AI assistants
Mistral Vibe privacy rating
AI assistant from French company Mistral AI, formerly called Le Chat, for chat, research, documents and coding tasks. Available on the web and in mobile apps.
Summary
Mistral Vibe scores 33 out of 100 (grade F) on the AI assistants criteria. It meets 2 of 12 criteria: no ads or data sales and TLS configuration. It partly meets independent audit, security headers, no training on your data and limited chat retention. It does not meet open source, no trackers or telemetry, transparency report, tells users about requests, runs locally and no account needed. It is based in France: Nine Eyes member; EU member (GDPR). Automated tests: SSL Labs grade A+ and Mozilla HTTP Observatory grade B+.
Score 33 out of 100. How scoring works
Criteria
-
No
Open source Weight 3 of 3
Is all the source code needed to run the product public?
Closed source. Some Mistral models are published with open weights, but the assistant is not open source.
-
No
No trackers or telemetry Weight 3 of 3
Are the website and apps free of third-party trackers, with any analytics anonymous and any telemetry off by default?
The website uses analytics cookies and partner marketing cookies, and the Android app includes Sentry.
-
Yes
No ads or data sales Weight 2 of 3
Is the product funded without advertising, ad targeting or selling user data?
Funded by subscriptions and business sales. Conversations are not used for advertising.
-
Partial
Independent audit Weight 2 of 3
Has an independent security or privacy audit been published within the last three years?
Mistral has SOC 2 Type II and ISO 27001 audits, but the reports are only available on request.
-
No
Transparency report Weight 2 of 3
Does the provider regularly publish how many government and legal requests it receives and how it responds?
No transparency report or government request policy is published.
-
No
Tells users about requests Weight 1 of 3
Does the provider promise to tell users about requests for their data, unless a court forbids it?
No published policy on notifying users about data requests.
-
Partial
No training on your data Weight 3 of 3
Are prompts, chats and files kept out of model training by default?
Chats on Free and Pro plans are used for training by default, with an opt-out setting.
-
No
Runs locally Weight 2 of 3
Can the assistant run on your own device or server, so prompts never leave it?
Hosted only.
-
Partial
Limited chat retention Weight 2 of 3
Are chats deleted by default or on request, with no long-term server copy?
Chats are kept until deleted. Deleted data may be retained in backend systems for policy enforcement or legal reasons.
-
No
No account needed Weight 1 of 3
Can it be used without an account or personal details?
A Mistral account is required.
Automated tests
-
Yes
TLS configuration Weight 2 of 3
Does the website pass the Qualys SSL Labs test with a grade of A or better?
Grade A+
-
Partial
Security headers Weight 1 of 3
Does the website pass the Mozilla HTTP Observatory test with a grade of A or better?
Grade B+ (80/100+)
-
Not tested yet
Modern web standards Weight 1 of 3
Does the website score 90% or higher on the Internet.nl website test?
Not tested yet.