{
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:4167f72b-cf3d-5745-b392-e6caad932639",
  "version": 1,
  "metadata": {
    "timestamp": "2026-11-04T00:00:00Z"
  },
  "components": [
    {
      "type": "machine-learning-model",
      "bom-ref": "https://jesseahawkins.com/vendors/mistral/aibom/component",
      "name": "Mistral AI: Mistral Studio and Vibe",
      "properties": [
        {
          "name": "com.jesseahawkins:fact:dpa",
          "value": "Published online; Mistral does not sign it offline"
        },
        {
          "name": "com.jesseahawkins:evidence:dpa",
          "value": "snapshot:sha256:c96aadfeac722f65391666944a3e15859341f48d6418bf79e34919e2cd8b2d49"
        },
        {
          "name": "com.jesseahawkins:recorded-at:dpa",
          "value": "2026-10-24T00:00:00Z"
        },
        {
          "name": "com.jesseahawkins:valid-from:dpa",
          "value": "2026-10-24"
        },
        {
          "name": "com.jesseahawkins:fact:trains_on_customer_data",
          "value": "Opt-out offered on Mistral Studio pay-as-you-go; Vibe Enterprise is opted out by default"
        },
        {
          "name": "com.jesseahawkins:evidence:trains_on_customer_data",
          "value": "snapshot:sha256:d89b5b5e734d152d8688519b0a5e89ead5f72b8361021febf216a7dfae1c4bdf"
        },
        {
          "name": "com.jesseahawkins:recorded-at:trains_on_customer_data",
          "value": "2026-10-24T00:00:00Z"
        },
        {
          "name": "com.jesseahawkins:valid-from:trains_on_customer_data",
          "value": "2026-10-24"
        },
        {
          "name": "com.jesseahawkins:responsive-to:trains_on_customer_data",
          "value": "eu-ai-act@2026-07-27:annex-iv/2/d eu-ai-act@2026-07-27:annex-xi/s1/2/c iso-42001@2023:A.7.3 iso-42001@2023:A.7.5 nist-ai-rmf@1.0:MEASURE-2.10"
        },
        {
          "name": "com.jesseahawkins:fact:trains_on_free_use",
          "value": "Yes by default on Vibe, with an opt-out"
        },
        {
          "name": "com.jesseahawkins:evidence:trains_on_free_use",
          "value": "snapshot:sha256:d89b5b5e734d152d8688519b0a5e89ead5f72b8361021febf216a7dfae1c4bdf"
        },
        {
          "name": "com.jesseahawkins:recorded-at:trains_on_free_use",
          "value": "2026-10-24T00:00:00Z"
        },
        {
          "name": "com.jesseahawkins:valid-from:trains_on_free_use",
          "value": "2026-10-24"
        },
        {
          "name": "com.jesseahawkins:fact:usage_limits",
          "value": "Rate limits per model, set by the plan and shown in the Admin Panel, not on the page; spending limits by organization and workspace"
        },
        {
          "name": "com.jesseahawkins:evidence:usage_limits",
          "value": "snapshot:sha256:4f6f0eeb88959160fbfc9f5b822009fd0bb400e6d9eaa82e473a46e58a95b6f6"
        },
        {
          "name": "com.jesseahawkins:recorded-at:usage_limits",
          "value": "2026-11-03T00:00:00Z"
        },
        {
          "name": "com.jesseahawkins:valid-from:usage_limits",
          "value": "2026-11-03"
        },
        {
          "name": "com.jesseahawkins:fact:zero_data_retention",
          "value": "Zero Data Retention, pay-as-you-go stateless API calls, on approved request"
        },
        {
          "name": "com.jesseahawkins:evidence:zero_data_retention",
          "value": "snapshot:sha256:c96aadfeac722f65391666944a3e15859341f48d6418bf79e34919e2cd8b2d49"
        },
        {
          "name": "com.jesseahawkins:recorded-at:zero_data_retention",
          "value": "2026-10-24T00:00:00Z"
        },
        {
          "name": "com.jesseahawkins:valid-from:zero_data_retention",
          "value": "2026-10-24"
        },
        {
          "name": "com.jesseahawkins:withheld:ai_subprocessors",
          "value": "no-value"
        },
        {
          "name": "com.jesseahawkins:withheld:certifications",
          "value": "no-value"
        },
        {
          "name": "com.jesseahawkins:withheld:customer_data_retention_period",
          "value": "no-value"
        },
        {
          "name": "com.jesseahawkins:withheld:data_residency",
          "value": "no-value"
        },
        {
          "name": "com.jesseahawkins:quote:dpa",
          "value": "Our Data Processing Agreement (DPA) is available in our Data Processing Addendum and is regularly updated to reflect our processing, services, security measures, and applicable regulations. We cannot sign the DPA offline."
        },
        {
          "name": "com.jesseahawkins:source:dpa",
          "value": "https://help.mistral.ai/en/articles/347612-can-i-activate-zero-data-retention-zdr"
        },
        {
          "name": "com.jesseahawkins:quote:trains_on_customer_data",
          "value": "Customers retain full control over this processing and have the right to opt out at any time."
        },
        {
          "name": "com.jesseahawkins:source:trains_on_customer_data",
          "value": "https://help.mistral.ai/en/articles/347617-do-you-use-my-user-data-to-train-your-artificial-intelligence-models"
        },
        {
          "name": "com.jesseahawkins:quote:trains_on_free_use",
          "value": "Input and output data are used by default to train our artificial intelligence models, unless you opt out of training at any time."
        },
        {
          "name": "com.jesseahawkins:source:trains_on_free_use",
          "value": "https://help.mistral.ai/en/articles/347617-do-you-use-my-user-data-to-train-your-artificial-intelligence-models"
        },
        {
          "name": "com.jesseahawkins:quote:usage_limits",
          "value": "API rate limits define how much traffic your Organization can send. They are shown in Admin Panel›API›Limits ↗."
        },
        {
          "name": "com.jesseahawkins:source:usage_limits",
          "value": "https://docs.mistral.ai/admin/billing-usage/usage-limits"
        },
        {
          "name": "com.jesseahawkins:quote:zero_data_retention",
          "value": "Zero Data Retention (ZDR) is available only with pay-as-you-go and only for stateless API calls."
        },
        {
          "name": "com.jesseahawkins:source:zero_data_retention",
          "value": "https://help.mistral.ai/en/articles/347612-can-i-activate-zero-data-retention-zdr"
        }
      ]
    }
  ],
  "properties": [
    {
      "name": "com.jesseahawkins:vendor",
      "value": "mistral"
    },
    {
      "name": "com.jesseahawkins:record",
      "value": "https://jesseahawkins.com/vendors/mistral/"
    },
    {
      "name": "com.jesseahawkins:notice",
      "value": "This record is a factual recitation of publicly available vendor documentation as of the verification date. It does not constitute a legal opinion, a regulatory compliance certification, or an allegation of wrongdoing. The kept pages are held strictly as an evidentiary record that supports these findings."
    },
    {
      "name": "com.jesseahawkins:signed",
      "value": "false"
    },
    {
      "name": "com.jesseahawkins:signature-note",
      "value": "The AIBOM files of this record are not signed. A signature waits on a signing key held in a key management service. Until then, check each quote against the kept page and its sha256."
    }
  ]
}