“Mistral AI Processes the Personal Data on behalf of Customer as a Processor.”
This analysis describes what Mistral AI's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
The designation of Mistral AI as Processor rather than Controller determines the legal framework governing its data processing obligations and limits its authority over Personal Data to what the Customer instructs.
Mistral AI's processing of Personal Data is carried out on Customer's behalf as a Processor, meaning Customer retains the Controller role and associated responsibilities.
How other platforms handle this
To the extent we treat data as deidentified under the US State Privacy Laws, we will maintain and use that data solely in deidentified form and will not attempt to reidentify that data with any individuals, other than to assess whether the deidentification process complies with applicable law...
We process your data for necessary purposes as described in the main Policy, and for secondary purposes. We use both human and automated means to process your data.
Comply with applicable laws, lawful requests, and legal process, such as to respond to subpoenas or requests from government authorities
"Mistral AI Processes the Personal Data on behalf of Customer as a Processor.Excerpt from Mistral AI's Data Processing Addendum
We read the privacy policies and terms of service of 38 AI platforms. Here is what they say about training, retention, arbitration, and liability.
Get the weekly coverage letter
Companies change their terms without announcing it. We capture governance documents, compare each new version with the last, and publish what changed, with the source text behind it. One email a week on what we found and what we could not reach.
The designation of Mistral AI as Processor rather than Controller determines the legal framework governing its data processing obligations and limits its authority over Personal Data to what the Customer instructs.
Mistral AI's processing of Personal Data is carried out on Customer's behalf as a Processor, meaning Customer retains the Controller role and associated responsibilities.
ConductAtlas has identified this type of provision across 273 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Mistral AI.