Mistral Studio (free mode)
From AI API data terms: training, retention and zero retention: What does each AI provider say happens to data sent to its commercial API: is it used for training, how long is it kept, and can zero retention be had?
Provider: Mistral
The company offering the API, as named on its own page.
Controls on Mistral Studio Free mode As stated during subscription, we may use your data (input and output) to train our artificial intelligence models.
Source: https://help.mistral.ai/en/articles/347617-do-you-use-my-user-data-to-train-your-artificial-intelligence-models. Read 2026-11-01. Checked by a second reader.
Offering: Mistral Studio free mode
The API, tier or platform the row covers, in the provider's words.
Controls on Mistral Studio Free mode As stated during subscription, we may use your data (input and output) to train our artificial intelligence models.
Source: https://help.mistral.ai/en/articles/347617-do-you-use-my-user-data-to-train-your-artificial-intelligence-models. Read 2026-11-01. Checked by a second reader.
Trains on API data by default: Yes
True or false only where the text plainly says what happens to this offering's API data with no opt-in or opt-out by the customer. An opt-out with no stated default is left blank. Where pages differ: legal or privacy page first, then help or trust pages, then developer docs, with the other in conflicts.
Controls on Mistral Studio Free mode As stated during subscription, we may use your data (input and output) to train our artificial intelligence models.
Source: https://help.mistral.ai/en/articles/347617-do-you-use-my-user-data-to-train-your-artificial-intelligence-models. Read 2026-11-01. Read once.
Default retention: For the period necessary to generate the output and then for thirty (30) rolling days to monitor abuse
How long prompts and outputs are kept by default, in the provider's words. Where pages differ: legal or privacy page first, then help or trust pages, then developer docs, with the other in conflicts. A page that's only less specific isn't a conflict: the more specific statement is the value.
Data we use to provide our APIs to you: Except for specific APIs, we keep your Input and Output for the period necessary to generate the Output and then for thirty (30) rolling days to monitor abuse (unless zero data retention is activated).
Source: https://legal.mistral.ai/terms/privacy-policy/. Read 2026-11-01. Checked by a second reader.
Exceptions: If you use our Agents API, we keep your input and output until you terminate your account
The main case with different retention, in the provider's words: first a model carved out of the general promise, then a feature, then a case such as flagged content. Pages rank as for Default retention; between pages of equal rank, the one naming the models. One passage only, so others may exist.
If you use our Agents API, we keep your Input and Output until you terminate your account.
Source: https://legal.mistral.ai/terms/privacy-policy/. Read 2026-11-01. Checked by a second reader.
Zero retention offered: No
True only where the provider plainly offers zero data retention by that name for this offering; false only where it plainly excludes it. A similar control under another name is left blank here and described in How to get it.
ZDR is available only with pay-as-you-go. If you’re in Free mode, enable pay-as-you-go first.
Source: https://help.mistral.ai/en/articles/347612-can-i-activate-zero-data-retention-zdr. Read 2026-11-01. Checked by a second reader.
How to get it: ZDR is available only with pay-as-you-go. If you're in free mode, enable pay-as-you-go first
What the provider says is needed for zero retention. Where it has no offer by that name, its nearest named control or pointer, in its own words. Where pages differ: legal or privacy page first, then help or trust pages, then developer docs, with the other in conflicts.
ZDR is available only with pay-as-you-go. If you’re in Free mode, enable pay-as-you-go first.
Source: https://help.mistral.ai/en/articles/347612-can-i-activate-zero-data-retention-zdr. Read 2026-11-01. Checked by a second reader.
BAA available: Not found
True where the provider says it signs or offers a HIPAA Business Associate Agreement, or sets terms for use under one, for this offering. A general cloud BAA that the page doesn't tie to this offering, or an invitation to ask, is left blank.
No source we could use stated this. A blank never means no.
Data location: By default, your data is hosted in the European Union. You may explicitely use our US API endpoint and your data is hosted in the United States
Where the provider states data is processed or stored, in its words. Where pages differ: legal or privacy page first, then help or trust pages, then developer docs, with the other in conflicts.
By default, your data is hosted in the European Union. You may, however, explicitely use our US API endpoint and in such a case your data is hosted in the United States.
Source: https://help.mistral.ai/en/articles/347629-where-do-you-store-my-data-or-my-organization-s-data. Read 2026-11-01. Checked by a second reader.