Generating or attempting to generate child sexual abuse material is completely banned, and if Mistral AI suspects any such activity, it will report you to law enforcement and permanently delete your account with no exceptions.
This analysis describes what Mistral AI's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This is the most absolute provision in the policy, combining mandatory law enforcement referral with automatic account termination, distinguishing it from other violations where enforcement is discretionary.
Any user whose account is flagged under this provision faces both permanent account termination and potential law enforcement referral, with no discretion or appeal process described in this document.
How other platforms handle this
You agree not to engage in any of the following prohibited activities: (i) copying, distributing, or disclosing any part of the Service in any medium, including without limitation by any automated or non-automated 'scraping'; (ii) using any automated system, including without limitation 'robots,' 's...
When you use Microsoft services, you must comply with Microsoft's Code of Conduct. Prohibited conduct includes using the services to do anything illegal, transmitting content that is harmful, threatening, abusive, harassing, tortious, defamatory, vulgar, obscene, or otherwise objectionable. Microsof...
You are solely responsible for the content that you post, upload, or otherwise make available through the Services. Udemy may, in its sole discretion, remove or disable access to any content that violates these Terms or that Udemy determines, in its sole discretion, is otherwise objectionable.
Monitoring
Mistral AI has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
"Mistral AI has a zero tolerance policy regarding CSAM. Any generation or attempt to generate CSAM on our Mistral AI Products is strictly prohibited. We will report all actual or suspected CSAM to the relevant law enforcement authorities and will terminate your account.— Excerpt from Mistral AI's Mistral AI Usage Policy
(1) REGULATORY LANDSCAPE: This provision engages national and EU-level child protection statutes, including the U.S. PROTECT Our Children Act (which requires electronic service providers to report apparent CSAM to NCMEC), EU Directive 2011/93 on combating sexual abuse of children, and potentially Regulation (EU) 2021/1232 on temporary derogation from ePrivacy Directive for CSAM detection; the relevant enforcement authorities include NCMEC, national law enforcement agencies, and data protection authorities where detection involves scanning user content. The mandatory reporting obligation may interact with GDPR Article 6 lawful basis requirements for processing personal data in the context of detection, though child protection obligations generally create a lawful basis override. (2) GOVERNANCE EXPOSURE: High. The mandatory and unconditional nature of the law enforcement reporting obligation, combined with automatic account termination, creates a significant operational governance requirement for any enterprise customer whose platform might transmit or process user content through Mistral AI's hosted products, as detection and reporting could implicate third-party user data. (3) JURISDICTION FLAGS: Reporting obligations vary by jurisdiction; U.S. obligations under the PROTECT Our Children Act apply to electronic service providers with actual knowledge of apparent CSAM, while EU obligations depend on member state implementation of Directive 2011/93. Enterprise customers in the EU should assess how this reporting obligation interacts with their own GDPR data processing agreements with Mistral AI. (4) CONTRACT AND VENDOR IMPLICATIONS: Organizations with a DPA in place with Mistral AI should review whether the mandatory reporting provision is addressed in the data processing addendum, particularly regarding what data is shared with law enforcement and how data subjects are notified. This provision asserts an unconditional right to terminate accounts and report to authorities, which may affect vendor risk assessments for platforms where third-party end users submit content. (5) COMPLIANCE CONSIDERATIONS: Enterprise compliance teams should assess whether their user-facing terms of service downstream of Mistral AI's platform align with this zero tolerance provision, and whether their own incident response procedures account for the possibility of a Mistral AI-initiated law enforcement referral involving their users' data.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Monitor: 25 platforms + same-day alerts. No credit card required.
Compliance Governance Intelligence
Need to monitor specific governance provisions?
Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
This is the most absolute provision in the policy, combining mandatory law enforcement referral with automatic account termination, distinguishing it from other violations where enforcement is discretionary.
Any user whose account is flagged under this provision faces both permanent account termination and potential law enforcement referral, with no discretion or appeal process described in this document.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Mistral AI.