Backfrom Mistral’s own policies · verified 2026-10-14
Mistral: data residency & retention
Headquarters
🇫🇷 France (EU)
Where inference runs
EU, US
By default, data is hosted in the European Union, with an optional explicit US API endpoint; temporary transfers to subprocessors outside the EU are possible per its Trust Center list.
Region pinning
Yes, self-serve
EU hosting is the default and the US endpoint is an explicit opt-in; enterprise customers can additionally deactivate features involving data transfers outside the EU.
Prompt retention
Retained · 30 days
API inputs and outputs are kept 30 rolling days for abuse monitoring, then deleted, unless Zero Data Retention is activated.
Trains on API data
Not disclosed
Free-mode data may be used for training unless you opt out. For pay-as-you-go, Mistral says customers can opt out at any time (the 'Anonymous improvement data' toggle in Admin, Privacy), and its commercial terms allow training on products set to opt-in by default without saying which those are. Labs and Preview models are always used for training.
Zero data retention
Available
ZDR is available on pay-as-you-go for stateless endpoints via a request approved at Mistral's discretion; it does not cover stateful products (agents, files, batch).
Compiled from Mistral’s published privacy policy, terms, and documentation on 2026-10-14. “Not disclosed” means Mistral publishes nothing on the point. Policies change without notice, so verify against the sources above before relying on this for compliance decisions.