Mistral AI

Mistral AI is a French simplified joint-stock company (SAS) registered with RCS Paris 952 418 325 at 15 rue des Halles, 75001 Paris. Founder and CEO Arthur Mensch is the publication director on the legal notice. A California C-corporation, Mistral AI Inc. (325 Lytton Avenue Suite 300, Palo Alto, CA 94301), was incorporated on 31 January 2024 for the US market; the parent's privacy policy nonetheless names only the French SAS as the data controller. EU and UK users contract with the French SAS; US users may opt into the US API endpoint and the US subsidiary. The commercial terms triage governing law: France and Paris courts for All Other Regions including the EEA, California and Santa Clara County for the Americas, and Singapore for APAC.

Mistral states verbatim in its help center: 'By default, your data is hosted in the European Union. You may, however, explicitly use our US API endpoint and in such case your data is hosted in the United States.' The default EU compute path runs primarily on Google Cloud Platform in Ireland; on 2025-02-10 Mistral added the USA to the DPA Schedule of permitted subprocessor locations, alongside the existing Ireland region. Mistral is also building its own GPU datacenters: a 44 MW Paris-area facility with 13,800 NVIDIA GB300 GPUs (funded by a March 2026 EUR 830 million bank-debt round) and a Borlange Sweden facility with EcoDataCenter (EUR 1.2 billion, announced February 2026).

Per the privacy policy: 'We do not use your Input and Output to train our artificial intelligence models when you use Le Chat Enterprise or the paid version of our APIs.' The free Le Chat consumer tier and the free API tier do not carry this guarantee. API inputs and outputs are retained for thirty rolling days per the privacy policy; Le Chat consumer conversations are retained until the user deletes the conversation or the account. Customers using Le Chat Enterprise can configure custom retention as part of the enterprise contract.

Yes, indirectly. The French SAS itself is not US-incorporated, but its wholly-owned California C-corporation Mistral AI Inc. is subject to US law and CLOUD Act warrants for data it controls. The privacy policy names only the French SAS as the data controller, which limits the data Mistral AI Inc. holds in the ordinary course of business. Customers using the EU API endpoint and contracting with the French SAS keep their data in the European Union; customers who explicitly opt into the US API endpoint move their data to US infrastructure and to Mistral AI Inc.'s operational reach.

The list lives at https://trust.mistral.ai/subprocessors and renders through the Vanta trust portal; customers can subscribe to updates per the help-center article 455208. Mistral's primary inference subprocessor is Google Cloud Platform; the marketing site uses Vercel (declared in the legal notice), Cloudflare and Netlify; trust documents are hosted on Vanta; corporate email uses SendGrid via mxrecord.io with Google Workspace as fallback. Per the DPA, customers have a 10-day window to object in writing to any new subprocessor on reasonable grounds.

Mistral is a signatory of the General-Purpose AI Code of Practice, which it signed in July 2025 (the Code entered into force on 2 August 2025). The company publishes per-product AI-governance pages at legal.mistral.ai/ai-governance: the Mistral Code product, for example, is publicly declared 'not a high-risk AI System' and the company states it is 'currently working on implementing the measures required by the EU AI Act.' Mistral is also a vocal advocate for European AI sovereignty, publishing a European AI Playbook at europe.mistral.ai that argues 'over 80% of our digital infrastructure remains dependent on non-EU providers.'