Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
If you create a shareable link to a conversation, anyone who receives that link can view the conversation, and the link can be passed on further. Mistral AI does not control who ultimately sees it.
This analysis describes what Mistral AI's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
Shareable conversation links can spread beyond your intended recipient without any access control, which means sensitive or personal information in a shared conversation could be viewed by unintended parties.
The updated terms authorize Mistral AI to execute a broader range of actions on your behalf when you connect third-party services, including data modification, deletion, transmission, and invocation of external systems. Previously, the terms limited Mistral's authority to retrieve, process, and store data; the revised language now permits executing, modifying, deleting, invoking, and transmitting data through third-party services. Mistral's liability disclaimer has been expanded to explicitly exclude responsibility for data corruption, deletion, unauthorized disclosure, or other actions performed by third-party services on your request. You are now explicitly responsible for all actions you request Mistral AI Products to perform through third-party integrations, including how those third parties handle the data involved.
View change record →New provision clarifies that shared conversation links lack access controls and places responsibility on users for preventing unintended information disclosure.
View full change record →Conversation links you share can be forwarded to anyone, and Mistral AI takes no responsibility for who ultimately views your conversation. Users should treat conversation links as effectively public once shared and avoid including sensitive personal or third-party information in conversations they intend to share.
How other platforms handle this
If you registered to use Notion's Services with such an email address, but you do not use the Services in connection with your organization...you may transfer your account to a different email address.
We will also provide an individual opt-out choice, or opt-in for sensitive data, before we share your data with third parties other than our agents, or before we use it for a purpose other than which it was originally collected.
If you choose to reveal any personal information about yourself to other users, you do so at your own risk. We strongly encourage you to use caution in disclosing any personal information online.
Monitoring
Mistral AI has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 20 platforms.
"Anyone with the Conversation Link will be able to view your conversation, including any person with whom your intended recipient shares the Conversation Link. We do not monitor or control who accesses your conversations via Conversation Links that you create. As such, it is your responsibility to ensure that you are comfortable sharing, and have the right to share, all information that is shared in the Conversation Link.Excerpt from Mistral AI's Terms of Service
(1) REGULATORY LANDSCAPE: The conversation link feature creates a user-controlled data disclosure mechanism that engages user responsibility for third-party data shared in conversations. Privacy frameworks in user jurisdictions may impose obligations on users who share personal data about third parties via conversation links, including under UK GDPR's individual accountability provisions. Mistral AI's disclaimer of control does not eliminate potential regulatory obligations if the platform facilitates personal data disclosures. (2) GOVERNANCE EXPOSURE: Low. The provision clearly discloses the risks of link sharing and places responsibility on the user. The governance exposure is primarily a user education issue rather than a systemic platform risk. The disclaimer is clear and the feature is opt-in. (3) JURISDICTION FLAGS: Users in jurisdictions with strong third-party data protection obligations should assess whether sharing conversations containing third-party personal information via links creates compliance obligations for them as individuals. Healthcare or legal professionals using Mistral AI who share conversations should consider professional confidentiality obligations independently of these terms. (4) CONTRACT AND VENDOR IMPLICATIONS: Organizations deploying Mistral AI for employee use should establish internal policies on conversation link sharing, particularly for employees who may inadvertently share conversations containing confidential business information or personal data about clients or colleagues. (5) COMPLIANCE CONSIDERATIONS: User education programs should address the conversation link feature specifically, noting that links are effectively public once created and shared. Organizations should assess whether their acceptable use policies for Mistral AI address conversation link sharing as a separate risk category.
Regulatory citations, enforcement risk, and due diligence action items.
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Provision-level monitoring, governance timelines, and regulatory mapping built from archived source documents and historical version tracking.
Shareable conversation links can spread beyond your intended recipient without any access control, which means sensitive or personal information in a shared conversation could be viewed by unintended parties.
Conversation links you share can be forwarded to anyone, and Mistral AI takes no responsibility for who ultimately views your conversation. Users should treat conversation links as effectively public once shared and avoid including sensitive personal or third-party information in conversations they intend to share.
ConductAtlas has identified this type of provision across 290 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Mistral AI.