This analysis describes what Mistral AI's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
The updated terms restrict API access to business customers only; consumers outside the EEA can no longer use Mistral AI's APIs for personal needs. Mistral AI Studio is also now limited to business customers and excluded from the consumer terms. Additionally, the terms now explicitly disclaim third-party models and connectors as not Mistral AI products and provide them 'as is' without warranties beyond legal guarantees that cannot be excluded. Consumers who were previously using APIs for personal purposes will no longer have contractual authorization to do so under these terms.
View change record →The updated terms expand the scope of actions Mistral AI may perform when users connect third-party services. Previously, the terms stated Mistral AI could 'retrieve, process, and store' data; the revised language now explicitly authorizes the company to 'execute actions upon your request, including to retrieve, process, store, execute, transmit, modify, delete, invoke, or otherwise act upon' data and resources. The terms also clarify that users are solely responsible for actions they request through these integrations, and that Mistral AI bears no responsibility for actions performed by third-party MCP servers, including 'actions, executions, routing, modifications, accesses, storage, transfers, disclosures, corruption, or deletions' of data or systems. Users should review the specific third-party service terms before enabling integrations, as the updated language grants broader operational authority over connected data and systems.
View change record →How other platforms handle this
We will retain your Data for as long as necessary: (i) to achieve the purposes as set out in this Policy; (ii) as required by applicable laws and regulations, including any mandated retention periods...
Where specific retention periods are required by law, we comply with those timeframes; otherwise, we apply the criteria above to determine how long to retain the information.
each Party will, upon written request, return or destroy all Confidential Information of the other Party in its possession or control.
"You may not be able to export Your Data after your account is terminated, so if you would like to export Your Data, please complete the export prior to the termination of your account.Excerpt from Mistral AI's Terms of Service
Get the weekly coverage letter
Companies change their terms without announcing it. We capture governance documents, compare each new version with the last, and publish what changed, with the source text behind it. One email a week on what we found and what we could not reach.
The clause states: “You may not be able to export Your Data after your account is terminated, so if you would like to export Your Data, please complete the export prior to the termination of your account.”
ConductAtlas has identified this type of provision across 268 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Mistral AI.