Old version
May 11, 2026 10:30 UTC
11ede9710f5d5e475d2e3a86c1d1ba75073d2e0193a368f8c7adcc592a40268c
CA-V-002393
New version
July 28, 2026 00:52 UTC
d3d8da540e833750342a27ed8ceff4c763a8493fe594ae2c112429aba89d6985
CA-V-005312
Share 𝕏 Share in Share
Change Summary
Mistral AI updated its Data Processing Addendum effective July 27, 2026, making four targeted revisions. The most significant change clarified the conditions under which Mistral AI may use personal data for AI model training: the prior language required opt-out by either the customer or the product default status, while the updated language states that Mistral AI may train unless 'Customer is or has opted-out of training,' simplifying the opt-out condition. Additional changes include correcting a tense issue regarding data transfer authorization (from 'authorized' to 'authorizes') and minor wording adjustments to audit provisions (removing 'the' before 'a'). These revisions clarify operational procedures without materially expanding or restricting processing rights.
low severity
0 Sentences added
0 Sentences removed
4 Sentences modified
67 Sentences before
67 Sentences after
Added
Removed
Modified
BeforeAfter
0Data Processing Addendum Effective: March 12, 2026 Versions Terms Get started For Consumers EU - Terms of Service ROW - Terms of Service For Commercial Customers Commercial Terms of Service Additional Product Terms Partner-served deployment terms Additional Terms for Use of Mistral AI Products on Customer Infrastructure Data Processing Addendum For Partners Connectors terms For Everyone Privacy Policy Usage Policy Cookie Policy License Notice Applicant Privacy Policy This Data Processing Addendum (the “ Data Processing Addendum ” or the “ DPA ”) forms part of and supplements the Agreement entered into by and between Mistral AI and Customer as of the Effective Date. 1.0Data Processing Addendum Effective: July 27, 2026 Versions Terms Get started For Consumers EU - Terms of Service ROW - Terms of Service For Commercial Customers Commercial Terms of Service Additional Product Terms Partner-served deployment terms Additional Terms for Use of Mistral AI Products on Customer Infrastructure Data Processing Addendum For Partners Connectors terms For Everyone Privacy Policy Usage Policy Cookie Policy License Notice Applicant Privacy Policy This Data Processing Addendum (the “ Data Processing Addendum ” or the “ DPA ”) forms part of and supplements the Agreement entered into by and between Mistral AI and Customer as of the Effective Date. 1.
17Mistral AI may update the Description of the Processing from time to time to reflect new Mistral AI Products, features, functionalities or Subprocessors. 2.3 Mistral AI as Controller Mistral AI is authorized to process the Personal Data as Controller for the purposes of: Training its artificial intelligence models in accordance with its Privacy Policy , unless (a) Customer opted-out of training or (b) uses a Mistral AI Product that is opted-out by default and has not opted-in.17Mistral AI may update the Description of the Processing from time to time to reflect new Mistral AI Products, features, functionalities or Subprocessors. 2.3 Mistral AI as Controller Mistral AI is authorized to process the Personal Data as Controller for the purposes of: Training its artificial intelligence models in accordance with its Privacy Policy , unless Customer is or has opted-out of training.
40Transfers of Personal Data to a Restricted Country 8.1 General authorization Customer authorized Mistral AI to transfer Personal Data to any country deemed to have an adequate level of data protection by the European Commission.40Transfers of Personal Data to a Restricted Country 8.1 General authorization Customer authorizes Mistral AI to transfer Personal Data to any country deemed to have an adequate level of data protection by the European Commission.
43Audit 9.1 Document audit Upon Customer’s written request, Mistral AI will make available all documents and information reasonably necessary to demonstrate that the Processing carried-out by Mistral AI complies with this DPA in a timely manner, to the extent that is commercially reasonable and required by the Applicable Data Protection Laws, subject to confidentiality and trade secrets. 9.2 Onsite audit Only to the extent Customer cannot reasonably be satisfied with Mistral AI’s compliance with this DPA through the exercise of the audit set out in Section 9.1 (Document Audit) of this DPA, Customer may conduct up to one (1) on-site audit per year to verify Mistral AI’s compliance with this DPA, under the conditions defined below: This audit must be conducted with reasonable advance written notice of at least ninety (90) calendar days, This audit shall be carried out by an independent auditor selected jointly by the Parties for its expertise, independence and impartiality and which is, in any event, not a direct or indirect competitor of the Mistral AI, The selected auditor shall be bound by a confidentiality agreement, This audit shall be conducted during Mistral AI’s regular business hours, This audit shall restrict its findings to only information and/or Personal Data relevant to Customer, The audit shall not unreasonably impair or slow down the Mistral AI Products offered by Mistral AI or affect the organizational management of the Mistral AI, Mistral AI will contribute to the audit upon Customer’s request and to the extent that is commercially reasonable, An identical copy of the audit report shall be given to both Parties following the completion of the audit.43Audit 9.1 Document audit Upon Customer’s written request, Mistral AI will make available all documents and information reasonably necessary to demonstrate that the Processing carried-out by Mistral AI complies with this DPA in a timely manner, to the extent that is commercially reasonable and required by the Applicable Data Protection Laws, subject to confidentiality and trade secrets. 9.2 Onsite audit Only to the extent Customer cannot reasonably be satisfied with Mistral AI’s compliance with this DPA through the exercise of the audit set out in Section 9.1 (Document Audit) of this DPA, Customer may conduct up to one (1) on-site audit per year to verify Mistral AI’s compliance with this DPA, under the conditions defined below: This audit must be conducted with reasonable advance written notice of at least ninety (90) calendar days, This audit shall be carried out by an independent auditor selected jointly by the Parties for its expertise, independence and impartiality and which is, in any event, not a direct or indirect competitor of Mistral AI, The selected auditor shall be bound by a confidentiality agreement, This audit shall be conducted during Mistral AI’s regular business hours, This audit shall restrict its findings to only information and/or Personal Data relevant to Customer, The audit shall not unreasonably impair or slow down the Mistral AI Products offered by Mistral AI or affect the organizational management of the Mistral AI, Mistral AI will contribute to the audit upon Customer’s request and to the extent that is commercially reasonable, An identical copy of the audit report shall be given to both Parties following the completion of the audit.
Stay ahead of the changes

Watch this before it changes again

Follow unlimited companies, monitor the clauses that matter across every platform, and get the full institutional analysis on what each change obligates you to do.