You may not submit personal information of children under 13 to Mistral AI products, and you must obtain parental consent before allowing minors to use the platform.
This analysis describes what Mistral AI's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision places the full responsibility for child data protection compliance on the commercial Customer, including obtaining parental consents, which is a significant operational obligation for organizations whose customer base includes minors.
The updated terms redefine when Mistral AI will use customer data and outputs for AI model training. Previously, the terms distinguished between free tiers (where training was opt-out) and Labs Models (where training always occurred). The revised language consolidates experimental models as 'Labs or Preview Models' and explicitly states that training opt-out preferences applied to other products do not carry over to these experimental models. Additionally, the terms now specify that customer data includes 'access to data' and 'coding environment,' expanding what qualifies as trainable material. The liability cap was narrowed to remove the carve-out protecting confidentiality breach claims, meaning liability limits apply more broadly. You can review which Mistral products are set to opt-in versus opt-out by default and avoid Labs or Preview Models if you do not want your data used for training.
View change record →Businesses that serve minors or whose End Users may include children must implement age verification and parental consent mechanisms before allowing access to Mistral AI products, as the terms make Customer solely responsible for this compliance obligation.
How other platforms handle this
to request that your data be transferred to a third party (data portability)
Your organization may allow you to access and export your data in order to back it up or transfer it to a service outside of Google.
Further, you may take legal actions in relation to any potential breach of your rights regarding the processing of your Personal Information, as well as to lodge complaints before the competent data prot...
"Customer will not, and will not permit any other person (including any End User) to: ... (c) include any personal information of children under 13 or the applicable age of digital consent as Customer Data or allow minors to use the Mistral AI Products without legally adequate consent from their parent or guardian.Excerpt from Mistral AI's Commercial Terms
(1) REGULATORY LANDSCAPE: This provision engages COPPA (Children's Online Privacy Protection Act) in the US, GDPR Article 8 on children's consent in the EU, and equivalent digital age of consent laws in other jurisdictions.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This provision places the full responsibility for child data protection compliance on the commercial Customer, including obtaining parental consents, which is a significant operational obligation for organizations whose customer base includes minors.
Businesses that serve minors or whose End Users may include children must implement age verification and parental consent mechanisms before allowing access to Mistral AI products, as the terms make Customer solely responsible for this compliance obligation.
ConductAtlas has identified this type of provision across 290 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Mistral AI.