Is this your company? Buyers are checking Mistral AI here. Claim mistral.ai free to control the listing, earn the badge buyers trust, and see who's evaluating you.
Claim free
Mistral AI
Sourced from public information. Not yet verified by the company.
Mistral AI is SOC 2 Type II compliant. Mistral AI also holds ISO 27001, ISO 27701, and GDPR.
About
Mistral AI is the European leader in generative artificial intelligence models, providing open and portable generative AI for developers and businesses.
Compliance & infrastructure
Subprocessors
14- MMicrosoft Inc. · Cloud InfrastructureSweden, Norway
- GGoogle LLC · Cloud InfrastructureNetherlands, United States
- SStripe Inc. · Payment and BillingUnited States
- GGet Lago Corp. · BillingIreland
- BBlackforest Labs Inc. · Image GenerationUnited States
- BBrave Software, Inc. · Web SearchUnited States
- FFoundrylabs, Inc. · Code Interpreter (E2B.dev)France, Belgium, Netherlands
- IIntercom Inc. · User supportIreland
- KKong Inc. · Security (API)EEA
- OOry Corp. · User AuthenticationBelgium, Germany
- MMerge API Inc. · Connectors on Le Chat - Transfer ACL and data from the third-party service to leUnited States
- PPlus Five Five, Inc. (Resend) · Email communicationsIreland
Show all 14 subprocessorsShow fewer
- TTwilio Inc. · Phone number verificationUnited States
- CCoreWeave · Inference providerEEA
Compliance leadership
The person who leads Mistral AI's SOC 2 isn't listed yet. Claim this profile to add it.
Penetration test
Unknown. Mistral AI's penetration test vendor isn't listed yet.
Claim this profile to add it.
Recent updates
Mistral AI’s response to Mini Shai-Hulud security incidentMay 2026
A group of attackers temporarily compromised one of our codebase management systems on Tuesday, 26/05/12, through a third-party software supply chain attack described as Mini Shai-Hulud. Go to https://docs.mistral.ai/resources/security-advisories for more information. We rapidly neutralized the attack and mitigated its effects. We took the necessary actions to fully secure our infrastructure and support our customers with guidelines. The investigation is now closed. The attackers were not able to access anything other than certain non-core code repositories. Neither our hosted services, managed user data, nor any of our research and testing environments were compromised.
Addition of a new subprocessor for Le ChatMay 2025
We are writing to inform you of a recent addition to Mistral AI's subprocessor list for Le Chat, effective as of May 7th 2025: Merge. We use Merge to provide our new "Connector" feature on Le Chat. Merge allows us to retrieve the ACL (Access Control List) from the third-party service you connect to our Mistral AI Products, as applicable. The data retrieved by Merge is transferred to the United States. Merge will not process your personal data unless you activate this new feature in your workspace. If you would like to receive email notifications of changes to our subprocessors list, you can subscribe by clicking on the bell icon and adding your email address.
Addition of a subscription buttonApr 2025
Welcome to Mistral AI's Trust Center! With this platform, we provide you with the latest updates related to our Trust Center. Starting today, you can subscribe to receive notifications by clicking the subscription button (bell icon at the top right) and registering your email address. We will only send you notifications about important updates, such as: - Changes to our list of subprocessors (additions or removals), - The release of new security reports.
This listing is partial
5/11 details · 45%SOC2C shows the verified essentials. 6 details are not yet provided by the company. Trust centers list more, so we invite the owner to fill the gaps here.
- Auditorraises trustAdd the CPA firm that issued your SOC 2 so buyers can verify who signed it.
- Report dateraises trustAdd your most recent report period so buyers see how current your SOC 2 is.
- Renewal dateAdd your renewal window so buyers know your coverage is active.
- DocumentsList the documents you share (SOC 2 report, SOC 3, pen-test summary, DPA) and whether each is public or on request.
- HostingAdd where you host (AWS, GCP, Azure) and data residency.
- Security controlsConfirm key controls (encryption, MFA/SSO, annual pen test, BCP/DR) buyers screen for.
Verify your work email to take ownership, earn the badge buyers trust, and add the details that win deals.
Frequently asked
Is Mistral AI SOC 2 compliant?
Is Mistral AI ISO 27001 certified?
Is Mistral AI ISO 27701 certified?
Is Mistral AI GDPR compliant?
Is Mistral AI SOC 2 Type I or Type II?
Can I use Mistral AI's SOC 2 for a vendor risk assessment?
Is Mistral AI penetration tested?
Is Mistral AI secure?
Does Mistral AI have a bug bounty or vulnerability disclosure program?
Who are Mistral AI's subprocessors?
Where does Mistral AI host or store data?
Where is Mistral AI's trust center or security page?
Technology peers that completed SOC 2
Action1
ELJUN LLC
equipifi
