# Mistral Vibe privacy rating

AI assistant from French company Mistral AI, formerly called Le Chat, for chat, research, documents and coding tasks. Available on the web and in mobile apps.

## Summary

Mistral Vibe scores 33 out of 100 (grade F) on the AI assistants criteria. It meets 2 of 12 criteria: no ads or data sales and TLS configuration. It partly meets independent audit, security headers, no training on your data and limited chat retention. It does not meet open source, no trackers or telemetry, transparency report, tells users about requests, runs locally and no account needed. It is based in France: Nine Eyes member; EU member (GDPR). Automated tests: SSL Labs grade A+ and Mozilla HTTP Observatory grade B+.

- Website: https://mistral.ai/products/vibe/
- Jurisdiction: France. Nine Eyes member. EU member (GDPR).
- Platforms: Web, Android, iOS
- Home page trackers: Google Tag Manager
- Category: [AI assistants](https://privacyratings.com/ai-assistants/)
- Grade: F (33/100)

## Criteria

| Criterion | Answer | Note | Evidence |
| --- | --- | --- | --- |
| Open source | No | Closed source. Some Mistral models are published with open weights, but the assistant is not open source. |  |
| No trackers or telemetry | No | The website uses analytics cookies and partner marketing cookies, and the Android app includes Sentry. | https://help.mistral.ai/en/articles/347616-do-you-use-cookies-at-mistral-and-why |
| No ads or data sales | Yes | Funded by subscriptions and business sales. Conversations are not used for advertising. | https://help.mistral.ai/en/articles/347633-do-you-use-my-conversations-with-vibe-to-show-me-ads |
| Independent audit | Partial | Mistral has SOC 2 Type II and ISO 27001 audits, but the reports are only available on request. | https://help.mistral.ai/en/articles/347638-do-you-have-soc-2-or-iso-27001-certification |
| Transparency report | No | No transparency report or government request policy is published. |  |
| Tells users about requests | No | No published policy on notifying users about data requests. |  |
| TLS configuration | Yes | Grade A+ | https://www.ssllabs.com/ssltest/analyze.html?d=chat.mistral.ai&hideResults=on |
| Security headers | Partial | Grade B+ (80/100+) | https://developer.mozilla.org/en-US/observatory/analyze?host=chat.mistral.ai |
| Modern web standards | Not tested yet | Not tested yet. |  |
| No training on your data | Partial | Chats on Free and Pro plans are used for training by default, with an opt-out setting. | https://help.mistral.ai/en/articles/455207-can-i-opt-out-of-my-input-or-output-data-being-used-for-training |
| Runs locally | No | Hosted only. |  |
| Limited chat retention | Partial | Chats are kept until deleted. Deleted data may be retained in backend systems for policy enforcement or legal reasons. | https://help.mistral.ai/en/articles/347613-can-i-delete-a-chat-conversation |
| No account needed | No | A Mistral account is required. |  |

Source: https://privacyratings.com/ai-assistants/mistral-vibe/
Edit: https://github.com/privacyratings/privacyratings.com/edit/main/ratings/ai-assistants/mistral-vibe.md