Mistral AI

GDPR Compliant

French frontier-AI lab offering open and commercial LLMs with EU data residency by default.

🇫🇷France🇪🇺EU Hosted🇪🇺 EuropeanFreemiumfrom Free tier; Pro from $14.99/mo; usage-based API

GDPR Compliance Data

Not independently verified

GDPR Status	GDPR Compliant
HQ Country	France
Ownership	European-owned
Foreign Disclosure Exposure	Not yet verified
Data Hosting Location	European Union
EU Servers Available
Data Processing Agreement	Not verified
Sub-processor List	Not verified
Schrems II Risk	Low Risk
SCCs in Place
Notes	French legal entity (Mistral AI, SIREN 952 418 325, Paris). La Plateforme API hosts data in the EU by default (US only on explicit opt-in); public DPA with SCCs (Module 4); 30-day deletion on termination. ISO 27001 / SOC 2 stated, verify at trust.mistral.ai. Caveat: DPA permits using customer/feedback data for model training unless opted out, not a blanket no-training default.

About Mistral AI

European-Sovereign Frontier AI

Mistral AI is a French frontier-AI company (founded 2023, Paris) building large language models as both open-weight and commercial models. For European marketers and builders, its draw is data sovereignty: you get frontier-grade AI from an EU company, not a US vendor.

What Mistral Offers

Le Chat, consumer AI assistant (chat.mistral.ai)
La Plateforme, developer API, with EU data residency by default (US endpoint only if you explicitly opt in)
Open + commercial models, open-weight models plus proprietary frontier models
Enterprise: custom models, SSO, audit logs, and on-prem/private deployment

Compliance Notes

Mistral is a French legal entity (SIREN 952 418 325, Paris), publishes a Data Processing Agreement with SCCs, and by default hosts API data in the EU, so there's no CLOUD Act exposure unless you opt into the US endpoint. ISO 27001 and SOC 2 are stated (verify current status at trust.mistral.ai).

One honest caveat: Mistral's DPA permits using customer and feedback data to train its models unless you opt out, so it is not a blanket "never trains on your data" provider. For marketers this is a per-plan setting worth checking. Browse more European AI marketing tools.

Key Features

Open-weight and commercial frontier LLMs

La Plateforme API with EU data residency by default

Le Chat consumer assistant

Agent/app tooling and custom model training

Enterprise deployment incl. on-prem / private

Pros & Cons

EU-owned and EU-hosted by default, genuine data sovereignty, no CLOUD Act exposure

Strong price/performance across open and commercial models

Public DPA with SCCs; ISO 27001 / SOC 2 stated

General-purpose LLM provider, not a purpose-built marketing tool

DPA permits training on customer/feedback data unless opted out

Pricing is in USD

Mistral AI GDPR & data protection: common questions

Is Mistral AI GDPR compliant?

Yes. On the evidence we checked, Mistral AI meets the requirements European businesses usually need. Mistral AI is a European company headquartered in France, data is hosted within the European Union.

Where does Mistral AI store data?

Mistral AI hosts data within the European Union.

Does Mistral AI offer a Data Processing Agreement (DPA)?

We could not locate a published DPA for Mistral AI. That does not mean one is unavailable. Many vendors provide it on request or inside the account area rather than publishing it. Ask before you sign.

What a DPA has to cover →