Vendors · Questionnaire · Mistral AI
Read Mistral AI’s own answers to nine buyer questions
Mistral Studio and Vibe. Each answer quotes Mistral AI’s own page or feed as kept on the day shown. Each question cites the NIST text that asks it. The answers are not a score and not a verdict.
Q1
Does the vendor train its models on business and API customers’ data?
NIST AI 600-1, action GV-6.2-007: “… contribute to unauthorized data collection by vendors or third-parties (e.g., secondary data use) …”
NIST AI RMF 1.0, MEASURE 2.10
Opt-out offered on Mistral Studio pay-as-you-go; Vibe Enterprise is opted out by default
Customers retain full control over this processing and have the right to opt out at any time.
Under “Pay-as-you-go”, in “Controls on Mistral Studio”. Under “Vibe (Enterprise)” the page says: “Enterprise customers are opted out of training by default.” Do you use my user data to train your Artificial Intelligence models?, kept 24 Oct 2026 · sha256 d89b5b5e734d
Q2
Does the vendor train its models on free and consumer use of its products?
NIST AI 600-1, action GV-6.2-007: “… contribute to unauthorized data collection by vendors or third-parties (e.g., secondary data use) …”
NIST AI RMF 1.0, MEASURE 2.10
Yes by default on Vibe, with an opt-out
Input and output data are used by default to train our artificial intelligence models, unless you opt out of training at any time.
Under “Vibe”, in “Controls on Vibe”. Do you use my user data to train your Artificial Intelligence models?, kept 24 Oct 2026 · sha256 d89b5b5e734d
Q3
How long does the vendor keep the data that customers send?
NIST AI 600-1, action GV-6.1-004: “Draft and maintain well-defined contracts and service level agreements (SLAs) that specify content ownership, usage rights, quality standards, security requirements, and content provenance expectations for GAI systems.”
NIST AI RMF 1.0, MEASURE 2.10
Not published in the pages kept
Searched: Do you use my user data to train your Artificial Intelligence models?; Can I activate Zero Data Retention (ZDR)?; Usage and limits.
Q4
Can a customer have the vendor keep none of its data?
NIST AI 600-1, action GV-6.1-004: “Draft and maintain well-defined contracts and service level agreements (SLAs) that specify content ownership, usage rights, quality standards, security requirements, and content provenance expectations for GAI systems.”
NIST AI RMF 1.0, MEASURE 2.10
Zero Data Retention, pay-as-you-go stateless API calls, on approved request
Zero Data Retention (ZDR) is available only with pay-as-you-go and only for stateless API calls.
Under “How to request ZDR” the same page says: “We will review your request and, at our discretion, approve or deny it.” Can I activate Zero Data Retention (ZDR)?, kept 24 Oct 2026 · sha256 c96aadfeac72
Q5
Where does the vendor process and store customer data?
NIST AI 600-1, action GV-6.1-009: “Update and integrate due diligence processes for GAI acquisition and procurement vendor assessments to include intellectual property, data privacy …”
NIST AI RMF 1.0, GOVERN 6.1
Not published in the pages kept
Searched: Do you use my user data to train your Artificial Intelligence models?; Can I activate Zero Data Retention (ZDR)?; Usage and limits.
Q6
Which other companies process customer data for the vendor?
NIST AI 600-1, action GV-6.1-007: “Inventory all third-party entities with access to organizational content and establish approved GAI technology and service provider lists.”
NIST AI RMF 1.0, GOVERN 6.1; NIST AI RMF 1.0, MANAGE 3.1
Not published in the pages kept
Searched: Do you use my user data to train your Artificial Intelligence models?; Can I activate Zero Data Retention (ZDR)?; Usage and limits.
Q7
Which independent audits or certifications does the vendor name?
NIST AI 600-1, Appendix A.1.3: “statement on standards for attestation engagement (SSAE) reports to help with third-party transparency and risk management for GAI systems”
NIST AI RMF 1.0, GOVERN 6.1
Not published in the pages kept
Searched: Do you use my user data to train your Artificial Intelligence models?; Can I activate Zero Data Retention (ZDR)?; Usage and limits.
Q8
Does the vendor publish a history of its service incidents?
NIST AI 600-1, action GV-6.2-007: “Service Level Agreements (SLAs) in vendor contracts that address incident response, response times, and availability of critical support.”
NIST AI RMF 1.0, GOVERN 6.2
No answer kept
The status page refused this site’s request. The page.
Q9
Does the vendor publish the dates on which it retires its models?
NIST AI 600-1, action GV-6.2-007: “Review vendor contracts and avoid arbitrary or capricious termination of critical GAI technologies or vendor services …”
NIST AI RMF 1.0, GOVERN 6.2
Yes: Mistral AI (“Models: deprecated and retired”), with 44 dated retirements kept
Mistral AI, “Models: deprecated and retired”, kept 26 Oct 2026 · sha256 436af2fc5574. The record.
- Mistral AI, Do you use my user data to train your Artificial Intelligence models?, kept 24 Oct 2026.
- Mistral AI, Can I activate Zero Data Retention (ZDR)?, kept 24 Oct 2026.
- Mistral AI, Models: deprecated and retired, kept 26 Oct 2026.
- NIST, NIST AI 600-1, 2024-07. Republished courtesy of the National Institute of Standards and Technology.