Mistral La Plateforme Data Retention Policy 2026 - Does Mistral Train on Your Data?

Mistral La Plateforme data retention policy

Mistral's paid APIs are not used to train its models, with a default 30-day abuse-monitoring retention window and Zero Data Retention available on the Scale plan for stateless calls. The free Experiment tier can train on API inputs by default unless you opt out. Policy summary last checked June 2026 plus how to route Mistral through Meetily as a BYOK summary provider.

Mistral's training default

Mistral's privacy policy states that it does not use your Input and Output to train its models when you use Le Chat Enterprise or the paid version of its APIs, and Scale plan customers are opted out of training by default. There is an important tier split: the free Experiment tier can use your API inputs and outputs in Mistral's model training programs by default, and you must opt out manually in the Admin Console Privacy menu. So the no-training claim on this page is scoped to the PAID API path that Meetily users should be on.

This is the same shape as the Anthropic and OpenAI defaults for paid traffic, but with a key residency difference: Mistral is a French company operating primarily from EU infrastructure.

When Meetily users select Mistral as their summary provider via BYOK, the request hits api.mistral.ai under your API key. The paid-API defaults on this page apply unless you are on the free tier or have a separate commercial arrangement.

Retention

For the standard stateless APIs, Mistral keeps your Input and Output for the time needed to generate the Output and then for 30 rolling days to monitor abuse, after which it is deleted, unless Zero Data Retention is activated. Two API paths store data longer: the Agents API retains data until you terminate your account, and the Fine-Tuning API retains it until you delete it from Mistral AI Studio or terminate your account.

The Mistral Le Chat consumer interface operates under separate terms and may retain conversations for longer; this page covers the API path only. For the binding text, consult the current privacy policy and DPA on legal.mistral.ai before deployment in regulated environments.

Zero data retention and EU residency

EU residency is Mistral's default value proposition for La Plateforme. For customers subject to GDPR or organizations that need to avoid US data transfers, Mistral is one of the better cloud LLM choices because:

Mistral SAS is a French legal entity, not a US subprocessor.
La Plateforme runs primarily on EU-based infrastructure.
The DPA is written with GDPR as the baseline, not as an addendum.

Zero Data Retention is available, but it is scoped: it can be activated only on the Scale plan and only for stateless API calls such as chat completions, embeddings, moderation, OCR, and audio. It does not apply to stateful products like agents, batch processing files, conversations, libraries, or Le Chat. When ZDR is on, Mistral does not retain inputs or outputs beyond what is needed to return the response, and the 30-day abuse-monitoring window does not apply.

How Meetily uses Mistral

Meetily routes Mistral traffic through your own API key. Your account's contract terms apply. The transcript text is sent over TLS to api.mistral.ai for summarization, and the response is returned to Meetily and stored locally on your device. Audio is never transmitted to Mistral at any point.

For EU customers who want zero cross-border data transfer at any pipeline stage, Mistral's EU-resident API plus Meetily's local transcription gives you a fully European data path for the cloud-summary route. For zero retention by construction, switch to local Ollama and keep the entire pipeline on-device.

References

This page was last checked on 29 June 2026. Always confirm the current terms against Mistral's own linked policy before a regulated deployment.

"Privacy Policy", Mistral AI. https://legal.mistral.ai/terms/privacy-policy - accessed 29 June 2026. Source for the 30-rolling-day abuse-monitoring retention window, the Agents and Fine-Tuning API exceptions, and the no-training commitment for the paid version of the APIs.
"Can I activate Zero Data Retention (ZDR)?", Mistral Help Center. https://help.mistral.ai/en/articles/347612-can-i-activate-zero-data-retention-zdr - accessed 29 June 2026. Source for ZDR being limited to the Scale plan and to stateless API endpoints only.
"Can I opt out of my input or output data being used for training?", Mistral Help Center. https://help.mistral.ai/en/articles/455207-can-i-opt-out-of-my-input-or-output-data-being-used-for-training - accessed 29 June 2026. Source for Scale plan being opted out of training by default and the free Experiment tier opting in by default with a manual opt-out.
"Data Processing Addendum", Mistral AI. https://legal.mistral.ai/terms/data-processing-addendum - accessed 29 June 2026. Source for the GDPR-aligned DPA, EU data residency, and deletion procedures.

Frequently asked questions

Does Mistral train models on my API prompts? (free vs paid)

It depends on the plan, and the split matters. Mistral's privacy policy states it does not use your Input and Output to train its models when you use the paid version of its APIs, and Scale plan customers are opted out of training by default. The free Experiment tier is different: API inputs and outputs may be included in Mistral's model training programs by default, and you must opt out manually in the Admin Console Privacy menu. For meeting transcripts, use a paid Mistral API key in Meetily so the no-training default applies to your traffic.

What is the default retention period for Mistral API traffic?

For the standard stateless APIs, Mistral keeps your Input and Output for the time needed to generate the Output and then for 30 rolling days to monitor abuse, after which it is deleted, unless Zero Data Retention is activated. Two exceptions store data longer: the Agents API keeps data until you terminate your account, and the Fine-Tuning API keeps it until you delete it or terminate your account. The Le Chat consumer interface has separate terms and is out of scope for this page.

Is zero data retention available for Mistral?

Yes, but it is scoped. Zero Data Retention is available only on the Scale plan and only for stateless API calls (such as chat completions, embeddings, moderation, OCR, and audio). It does not apply to stateful products like agents, batch files, conversations, libraries, or Le Chat. When ZDR is active, Mistral does not retain inputs or outputs beyond what is needed to return the response, and the 30-day abuse window does not apply.

Where is Mistral API data stored geographically?

Mistral is a French company and operates La Plateforme from EU infrastructure. Data residency in the EU is the default for La Plateforme, which is attractive for organizations subject to GDPR and EU data sovereignty rules. Confirm the current region scope in your DPA.

How do I request deletion of data Mistral has retained?

Submit a deletion request per the procedures in Mistral's DPA. Account-level deletion is also available through the La Plateforme console.

Does Mistral have SOC 2 or ISO 27001 certifications?

Mistral publishes its compliance posture on legal.mistral.ai. ISO 27001 is the most relevant baseline; check the current certifications list before deployment in regulated environments.

How does Meetily handle Mistral when I pick it as my summary provider?

Meetily transcription is always 100% local. When you select a Mistral model as your summary provider via BYOK, Meetily routes transcript text (not audio) to the Mistral API using your own key. The retention and training defaults on this page apply to your traffic.

Is Mistral a good choice for EU customers under GDPR?

Yes. EU-based infrastructure, an EU corporate entity, and a GDPR-aligned DPA make Mistral one of the better cloud LLM choices for EU customers who need to avoid US data transfers. Pair it with Meetily's local transcription path for a fully EU-resident pipeline at the summary stage.