This analysis describes what Mistral AI's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
Incorporating Module 4 SCCs by acceptance of the DPA provides the legal mechanism for cross-border data transfers where Mistral AI acts as Processor, without requiring a separate agreement for each transfer.
Interpretive note: The clause name references 'Customer in Restricted Country' as a condition for Module 4 SCCs to apply, but this condition does not appear in the quoted excerpt. The canonical claim is based solely on the excerpt and does not reflect the geographic condition. Confidence is medium because the excerpt may be partial.
Accepting the DPA automatically binds both Customer and Mistral AI to Module 4 SCCs for any International Data Transfer Mistral AI conducts as Data Processor, with no separate execution required.
How other platforms handle this
The Federal Trade Commission has jurisdiction over ZipRecruiter's compliance with the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF.
you consent as part of these Terms to venue for such cases exclusively in these courts.
Glassdoor complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF) and the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce.
"By accepting this DPA, Mistral AI and Customer conclude Module 4 (Processor-to-Controller) of the SCCs which applies to any International Data Transfer conducted by Mistral AI acting as a Data Processor and is hereby incorporated...Excerpt from Mistral AI's Data Processing Addendum
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
Incorporating Module 4 SCCs by acceptance of the DPA provides the legal mechanism for cross-border data transfers where Mistral AI acts as Processor, without requiring a separate agreement for each transfer.
Accepting the DPA automatically binds both Customer and Mistral AI to Module 4 SCCs for any International Data Transfer Mistral AI conducts as Data Processor, with no separate execution required.
ConductAtlas has identified this type of provision across 267 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Mistral AI.