Age Restriction and Minors

What it is

Users must be at least 13 years old to access Mistral AI products. Minors who are 13 or older may need a parent or guardian's permission depending on their jurisdiction, and accounts found to belong to under-13 users will be deleted.

Why it matters (compliance & governance perspective)

The 13-year minimum age is consistent with US COPPA thresholds but may not align with higher digital age of consent standards in other jurisdictions, such as 16 in some EU member states or 13 in the UK, potentially affecting compliance for underage users accessing this non-EEA product.

Consumer impact (what this means for users)

Children under 13 are prohibited from using Mistral AI products, and their accounts will be deleted if discovered. Minors aged 13 and above may require parental consent depending on local law, placing the verification burden on users and parents rather than establishing a platform-level verification mechanism.

Institutional analysis (Compliance & governance intelligence)

(1) REGULATORY LANDSCAPE: The age restriction provision engages the US Children's Online Privacy Protection Act (COPPA), which applies to online services directed at or knowingly collecting data from children under 13. The UK Children's Code (Age Appropriate Design Code) applies to services likely to be accessed by children under 18 in the UK and imposes broader obligations than the 13-year minimum threshold. Canada's PIPEDA and provincial privacy laws may impose parental consent obligations. The phrase 'where required' for parental permission acknowledges jurisdictional variation but does not specify which jurisdictions trigger the requirement or how compliance is achieved. (2) GOVERNANCE EXPOSURE: Medium. The absence of a described age verification mechanism means enforcement of the 13-year minimum relies on user self-declaration. The 'where required' qualifier for parental consent does not resolve which jurisdictions trigger this requirement, creating ambiguity for parents and potential under-compliance with standards such as the UK Children's Code, which applies to a broader age range than the 13-year minimum. (3) JURISDICTION FLAGS: UK users are subject to the Children's Code, which may require Mistral AI to apply higher-privacy default settings for users likely to be under 18, not merely under 13. US states including California and Texas have enacted or are enacting age-appropriate design laws imposing obligations beyond COPPA. Illinois and New York have also considered children's privacy legislation. Organizations offering Mistral AI products in educational contexts should assess FERPA applicability. (4) CONTRACT AND VENDOR IMPLICATIONS: Educational institutions or organizations whose end users may include minors should conduct due diligence on Mistral AI's age verification practices before deployment, as reliance on user self-declaration may be insufficient under applicable educational privacy or children's online safety laws. (5) COMPLIANCE CONSIDERATIONS: Compliance teams should assess whether the platform's age gate at registration is sufficient under applicable law in key markets, particularly the UK Children's Code. The account deletion remedy for age violations should be confirmed as operationally implemented and not merely contractually asserted. Data mapping should confirm that any data collected before detection of an underage user is deleted in accordance with applicable law.

Applicable agencies

Applicable regulations

Provision details

Other risks in this policy

• AI Model Training Data Use and Opt-Out high
• Liability Cap medium
• Governing Law and Jurisdiction medium
• Non-Refundable Payments medium
• Automated Moderation and Monitoring medium
• User Data Ownership and License Grant medium

Related Analysis

• OpenAI Changed Its Privacy Policy 4 Times in One Week. Here Is What Actually Changed.

  Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.