Every field is source-linked and dated.See the rubric behind the grades.

How we grade
Sovereign AI Registry
ExploreBlogGov accessCertsCountries

Footer

Sovereign AI Registry

The compliance registry for AI vendors. Data residency, training defaults, retention, subprocessors and EU AI Act posture — one row per vendor, product and deployment, every claim linked to its source.

Registry

  • Explore vendors
  • Deployment models
  • Categories
  • Countries

Compliance

  • Gov access exposure
  • EU AI Act roles
  • Certifications

Resources

  • FAQ
  • Methodology
Built with ShipMore·Build yours →

© 2026 Sovereign AI Registry. All rights reserved.

  1. Explore
  3. La Plateforme / Le Chat Enterprise
LP

La Plateforme / Le Chat Enterprise

Sovereignty grade A (86/100). EU residency by default; no training on your data; self-hostable. Mistral AI, France.

Category
foundation-model
Categories
Foundation model
Countries
France
EU AI Act role
General-purpose AI (GPAI)
Deployments
Hosted API
Certifications
ISO 27001ISO 27701SOC 2 Type II
Government access exposure
No non-EU government access

Details

Deployment
hosted
Hq Country
France
Hq City
Paris
Ownership
private-eu-owned
Founded
2023
Trust Center Url
trust.mistral.ai
Training Default
never
Residency Options
EU (default), non-EU providers in exceptional cases under SCCs
Gov Access Exposure
none-eu
Eu Ai Act Role
gpai
Certs
ISO 27001, ISO 27701, SOC 2 Type II, GDPR-native
DPA available
yes
Zero Retention Available
Yes
Self Host Option
Yes
Retention Default
Paid API / Le Chat Enterprise: 30 rolling days (abuse monitoring) then deleted; ZDR available on the Scale plan for stateless endpoints.
Retention Exceptions
FREE 'Experiment'/Le Chat (also Pro/Education) tiers TRAIN on data by default (opt-out via Admin Console). Experimental 'Labs' models can train regardless of plan. Fine-tuning data retained until deleted.
Subprocessors
Microsoft Azure (SE/NO), Google Cloud (NL/BE + US API endpoint), Mistral Compute (FR), CoreWeave (EEA — inference), Kong (EEA), Ory (BE/DE), Get Lago (IE), Stripe (US), Black Forest Labs (US), Brave (US), Foundrylabs/E2B (FR/BE/NL), Resend (IE), Twilio (US), Intercom (IE), Scaleway (FR), Latitude.sh (worldwide), OVHcloud (DE/US), Backblaze (NL), Vultr (worldwide), Sentry (EEA), Mistral AI affiliates, Cloudflare (worldwide), CrowdStrike (EEA/US), Wiz (EEA)
Subprocessor Count
25
Transfer Mechanism
intra-eu
Eu Procurement Ready
pass
Eu Procurement Reason
French/EU-owned, EU residency by default, no CLOUD Act corporate exposure, never-train on paid API/Enterprise. Signed the EU GPAI Code of Practice (2025-07). Caveat: only paid tiers are never-train; free tiers train by default.
Last Policy Change
2025-05-07T00:00:00.000Z
Change Summary
Launched Le Chat Enterprise (dedicated enterprise tier, Mistral Medium 3); backed the EU GPAI Code of Practice in July 2025.
Prior Value
No dedicated enterprise assistant tier.
Training Evidence Url
legal.mistral.ai/terms/privacy-policy
Training Claim Basis
stated
Training Confidence
high
Residency Evidence Url
legal.mistral.ai/terms/privacy-policy
Residency Claim Basis
stated
Residency Confidence
high
Retention Evidence Url
legal.mistral.ai/terms/privacy-policy
Retention Claim Basis
stated
Retention Confidence
high
Subprocessors Evidence Url
trust.mistral.ai/subprocessors
Subprocessors Claim Basis
stated
Subprocessors Confidence
high
Residency Class
eu-default
Portability / Exit Path
serves-open-models
Subprocessor Jurisdiction
mixed

Change history

  1. Sep 2, 2026Subprocessors

    Microsoft Azure (SE/NO), Google Cloud (NL/BE + US API endpoint), Mistral Compute (FR), CoreWeave (EEA — inference), Kong (EEA), Ory (BE/DE), Get Lago (IE), Stripe (US), Black Forest Labs (US), Brave (US), Foundrylabs/E2B (FR/BE/NL), Merge API (US), Resend (IE), Twilio (US), Intercom (IE), Scaleway (FR), Latitude.sh (worldwide), OVHcloud (DE/US), Backblaze (NL), Vultr (worldwide), Sentry (EEA), Mistral AI affiliates, Cloudflare (worldwide), CrowdStrike (EEA/US), Wiz (EEA) → Microsoft Azure (SE/NO), Google Cloud (NL/BE + US API endpoint), Mistral Compute (FR), CoreWeave (EEA — inference), Kong (EEA), Ory (BE/DE), Get Lago (IE), Stripe (US), Black Forest Labs (US), Brave (US), Foundrylabs/E2B (FR/BE/NL), Resend (IE), Twilio (US), Intercom (IE), Scaleway (FR), Latitude.sh (worldwide), OVHcloud (DE/US), Backblaze (NL), Vultr (worldwide), Sentry (EEA), Mistral AI affiliates, Cloudflare (worldwide), CrowdStrike (EEA/US), Wiz (EEA)

    Source
  2. Aug 3, 2026Subprocessors

    Microsoft Azure (SE/NO), Google Cloud (NL/BE + US API endpoint), Mistral Compute (FR), CoreWeave (EEA — inference), Kong (EEA), Ory (BE/DE), Get Lago (IE), Stripe (US), Black Forest Labs (US), Brave (US), Foundrylabs/E2B (FR/BE/NL), Merge API (US), Resend (IE), Twilio (US), Intercom (IE), Scaleway (FR), Latitude.sh (worldwide), OVHcloud (DE/US), Backblaze (NL), Vultr (worldwide), Sentry (EEA), Mistral AI affiliates, Cloudflare (worldwide), CrowdStrike (EEA/US), Wiz (EEA)

    Source
  3. Aug 3, 2026Governance Grade

    B+ → A

  4. Aug 3, 2026Governance Grade

    A- → B+

At a glance
Governance Grade
A
Governance Score
86
EC SOV-2 Legal & Jurisdictional (0-4)
3
EC SOV-3 Data & AI (0-4)
2
Website

Similar

Read AI · Sep 2026

RARead AI meeting assistant

Sovereignty grade F (24/100). No EU residency. Read AI, United States.

meeting-ai
Governance Grade
F
Fathom · Aug 2026

FAFathom AI notetaker

Sovereignty grade D (35/100). No EU residency. Fathom, United States.

meeting-ai
Governance Grade
D
Granola · Sep 2026

GAGranola AI notepad

Sovereignty grade D (30/100). No EU residency. Granola, United States.

meeting-ai
Governance Grade
D

More Categories

  • Coding assistant15
  • meeting-ai13
  • Sovereign host13
  • Inference host13
  • SaaS-embedded11
  • Foundation model11
  • Cloud platform7

More Countries

  • United States45
  • Germany9
  • France7
  • Switzerland5
  • Singapore3
  • Israel2
  • United Kingdom2
  • China2
  • Netherlands2

More EU AI Act role

  • Deployer59
  • General-purpose AI (GPAI)10
  • provider9
  • GPAI with systemic risk5

More Deployments

  • Hosted API68
  • Self-hosted weights6
  • On-premise6
  • Private VPC2

More Certifications

  • SOC 2 Type II46
  • ISO 2700136
  • ISO 4200113
  • ISO 270177
  • ISO 277017
  • ISO 270186
  • HDS5
  • HIPAA4
  • CSA STAR4
  • C54
  • ISO 90013
  • PCI DSS3
  • FedRAMP High3
  • ISO 27001:20223
  • SOC 2 (type unverified)2
  • ISO 500012
  • BSI C52
  • SOC 32
  • FedRAMP2
  • GDPR2
  • CSA STAR Level 12

More Government access exposure

  • US CLOUD Act44
  • No non-EU government access27
  • Mixed jurisdiction9
  • PRC National Intelligence Law2