Where does this provider put your AI data — and who can compel its disclosure?
| Residency | European Union eu |
|---|---|
| Sovereignty | European Union eu |
| Endpoints | api.mistral.ai |
| Packages | mistralai (Python), @mistralai/mistralai (npm), @ai-sdk/mistral (npm) |
| Regimes | None |
| Cross-border references | GDPR Chapter V transfers — EU/EEA personal-data transfers: adequacy decision or Standard Contractual Clauses (SCCs). |
How does this provider treat the data you send it? Advisory statements about documented practices — not legal advice.
| Trains on customer API data by default | Opt-out available source — Terms of Service §3 'How we use Your Data': 'We do not use Your Data to train our artificial intelligence models except (a) when you use the Mistral AI Products under a free subscription, Le Chat Pro or Le Chat Student and you have not opted-out of training…' (retrieved 2026-10-10) |
|---|---|
| Retention (API inputs/outputs) | Inputs and outputs kept for the time needed to generate the output, then 30 rolling days for abuse monitoring unless zero data retention is active. Exceptions: Agents API inputs/outputs kept until account termination; Fine-Tuning API data kept until deleted or account termination. ZDR is available only on pay-as-you-go, stateless API calls, on request and at Mistral's discretion. source — Privacy Policy §5: 'we keep your Input and Output for the period necessary to generate the Output and then for thirty (30) rolling days to monitor abuse (unless zero data retention is activates [sic])' (retrieved 2026-10-10) |
| Subprocessor list | https://trust.mistral.ai/subprocessors — DPA §7.1 (mistral.ai/terms, effective 2025-05-27): 'Mistral AI will maintain an up-to-date list of its Subprocessors on Mistral AI's website, including in the Trust Center'; §7.2 gives a 10-day objection window for new subprocessors (retrieved 2026-10-10) |
| Enterprise tier | Tier split: the paid La Plateforme API is excluded from training by default ('we do not use your Input and Output to train our artificial intelligence models when you use… the paid version of our APIs' — Privacy Policy §3); the opt-out default above covers the free-tier Studio mode. Enterprise customers are opted out of training by default with an admin-level opt-in toggle. ZDR is pay-as-you-go only, stateless endpoints, by approval. source — Help center (updated 2026-09-01): 'Enterprise customers are opted out of training by default. The opt-in toggle is managed at the admin level'; pay-as-you-go: 'Customers retain full control over this processing and have the right to opt out at any time' (retrieved 2026-10-10) |
| Entry last reviewed | 2026-10-10 |