Home / AI Service Directory / Mistral API

Mistral API

Mistral AI · Model API · FR · mistral.ai

Last verified 2026-09-16
Entry services/mistral-api.yaml
Training on your data (default tier)
Under the DPA, Mistral may train its models on customer data as a controller unless the customer has opted out of training
Retention
API inputs and outputs kept for the generation plus 30 rolling days for abuse monitoring unless zero data retention is activated
Data residency
French controller; EU providers prioritised, non-EU providers possible in exceptional cases with safeguards

Vendor data-handling terms

Training on your data (default tier)
Under the DPA, Mistral may train its models on customer data as a controller unless the customer has opted out of training

The opt-out is set in the account's user preferences, per the privacy policy. Enterprise and zero-data-retention arrangements sit on top of this default.

“Mistral AI is authorized to process the Personal Data as Controller for the purposes of: Training its artificial intelligence models in accordance with its Privacy Policy , unless Customer is or has opted-out of training.”
checked 2026-09-16
Mistral AI Data Processing Addendum, section 2.3
Training on your data (business tiers)
Opt-out available in account preferences; zero data retention can be activated for the API
“You can opt-out of this processing at any time through your user preferences on your Mistral AI Account.”
checked 2026-09-16
Mistral AI Privacy Policy
Retention
API inputs and outputs kept for the generation plus 30 rolling days for abuse monitoring unless zero data retention is activated
“Except for specific APIs, we keep your Input and Output for the period necessary to generate the Output and then for thirty (30) rolling days to monitor abuse (unless zero data retention is activated).”
checked 2026-09-16
Mistral AI Privacy Policy, retention section
Data residency
French controller; EU providers prioritised, non-EU providers possible in exceptional cases with safeguards
“We prioritize selecting providers within the European Union that strictly adhere to the GDPR. / However, in exceptional cases, we may opt for non-EU providers that meet our high standards of data security and Personal Data protection.”
checked 2026-09-16
Mistral AI Privacy Policy, transfers section

Domains and endpoints

observed means seen in Unseen deployments; vendor-documented means listed by the vendor. Vendors do not publish complete lists.

HostRoleSource
api.mistral.aiapiobserved

Assessment

API, training opt-out not set: mediumAPI with opt-out or zero data retention: low

Reasoning: The Mistral model API. Unlike most frontier APIs, the default allows Mistral to train on API data until the account opts out, which the DPA states plainly. With the opt-out set and zero data retention enabled it is one of the few EU-hosted frontier APIs, which is why it is widely chosen for residency reasons.

Flags: Training on API data until the account opts out · Non-EU providers possible in exceptional cases · Assessed 2026-09-16. The assessment is Unseen's; the terms above are the vendor's.

Changelog

  • 2026-09-16Documented. Training terms verified against the Mistral DPA; opt-out, retention and transfer terms against the privacy policy.
  • 2026-09-15Listed from the Unseen catalogue with observed domains.

Corrections

Pull request on GitHub, or the form below. Changes are reviewed and recorded in the changelog.

Edit on GitHub