Registry / compare
Mistral La Plateforme vs Mistral via Azure AI
The same dimension can grade differently depending on who serves the model. Every cell links to its source; grades are evidence grades, not endorsements.
| Dimension | Mistral La Plateforme | Mistral via Azure AI |
|---|---|---|
| SOC 2 Type II | ◐Yes, sales-gated Mistral states the SOC 2 report is available only on request through its Trust Center, confirming the report is not publicly downloadable. | ◐Yes, sales-gated Mistral’s own compliance page confirms SOC 2 Type II coverage but states the report is only available on request, making it sales‑gated; platform‑level SOC 2 does not apply to... |
| ISO 27001 | ◐Yes, sales-gated Mistral's own help page confirms ISO 27001/27701 compliance; obtaining the actual Compliance Reports requires a request through the Trust Center, matching the sales-gated definition. | ◐Yes, sales-gated Mistral’s own Trust Center lists an ISO/IEC 27001:2022 certificate, but access is gated, and this developer‑held certification covers the model when offered through Azure AI. |
| ISO 42001 | ○No public evidence The provider's public compliance page lists SOC 2 and ISO 27001 but makes no mention of ISO/IEC 42001, and no authoritative public document was found. | ◔Partial Verified: Microsoft (platform) holds ISO 42001 on its own blog; the model developer Mistral holds only ISO 27001/27701 and SOC 2 (trust.mistral.ai), so the developer has no... |
| Trust center | ●Yes, public The publicly accessible trust.mistral.ai site loads without login and displays a Trust Center page, confirming a maintained compliance portal. | ●Yes, public Microsoft provides a publicly accessible Service Trust Portal, serving as a maintained compliance portal for its cloud services, including Azure AI offerings. |
| HIPAA BAA | ◐Yes, sales-gated Mistral's own trust center publicly lists a "HIPAA Compliance with Mistral AI" document stating it offers a BAA for qualifying services, so there is public evidence the BAA... | ?Unclear Public HIPAA page lists Azure services in scope but does not explicitly include Mistral, and a Microsoft staff answer states compliance is not guaranteed, leaving coverage unclear. |
| GDPR DPA | ●Yes, public The DPA publicly defines and incorporates the EU SCCs and links to the Trust Center where the subprocessor list is openly listed. | ●Yes, public Azure's public privacy page provides a downloadable DPA, links to EU SCCs, and a publicly listed Subprocessor List, satisfying the requirement for a public DPA with SCCs and a... |
| No-training default | ◔Partial Mistral's own help page confirms the quote verbatim and shows the no-training-by-default commitment is conditional on the pay-as-you-go plan, making "partial" the accurate fit. | ●Yes, public Microsoft’s public FAQ for Azure Foundry Models explicitly states that customer data is not used to retrain models, covering Mistral via Azure AI. |
| Retention / ZDR | ◐Yes, sales-gated The page publicly documents retention control and states ZDR is only available via a gated pay‑as‑you‑go plan and request, matching yes_sales_gated. | ◐Yes, sales-gated The recorded source was about Azure OpenAI (OpenAI's models), not Mistral via Azure AI. The correct source is Microsoft's "Data, privacy, and security for Models sold by Azure"... |
| Residency | ●Yes, public Mistral's own docs provide self-serve EU regional endpoints; the recorded quote is verbatim and the value is accurate. | ●Yes, public Microsoft's official region-availability page lists Mistral-Large-3 and mistral-medium-3-5 (models sold by Azure) with checkmarks in the Data Zone Standard tables, confirming... |
| GPAI Code | ●Yes, public The EU GPAI Code of Practice signatories list on the European Commission site explicitly includes Mistral AI, confirming the model developer is a signatory. | ●Yes, public The European Commission's GPAI Code of Practice signatory list on the official page includes "Mistral AI", confirming the model developer is a signatory. |
| Art. 53 summary | ○No public evidence Mistral's own help page says they do not disclose training datasets and no Art. 53 summary is found on their site, so no public summary exists. | ○No public evidence Mistral explicitly says it does not disclose training datasets, indicating no public Article 53 training‑data summary has been published. |