Backfrom Mistral’s own policies · verified 2026-09-02
Mistral: data residency & retention
Headquarters
🇫🇷 France (EU)
Where inference runs
EU, US
By default, data is hosted in the European Union, with an optional explicit US API endpoint; temporary transfers to subprocessors outside the EU are possible per its Trust Center list.
Region pinning
Yes, self-serve
EU hosting is the default and the US endpoint is an explicit opt-in; enterprise customers can additionally deactivate features involving data transfers outside the EU.
Prompt retention
Retained · 30 days
API inputs and outputs are kept 30 rolling days for abuse monitoring, then deleted, unless Zero Data Retention is activated.
Trains on API data
No
Pay-as-you-go API data is not used for training by default; free/experimental-tier data may be used unless you opt out.
Zero data retention
Available
ZDR is available on pay-as-you-go for stateless endpoints via a request approved at Mistral's discretion; it does not cover stateful products (agents, files, batch).
Compiled from Mistral’s published privacy policy, terms, and documentation on 2026-09-02. “Not disclosed” means Mistral publishes nothing on the point. Policies change without notice, so verify against the sources above before relying on this for compliance decisions.