Every field is source-linked and dated.See the rubric behind the grades.

How we grade
Sovereign AI Registry
ExploreBlogGov accessCertsCountries

Footer

Sovereign AI Registry

The compliance registry for AI vendors. Data residency, training defaults, retention, subprocessors and EU AI Act posture — one row per vendor, product and deployment, every claim linked to its source.

Registry

  • Explore vendors
  • Deployment models
  • Categories
  • Countries

Compliance

  • Gov access exposure
  • EU AI Act roles
  • Certifications

Resources

  • FAQ
  • Methodology
Built with ShipMore·Build yours →

© 2026 Sovereign AI Registry. All rights reserved.

  1. Explore
  2. Vibe for Code (formerly Mistral Code)
VF

Vibe for Code (formerly Mistral Code)

Sovereignty grade A (94/100). You control where it runs; no training on your data; on-prem. Mistral AI, France.

Category
coding-assistant
Categories
Coding assistant
Countries
France
EU AI Act role
General-purpose AI (GPAI)
Certifications
ISO 27001SOC 2 Type II
Government access exposure
No non-EU government access
Deployments
On-premise

Details

Deployment
on-prem
Hq Country
France
Hq City
Paris
Ownership
private-eu-owned
Founded
2023
Trust Center Url
trust.mistral.ai
Training Default
never
Residency Options
on-premises, including air-gapped GPUs, customer VPC, dedicated Mistral Cloud with full data residency
Gov Access Exposure
none-eu
Eu Ai Act Role
gpai
Certs
ISO 27001, SOC 2 Type II
DPA available
yes
Zero Retention Available
Yes
Self Host Option
Yes
Retention Default
In the on-premises and VPC deployments the models run inside the customer's security perimeter, so there is no Mistral-side inference retention to publish. Customers can fine-tune or post-train the underlying models on private repositories and distil lightweight variants — the weights are in the customer's hands, not rented.
Retention Exceptions
The product was renamed during the period covered by this pass: mistral.ai/products/mistral-code now 404s and the offering is sold as Vibe for Code. The launch announcement and the coding solutions page both still describe the same three deployment shapes — on-prem, VPC, dedicated cloud — so the substance is unchanged.
Subprocessors
none in the inference path for an on-premises deployment — Mistral's public list at trust.mistral.ai/subprocessors covers the hosted products
Subprocessor Count
0
Transfer Mechanism
intra-eu
Eu Procurement Ready
pass
Eu Procurement Reason
The strongest commercial coding assistant in the registry for a European buyer, and the only one where the vendor, the models and the deployment are all inside the Union at once. Codestral, Codestral Embed, Devstral and Mistral Medium run on the customer's own GPUs — Abanca keeps core banking code on-prem, Capgemini deploys for 1,500+ developers in regulated industries — and the customer can fine-tune on private repositories, which no closed copilot in this batch offers. It stops short of the open-weights rows because the stack is mixed rather than permissive: Devstral is Apache-2.0, Codestral ships under the Mistral Non-Production Licence, and Mistral Medium is proprietary, so exit is cheap for some of it and not for all of it. Worth knowing before signing: the product is built on the open-source Continue project, whose repository went read-only in 2026 — Mistral maintains the enterprise distribution, but the upstream is no longer moving.
Training Evidence Url
mistral.ai/news/mistral-code
Training Claim Basis
stated
Training Confidence
high
Residency Evidence Url
mistral.ai/solutions/coding
Residency Claim Basis
stated
Residency Confidence
high
Retention Evidence Url
mistral.ai/news/mistral-code
Retention Claim Basis
stated
Retention Confidence
high
Subprocessors Evidence Url
trust.mistral.ai/subprocessors
Subprocessors Claim Basis
stated
Subprocessors Confidence
high
Residency Class
customer-controlled
Portability / Exit Path
open-weights-restricted
Subprocessor Jurisdiction
structurally-none
Underlying model providers
Mistral AI (Codestral, Codestral Embed, Devstral, Mistral Medium)
At a glance
Governance Grade
A
Governance Score
94
EC SOV-2 Legal & Jurisdictional (0-4)
3
EC SOV-3 Data & AI (0-4)
3
Website

Similar

Fathom · Aug 2026

FAFathom AI notetaker

Sovereignty grade D (35/100). No EU residency. Fathom, United States.

meeting-ai
Governance Grade
D
Granola · Sep 2026

GAGranola AI notepad

Sovereignty grade D (30/100). No EU residency. Granola, United States.

meeting-ai
Governance Grade
D
Fireflies.ai · Sep 2026

FNFireflies.ai notetaker

Sovereignty grade D (40/100). No EU residency; no training on your data. Fireflies.ai, United States.

meeting-ai
Governance Grade
D

More Categories

  • Coding assistant15
  • meeting-ai13
  • Sovereign host13
  • Inference host13
  • SaaS-embedded11
  • Foundation model11
  • Cloud platform7

More Countries

  • United States45
  • Germany9
  • France7
  • Switzerland5
  • Singapore3
  • Israel2
  • United Kingdom2
  • China2
  • Netherlands2

More EU AI Act role

  • Deployer59
  • General-purpose AI (GPAI)10
  • provider9
  • GPAI with systemic risk5

More Certifications

  • SOC 2 Type II46
  • ISO 2700136
  • ISO 4200113
  • ISO 270177
  • ISO 277017
  • ISO 270186
  • HDS5
  • HIPAA4
  • CSA STAR4
  • C54
  • ISO 90013
  • PCI DSS3
  • FedRAMP High3
  • ISO 27001:20223
  • SOC 2 (type unverified)2
  • ISO 500012
  • BSI C52
  • SOC 32
  • FedRAMP2
  • GDPR2
  • CSA STAR Level 12

More Government access exposure

  • US CLOUD Act44
  • No non-EU government access27
  • Mixed jurisdiction9
  • PRC National Intelligence Law2

More Deployments

  • Hosted API68
  • Self-hosted weights6
  • On-premise6
  • Private VPC2