Mistral AI
GDPR CompliantFrench frontier-AI lab offering open and commercial LLMs with EU data residency by default.
GDPR Compliance Data
Not independently verified| GDPR Status | GDPR Compliant |
| HQ Country | France |
| Ownership | European-owned |
| Foreign Disclosure Exposure | Not yet verified |
| Data Hosting Location | European Union |
| EU Servers Available | |
| Data Processing Agreement | View DPA |
| Sub-processor List | Not verified |
| Schrems II Risk | Low Risk |
| SCCs in Place |
How we reached this
French legal entity (Mistral AI, SIREN 952 418 325, Paris). La Plateforme API hosts data in the EU by default (US only on explicit opt-in); public DPA with SCCs (Module 4); 30-day deletion on termination. ISO 27001 / SOC 2 stated, verify at trust.mistral.ai. Caveat: DPA permits using customer/feedback data for model training unless opted out, not a blanket no-training default.
About Mistral AI
European-Sovereign Frontier AI
Mistral AI is a French frontier-AI company (founded 2023, Paris) building large language models as both open-weight and commercial models. For European marketers and builders, its draw is data sovereignty: you get frontier-grade AI from an EU company, not a US vendor.
What Mistral Offers
- Le Chat, consumer AI assistant (chat.mistral.ai)
- La Plateforme, developer API, with EU data residency by default (US endpoint only if you explicitly opt in)
- Open + commercial models, open-weight models plus proprietary frontier models
- Enterprise: custom models, SSO, audit logs, and on-prem/private deployment
Compliance Notes
Mistral is a French legal entity (SIREN 952 418 325, Paris), publishes a Data Processing Agreement with SCCs, and by default hosts API data in the EU, so there's no CLOUD Act exposure unless you opt into the US endpoint. ISO 27001 and SOC 2 are stated (verify current status at trust.mistral.ai).
One honest caveat: Mistral's DPA permits using customer and feedback data to train its models unless you opt out, so it is not a blanket "never trains on your data" provider. For marketers this is a per-plan setting worth checking. Browse more European AI marketing tools.
Key Features
Pros & Cons
Categories
Mistral AI GDPR & data protection: common questions
Is Mistral AI GDPR compliant?
Yes. On the evidence we checked, Mistral AI meets the requirements European businesses usually need. Mistral AI is a European company headquartered in France, data is hosted within the European Union, and a Data Processing Agreement is published.
Where does Mistral AI store data?
Mistral AI hosts data within the European Union.
Does Mistral AI offer a Data Processing Agreement (DPA)?
Yes. Mistral AI publishes a DPA at https://legal.mistral.ai/terms/data-processing-addendum. A DPA is required under Article 28 GDPR whenever a provider processes personal data on your behalf.
What a DPA has to cover →Is Mistral AI a European company?
Yes. Mistral AI is headquartered in France and, as far as we can establish, European-owned.
Related Tools
Funnel.io
Swedish AI-powered marketing data platform that collects and normalizes data from 500+ sources.
Abyssale
French AI creative automation for producing and scaling ad visuals from templates.
Bannerflow
Swedish AI-powered display advertising creative platform for campaign production at scale.
Spotted something wrong?
Martech moves fast. Vendors change hosting regions, get acquired, publish a new DPA or rewrite their pricing, and they rarely announce it. We check what we publish and date every compliance review, but some of what you see here will be out of date before we catch it.
If you work at Mistral AI and something on this page is wrong, tell us and we will fix it. Readers, same invitation. Pointing us at the page that proves it gets it changed fastest.