Data

Mistral Vibe and the GDPR: AI training, data location and DPA

Team: Trains on your data unless you switch it off. Data in the EU by default · DPA on request.

Vendor: Mistral AIAssistantsChecked on How we check

Verdict

Is Mistral Vibe GDPR compliant?

Free

Free

Trains on your data unless you switch it off

Data in the EU by default · DPA for business use only

Price: Free

Pro

Personal

Trains on your data unless you switch it off

Data in the EU by default · DPA for business use only

Price: €17.84 / mo

Team

Business

Trains on your data unless you switch it off

Data in the EU by default · DPA on request

Price: €29.74 / user / mo

No tool is GDPR compliant on its own: that depends on how your business uses it. This page shows the vendor's side, from its own pages. It is not legal advice.

Related article: European alternatives to ChatGPT: business terms compared
Plans

Which Mistral Vibe plan stops the AI training?

Every one of the 3 plans we checked trains on your data or doesn't say.

Training

Does Mistral Vibe train on your data?

Trains on your data by default? · Free

Checked

Trains on your data unless you switch it off.

Yes, unless the user opts out: individual Vibe users are not opted out of training by default; uploaded documents count as input

Source: help.mistral.aiSection 'Opt out of Vibe data training' ('Vibe: users are not opted out by default')Checked on

Trains on your data by default? · Pro

Checked

Trains on your data unless you switch it off.

Yes, unless the user opts out: individual Vibe users are not opted out of training by default; uploaded documents count as input

Source: help.mistral.aiSection 'Opt out of Vibe data training' ('Vibe: users are not opted out by default')Checked on

Trains on your data by default? · Team

Checked

Trains on your data unless you switch it off.

Yes, until an administrator opts the organisation out (Enterprise is opted out by default). Thumbs-up/down feedback may be used for training regardless

Source: help.mistral.aiArticle body (updated 3 Sep 2026)Second source: legal.mistral.aiChecked on

Switch-off

How do you turn off AI training in Mistral Vibe?

How to switch training off · Free

Checked

You can switch the training off.

The user turns off training: in the web app, Admin panel > Manage > Vibe > Privacy, disable 'Allow your interactions to be used to train our models'; in the mobile app, Settings > Data & Account Controls, untick 'Enable data sharing'

Source: help.mistral.aiSections for the Admin panel and for iOS and AndroidChecked on

How to switch training off · Pro

Checked

You can switch the training off.

The user turns off training: in the web app, Admin panel > Manage > Vibe > Privacy, disable 'Allow your interactions to be used to train our models'; in the mobile app, Settings > Data & Account Controls, untick 'Enable data sharing'

Source: help.mistral.aiSections for the Admin panel and for iOS and AndroidChecked on

How to switch training off · Team

Checked

You can switch the training off.

An administrator must act: Admin panel > Manage > Vibe > Privacy, turn off 'Allow your interactions to be used to train our models'. The API has its own separate switch (Admin panel > Privacy > Anonymous improvement data)

Source: help.mistral.aiSections 'Opt out of Vibe data training (via the Admin panel)' and 'Opt out of Mistral Studio and API data training' (article dated 3 Sep 2026)Checked on

Location

Where does Mistral Vibe store your data?

Where data is stored by default · Free

Checked

EU by default; some features may send data temporarily to the sub-processor locations listed in Mistral's Trust Center

Source: help.mistral.aiArticle body (dated 12 Aug 2026)Checked on

EU hosting on this plan · Free

Checked

Data in the EU by default.

EU is the default. Switching off features that transfer data outside the EU is offered only to Enterprise

Source: help.mistral.aiParagraph on Enterprise solutionsChecked on

Where data is stored by default · Pro

Checked

EU by default; some features may send data temporarily to the sub-processor locations listed in Mistral's Trust Center

Source: help.mistral.aiArticle body (dated 12 Aug 2026)Checked on

EU hosting on this plan · Pro

Checked

Data in the EU by default.

EU is the default. Switching off features that transfer data outside the EU is offered only to Enterprise

Source: help.mistral.aiParagraph on Enterprise solutionsChecked on

Where data is stored by default · Team

Checked

EU by default; US only if the US API endpoint is chosen; some features may transfer data temporarily outside the EU

Source: help.mistral.aiArticle body (updated 12 Aug 2026)Checked on

EU hosting on this plan · Team

Checked

Data in the EU by default.

EU is the default for Vibe; regional EU/US endpoints for the API

Source: help.mistral.aiArticle bodyChecked on

Contract

Does Mistral Vibe sign a data processing agreement?

Data processing agreement (DPA) · Free

Checked

DPA for business use only.

Only for business use. The EEA consumer terms cover personal use of Vibe; business use falls under Mistral's commercial terms, which incorporate the DPA

Source: legal.mistral.aiOpening paragraphs (scope of the consumer terms)Second source: legal.mistral.aiChecked on

Data processing agreement (DPA) · Pro

Checked

DPA for business use only.

Only for business use. The EEA consumer terms cover personal use of Vibe; business use falls under Mistral's commercial terms, which incorporate the DPA

Source: legal.mistral.aiOpening paragraphs (scope of the consumer terms)Second source: legal.mistral.aiChecked on

Data processing agreement (DPA) · Team

Checked

DPA on request.

Yes. DPA effective 27 Jul 2026 forms part of the Agreement (incorporated by reference); counterparty Mistral AI, Paris

Source: legal.mistral.aiPreamble, sections 11.1-11.2Checked on

Processors

Who else handles Mistral Vibe data?

Sub-processors (companies that handle the data for them) · Free

Checked

25 listed.

Public. Same Trust Center list as for Vibe Team: 25 entries; Vibe hosted by Microsoft (Sweden, Norway), Google (Netherlands, Belgium) and Mistral Compute

Source: trust.mistral.aiSubprocessors tab (checked 16 Oct 2026)Checked on

EU–US Data Privacy Framework · Free

Checked

EU or Swiss vendor.

Not applicable (EU-based vendor, Mistral AI SAS, Paris)

Source: legal.mistral.ai'Who we are' paragraphChecked on

Sub-processors (companies that handle the data for them) · Pro

Checked

25 listed.

Public. Same Trust Center list as for Vibe Team: 25 entries; Vibe hosted by Microsoft (Sweden, Norway), Google (Netherlands, Belgium) and Mistral Compute

Source: trust.mistral.aiSubprocessors tab (checked 16 Oct 2026)Checked on

EU–US Data Privacy Framework · Pro

Checked

EU or Swiss vendor.

Not applicable (EU-based vendor, Mistral AI SAS, Paris)

Source: legal.mistral.ai'Who we are' paragraphChecked on

Sub-processors (companies that handle the data for them) · Team

Checked

25 listed.

Public. 25 entries; Vibe hosted by Microsoft (Sweden, Norway), Google (Netherlands, Belgium), Mistral Compute (France), CoreWeave (EEA); US-located: Stripe, Black Forest Labs (images), Brave (web search), Twilio, Gradual

Source: trust.mistral.aiSubprocessors table, '1-10 of 25 results'Checked on

EU–US Data Privacy Framework · Team

Checked

EU or Swiss vendor.

Not applicable (EU-based vendor, Mistral AI SAS, Paris)

Source: legal.mistral.aiPreamble (Mistral AI, Paris)Checked on

Retention

How long does Mistral Vibe keep your data?

How long data is kept · Free

Checked

Chats are kept until the user deletes the conversation or the account; backend copies may be kept longer under the privacy policy

Source: legal.mistral.aiSection 5 'How long do we keep your personal data?'Second source: help.mistral.aiChecked on

How long data is kept · Pro

Checked

Chats are kept until the user deletes the conversation or the account; backend copies may be kept longer under the privacy policy

Source: legal.mistral.aiSection 5 'How long do we keep your personal data?'Second source: help.mistral.aiChecked on

How long data is kept · Team

Checked

Vibe chats are kept until the user deletes the conversation or the account; backend copies may stay longer under the privacy policy or DPA. After the contract ends, data is deleted or returned and is no longer accessible after 30 days

Source: legal.mistral.aiSection 5 'How long do we keep your personal data?'Second source: legal.mistral.aiChecked on

Security

Which certifications and admin controls does Mistral Vibe have?

Security certifications · Free

Checked

Company-level ISO/IEC 27001:2022, ISO/IEC 27701:2019 and SOC 2 Type II for Mistral AI; scope per product not broken out

Source: trust.mistral.aiTrust Center compliance tiles and documents listChecked on

Admin controls for AI · Free

Checked

Not offered: a personal plan has no organisation admin; the user controls training and connectors in their own settings

Source: help.mistral.aiTitle: company-wide controls are for Team and EnterpriseSecond source: help.mistral.aiChecked on

Security certifications · Pro

Checked

Company-level ISO/IEC 27001:2022, ISO/IEC 27701:2019 and SOC 2 Type II for Mistral AI; scope per product not broken out

Source: trust.mistral.aiTrust Center compliance tiles and documents listChecked on

Admin controls for AI · Pro

Checked

Not offered: a personal plan has no organisation admin; the user controls training and connectors in their own settings

Source: help.mistral.aiTitle: company-wide controls are for Team and EnterpriseSecond source: help.mistral.aiChecked on

Security certifications · Team

Checked

ISO/IEC 27001:2022, ISO/IEC 27701:2019 and SOC 2 Type II (letter of attestation) for Mistral AI; scope per product not broken out

Source: trust.mistral.aiTrust Center compliance tiles and documents listChecked on

Admin controls for AI · Team

Checked

Partly. Team admins can opt the organisation out of training and of Flash Answers, manage users and SSO, and disconnect or disable knowledge connectors

Source: help.mistral.aiList of company-wide controls (article dated 12 Aug 2026)Second source: help.mistral.aiChecked on

Price

What does Mistral Vibe cost?

Price, as shown in Germany · Free

Checked

Free.

EUR 0

Source: mistral.aiPlan cards after selecting currency 'EUR (€)' and country 'Germany'Checked on

Price, as shown in Germany · Pro

Checked

€17.84 / mo.

EUR 17.84 per month including taxes with Germany selected (EUR 14.99 before VAT)

Source: mistral.aiPlan cards after selecting currency 'EUR (€)' and country 'Germany'Checked on

Price, as shown in Germany · Team

Checked

€29.74 / user / mo.

EUR 29.74 per user/month including taxes with Germany selected (EUR 24.99 before VAT); sold from 2 users

Source: mistral.aiTeam card after selecting currency 'EUR (€)' and country 'Germany'Checked on

Alternatives

Mistral Vibe alternatives that don't train on your data

Other assistants tools whose business plan doesn't train on your data and includes a DPA.

The five marks, in order: No AI training · EU hosting · DPA · Sub-processors listed · DPF or EU vendor. ✓ meets it, ✕ doesn't, – partly, ? not stated.

Tool · PlanVerdictYour five rules
  • Langdock

    Business · €29.00 / user / mo

    Says it doesn't train on your dataData in the EU by default · DPA in the terms

    ✓✓✓✓✓

  • Microsoft 365 Copilot

    Business add-on · €18.20 / user / mo

    Doesn't train on your dataData in the EU by default · DPA in the terms

    ✓✓✓✓✓

  • nele.ai

    usage-based credit subscription · See details

    Doesn't train on your dataEU hosting available · DPA on request

    ✓✓✓✓✓

  • Proton Lumo

    Professional · €11.99 / user / mo

    Says it doesn't train on your dataData in the EU (vendor says) · DPA on request

    ✓✓✓✓✓

  • Gemini in Google Workspace

    Business Standard · €13.60 / user / mo

    Doesn't train on your dataLimited EU hosting · DPA in the terms

    ✓–✓✓✓

If no plan gives you the training default or data location you need, the tool may not be the right fit. We design and build what your team is missing around your own rules, and keep it running after launch.

See what we build

Need something your tools can't do?

We design and build what your team is missing, around the way you already work and the data rules you set.

Book a callServices