This analysis describes what Mistral AI's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
The updated terms restrict API access to business customers only; consumers outside the EEA can no longer use Mistral AI's APIs for personal needs. Mistral AI Studio is also now limited to business customers and excluded from the consumer terms. Additionally, the terms now explicitly disclaim third-party models and connectors as not Mistral AI products and provide them 'as is' without warranties beyond legal guarantees that cannot be excluded. Consumers who were previously using APIs for personal purposes will no longer have contractual authorization to do so under these terms.
View change record →The updated terms expand the scope of actions Mistral AI may perform when users connect third-party services. Previously, the terms stated Mistral AI could 'retrieve, process, and store' data; the revised language now explicitly authorizes the company to 'execute actions upon your request, including to retrieve, process, store, execute, transmit, modify, delete, invoke, or otherwise act upon' data and resources. The terms also clarify that users are solely responsible for actions they request through these integrations, and that Mistral AI bears no responsibility for actions performed by third-party MCP servers, including 'actions, executions, routing, modifications, accesses, storage, transfers, disclosures, corruption, or deletions' of data or systems. Users should review the specific third-party service terms before enabling integrations, as the updated language grants broader operational authority over connected data and systems.
View change record →How other platforms handle this
Where required by law, we provide adequate protection for the transfer of personal data in accordance with applicable law, such as by obtaining your consent, relying on the European Commission's adequacy decisions, or executing Standard Contractual Clauses.
We will endeavor to ensure that, by default, we only collect and process your Data needed to provide you access to the Platform and our Services...This means that we will neither publish nor share your Data by default.
We use industry standard technical and organizational measures to secure the information we store.
"You will benefit from any mandatory provisions of the laws of your country of residence or domicile and nothing in these Terms will affect your rights as a consumer to rely on such mandatory provisions...Excerpt from Mistral AI's Terms of Service
Get the weekly coverage letter
Companies change their terms without announcing it. We capture governance documents, compare each new version with the last, and publish what changed, with the source text behind it. One email a week on what we found and what we could not reach.
The clause states: “You will benefit from any mandatory provisions of the laws of your country of residence or domicile and nothing in these Terms will affect your rights as a consumer to rely on such mandatory provisions...”
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Mistral AI.