Trust Center: AI models

Mistral: EU model with zero data retention.

Mistral AI is a French provider. Canvas uses the EU endpoint exclusively, under a zero-data-retention setup: inputs and outputs are not stored.

Request documents Back to Trust Center

EU legal entity, EU endpoint Zero data retention active No training on your data

At a glance

The facts about Mistral on Canvas

Question	Answer
Model	Mistral Large, current generation (vision-capable)
Use on Canvas	Image recognition during development (e.g. screenshots) and as a selectable build model per repository
Provider & legal entity	Mistral AI, Paris, France (RCS Paris 952 418 325): an EU company under EU law
Route	La Plateforme, EU endpoint; Canvas does not use Mistral's separately offered US endpoint
Data residency	EU
Training on your data	No. Mistral does not use paying customers' API data for training
Retention by the provider	Zero data retention on the stateless endpoints Canvas uses: inputs and outputs are not stored
Human review by the provider	Not applicable; without storage there is nothing to review
Encryption	AES-256 at rest, TLS 1.2+ in transit
Certifications	SOC 2 Type II, ISO 27001, ISO 27701; evidence via the Mistral Trust Center
Transfer mechanism	Public data processing agreement (DPA) with EU Standard Contractual Clauses; on the EU path Canvas uses, no third-country transfer takes place

Where your data goes

Into the EU, and stored nowhere

Processing via the EU endpoint of La PlateformeEU

Zero data retention: no storage of inputs and outputsZDR

Use of Mistral's US endpointnone

Transparency: for certain add-on features, Mistral reserves the right to transfer data to subprocessors outside the EU, protected by safeguards under Art. 46 GDPR. Canvas does not use those features; it uses stateless endpoints under zero data retention only. Mistral publishes its current subprocessor list in its Trust Center.

Versions & model lifecycle

Current generation, announced transitions

In the catalog: Mistral Large in its current generation. A generation change appears visibly in the model catalog, never as a silent swap.
Deprecations with notice. Mistral maintains public deprecation windows of typically several months; Canvas migrates to the successor generation in good time.

Your control in Canvas

An EU model in the default catalog

Part of the defaults. As an EU model, Mistral can be added to the default catalog by guardrail managers; builders then select it per repository.
Visible residency. The EU label is shown at every selection; for repositories handling personal data, Canvas recommends Local or EU.
Recorded. Model assignments, requests and approvals are fully written to the audit trail.

How model selection works in the product: Documentation, AI models.

Sources & documents

Verify it yourself

Mistral Data Processing Addendum (public DPA with Standard Contractual Clauses).
Mistral on data storage (EU hosting by default) and Privacy & Data Controls (no training on API data).
Mistral Trust Center with certifications and the subprocessor list.
Canvas DPA with the technical and organizational measures.

Questions about privacy and security: support@canvas.software. Responsible entity: Canvas AILabs GmbH, Knorrpromenade 8, 10245 Berlin, HRB 289368 (Amtsgericht Charlottenburg).