 Type 2, ISO 27001, and ISO 42001 - plus PII scanning and prompt-injection detection ^[2].

Cross-session memory is the single feature Cohere leads with in its own messaging, but independent analysis found it thin on specifics: Cohere describes agents that keep context across sessions instead of starting cold every time, without stating where that memory is stored, how long it is retained, or how it can be deleted ^[7]. That gap collides with GDPR Article 17's right to erasure, which requires that a data subject be able to obtain deletion of their personal data without undue delay - a standard North 2's public disclosures do not yet show how it satisfies ^[7].

The risk is not hypothetical. A July 2026 research effort known as MemGhost demonstrated that a single malicious email could get an agent to write a false fact into durable memory and conceal that it had done so, succeeding 87.5% of the time against OpenClaw running on GPT-5.4, with input filters catching the attack only one time in ten ^[7]. Any platform adding durable cross-session memory inherits this attack surface, North 2 included. For comparison, Microsoft Copilot's memory - stored in a hidden Exchange mailbox folder, governed by a named personalization setting, and deletable through Purview eDiscovery - is more transparently documented even though it has its own gaps, including no audit logging and retention policies that don't apply to the memory store ^[7]. HiddenLayer's CTO captured the broader enterprise posture toward exactly this kind of feature: visibility and control have to come before activation, not after ^[2].

Buried in the launch coverage is Pineau's admission that Cohere derives a sizable portion of its revenue from the harness itself, not from the models running inside it ^[4]. Teyssier reinforces this as a deliberate strategy, arguing that other vendors are trying to pull customers deeper into closed ecosystems with no way out, while Cohere is intentionally building the opposite - a harness that works regardless of which model sits underneath ^[5]. That positioning is backed by a real pain point: a VB Pulse survey found 21% of enterprises still rely only on reactive monitoring of agent spending, and 68% had encountered confidently incorrect agent responses from missing business context in the prior six months, with Teyssier calling cost management probably the number one rising concern for AI leaders ^[2][5].

The same survey found 61% of enterprises already pick Microsoft and 28% pick Anthropic as their leading orchestration provider, underscoring how crowded the harness layer already is before North 2 even entered it ^[2]. Framed this way, North 2 reads less as an attempt to out-model OpenAI or Anthropic - both outlets cover Cohere's own acknowledgment that it lags on coding and cybersecurity benchmarks - and more as a bet that the orchestration, governance, and deployment layer, not the model weights, is where enterprise budgets will actually get spent ^[4][5].

In the hours after launch, every piece of social commentary traced back to Cohere's own account - the announcement, the memory feature, and a line about avoiding flashy headlines in favor of things that work. No independent voice had weighed in yet, which is itself notable for a launch pitched as a breakthrough in enterprise trust and transparency.

The one place skepticism did surface was a Canadian community thread specifically concerned with data sovereignty, and its tone cut against the official framing. Commenters argued that North 2 is fundamentally the same harness idea as the original North with incremental features, that the real lock-in enterprises should worry about is the harness itself rather than any underlying model, and that Cohere's reluctance to claim it beats competing models suggests the company has shifted its ambitions away from building a frontier model altogether. That reading lines up uncomfortably well with Pineau's and Teyssier's own harness-first framing elsewhere in the launch coverage - the skeptics and the company are, in effect, describing the same strategic pivot, just with opposite verdicts on whether it is a strength or an admission of defeat.