service mistralvendor Mistral AIcategory Model APIs
Does Mistral AI (Studio / API) train on your data?
Depends (Caution)Free mode: may train. Pay-as-you-go: you can opt out at any time. Vibe (chat): trains by default unless you opt out. Enterprise: opted out by default.
Standard API inputs and outputs are kept for 30 rolling days for abuse monitoring unless ZDR is on. The Agents API keeps data until account termination, and fine-tuning data until you delete it.
Except for specific APIs, we keep your Input and Output for the period necessary to generate the Output and then for thirty (30) rolling days to monitor abuse (unless zero data retention is activated).
Against the 21 tools that state a period (grey dots):
The DPA lists automated moderation and API abuse monitoring as processing purposes, except when ZDR is active.
Automated moderation, including abuse monitoring on our APIs (except, in this last case, when zero data retention has been activated), to enforce the Agreement.
Not stated on Mistral's public pages read (help center, DPA, trust center front page, which lists ISO 27001, ISO 27701 and SOC 2 Type II only). Third-party sites say a BAA exists for some services, but this could not be confirmed on an official page.